Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/9f41252339e67ffb73de2544c379e4166e0f73f4.roa
File:                     9f41252339e67ffb73de2544c379e4166e0f73f4.roa (raw, json)
Hash identifier:          kjyTrRqCJJq2cDLHv8K2mpnur37UktNNdUHpS5NOunI=
Subject key identifier:   66:C5:96:9E:46:8D:F0:07:CB:B4:DA:EC:F9:B4:A1:55:0E:AE:3D:EA
Certificate issuer:       /CN=92f99288a81ebe400af2542cf1335efd001a7734
Certificate serial:       0D1E86
Authority key identifier: 48:EB:CE:32:EB:E8:D3:56:71:5F:74:23:E9:91:02:5E:16:3B:39:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92f99288a81ebe400af2542cf1335efd001a7734.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/9f41252339e67ffb73de2544c379e4166e0f73f4.roa
Signing time:             Wed 24 Mar 2021 14:36:46 +0000
ROA not before:           Wed 24 Mar 2021 14:36:44 +0000
ROA not after:            Tue 24 Mar 2026 14:36:44 +0000
asID:                     265696
IP address blocks:        45.5.172.0/22 maxlen: 23
                          2801:18:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859782 (0xd1e86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92f99288a81ebe400af2542cf1335efd001a7734
        Validity
            Not Before: Mar 24 14:36:44 2021 GMT
            Not After : Mar 24 14:36:44 2026 GMT
        Subject: CN=9f41252339e67ffb73de2544c379e4166e0f73f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:04:e0:44:ce:c0:98:5e:69:90:d9:ce:1d:a5:
                    af:c0:24:84:ea:ef:91:85:6a:29:91:ff:57:3a:2c:
                    23:1c:9c:5c:8c:3a:c9:69:70:59:91:a6:e3:6e:be:
                    80:3a:90:10:23:cf:e4:8d:c4:5f:14:7b:35:db:78:
                    43:5d:71:d7:f8:62:f6:4c:a7:42:e1:05:21:e9:7f:
                    d8:b0:32:21:1c:a5:0e:b2:4c:16:10:bf:e7:a7:45:
                    cd:a1:e0:97:4a:2d:e4:ae:43:6d:f9:34:ca:d6:2e:
                    0a:fc:4b:0b:e0:e9:de:38:6b:e0:dc:95:f9:27:92:
                    ff:92:07:fc:bb:6c:44:a7:de:ea:80:cb:d3:73:0d:
                    ac:f1:b0:bd:e9:8b:98:24:c5:36:52:fe:da:1c:31:
                    18:27:4b:25:9b:b3:cc:d0:fd:df:18:db:06:d4:96:
                    09:ab:4b:af:e4:76:c8:82:5f:26:7f:9d:9e:36:bb:
                    6e:9b:40:a4:2f:56:88:87:db:79:bc:2a:6e:46:51:
                    82:75:03:de:8a:3c:89:7d:a0:0a:37:9b:38:11:c6:
                    4a:53:49:c7:8c:d8:73:be:6f:b9:7c:a5:23:f3:1d:
                    65:44:5e:31:53:29:83:02:d4:ef:fc:bb:fe:d5:6d:
                    95:1d:60:2e:11:43:86:74:18:da:a1:fa:21:b3:0f:
                    b9:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C5:96:9E:46:8D:F0:07:CB:B4:DA:EC:F9:B4:A1:55:0E:AE:3D:EA
            X509v3 Authority Key Identifier:
                keyid:48:EB:CE:32:EB:E8:D3:56:71:5F:74:23:E9:91:02:5E:16:3B:39:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92f99288a81ebe400af2542cf1335efd001a7734.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/9f41252339e67ffb73de2544c379e4166e0f73f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b69f6dfd-bc4d-45cc-8354-7802abb6454d/92f99288a81ebe400af2542cf1335efd001a7734.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.172.0/22
                IPv6:
                  2801:18:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:94:c7:d6:24:f3:72:29:4f:2d:2f:9b:04:66:ac:b3:7c:17:
         02:d1:2a:05:bb:1b:d6:55:03:27:39:05:3a:54:53:22:d0:f2:
         14:ef:ff:00:ab:60:21:45:0c:f5:90:9a:3e:b3:76:2d:59:4b:
         0e:23:48:43:a1:6f:6b:83:51:de:36:02:06:77:fc:01:7f:e1:
         9e:2c:d1:56:b1:1a:c0:b5:0c:d4:82:58:63:d0:17:fc:5a:7f:
         ec:6d:9d:0c:10:f3:39:20:dc:67:65:98:be:cb:63:12:c9:20:
         5b:fc:08:fa:1a:a9:0a:7d:1a:46:a7:e6:56:63:0f:cf:73:ba:
         dd:61:38:78:f8:37:09:c5:f9:82:9d:db:d7:4a:57:b0:39:74:
         89:5b:a2:1f:84:0f:f7:c2:e5:89:c2:ce:6c:f7:cf:ac:1a:b2:
         ca:c0:e8:61:9b:0f:42:b8:c1:f1:63:33:d5:f0:22:26:2b:bb:
         ec:8f:d8:45:13:4e:2f:8d:81:fa:09:16:38:73:c4:a9:24:bd:
         3c:12:b3:b9:09:1b:7f:b8:c9:26:36:8e:ff:36:d7:09:93:8a:
         01:35:4e:69:23:c7:85:36:44:26:5d:4b:58:f7:ff:35:37:33:
         8c:a1:7b:8d:e1:f8:63:8b:f6:08:64:d4:57:7e:ff:e4:9a:01:
         f9:d9:e5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----