Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba333bea-74e8-475a-abf0-208eb0cb5f2c/bf4f263f43d4f183127fbf2ce2309d961a723604.roa
File:                     bf4f263f43d4f183127fbf2ce2309d961a723604.roa (raw, json)
Hash identifier:          2cqPbJS4lvGcl+k3IEsas4boNbE2M1Jg5wlBZfjiMI0=
Subject key identifier:   4E:E2:3A:D6:CF:24:41:79:63:0F:66:9E:48:2C:D1:0C:1A:9E:2D:99
Certificate issuer:       /CN=9b4ea1b18cc4c2cb9f64b24fda89c43ab947a741
Certificate serial:       0B7C78
Authority key identifier: 59:1B:ED:92:70:13:9E:B4:B8:1E:33:A3:E4:83:60:44:8F:15:6C:CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b4ea1b18cc4c2cb9f64b24fda89c43ab947a741.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba333bea-74e8-475a-abf0-208eb0cb5f2c/bf4f263f43d4f183127fbf2ce2309d961a723604.roa
Signing time:             Wed 24 Mar 2021 14:44:53 +0000
ROA not before:           Wed 24 Mar 2021 14:44:53 +0000
ROA not after:            Tue 24 Mar 2026 14:44:53 +0000
asID:                     267797
IP address blocks:        45.170.224.0/22 maxlen: 24
                          2803:dfa0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 752760 (0xb7c78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b4ea1b18cc4c2cb9f64b24fda89c43ab947a741
        Validity
            Not Before: Mar 24 14:44:53 2021 GMT
            Not After : Mar 24 14:44:53 2026 GMT
        Subject: CN=bf4f263f43d4f183127fbf2ce2309d961a723604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:f4:98:9b:ad:53:ac:e7:fa:d5:1f:d5:61:
                    45:5d:35:84:04:34:3a:d1:98:2d:32:39:34:f8:2c:
                    dd:89:58:3e:d1:f9:78:99:2f:e8:29:1d:bf:cb:67:
                    93:9f:35:b6:1f:e1:52:e6:c4:60:f2:79:7a:5f:f5:
                    5f:8f:f5:40:7a:43:ac:17:b1:d9:a9:97:77:be:5d:
                    bf:d9:df:71:6d:8e:85:1b:f4:41:ae:4d:1d:fb:5b:
                    83:4d:01:2e:c8:1f:ad:24:14:bf:80:d6:67:9b:eb:
                    7f:20:54:c7:cc:d8:a8:d8:53:bf:9f:de:2d:fc:a9:
                    18:a6:9a:c3:1e:97:e9:be:af:7d:c9:7a:a9:ba:7a:
                    1b:9f:c9:ab:a4:4b:34:9b:ac:23:65:c8:44:9c:1c:
                    87:a9:bb:d2:92:2a:93:0f:cb:44:3f:87:86:bc:e3:
                    3a:61:e4:c4:6d:5c:e4:6e:1b:17:22:ea:9d:21:98:
                    88:83:d2:92:94:dd:bb:79:ad:a3:f4:62:b7:4d:30:
                    38:66:98:ad:f0:14:8f:b5:80:6a:2b:82:51:c7:2a:
                    74:1c:b9:fc:a4:be:14:90:72:3e:33:57:13:35:ca:
                    d0:0e:4f:af:16:e5:10:f4:e4:3d:d4:04:09:4e:4b:
                    0b:4b:e1:53:f7:2b:92:39:a5:79:b5:26:8c:3f:70:
                    df:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:E2:3A:D6:CF:24:41:79:63:0F:66:9E:48:2C:D1:0C:1A:9E:2D:99
            X509v3 Authority Key Identifier:
                keyid:59:1B:ED:92:70:13:9E:B4:B8:1E:33:A3:E4:83:60:44:8F:15:6C:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b4ea1b18cc4c2cb9f64b24fda89c43ab947a741.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba333bea-74e8-475a-abf0-208eb0cb5f2c/bf4f263f43d4f183127fbf2ce2309d961a723604.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba333bea-74e8-475a-abf0-208eb0cb5f2c/9b4ea1b18cc4c2cb9f64b24fda89c43ab947a741.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.224.0/22
                IPv6:
                  2803:dfa0::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:db:f7:8f:01:82:0c:29:74:7a:34:35:6e:98:b9:ba:6f:db:
         85:3a:1c:a0:c1:9d:d9:57:cb:92:d8:98:c5:95:27:5d:1a:b7:
         28:f9:47:88:be:52:3b:d2:79:32:39:68:67:de:0c:cc:2a:dc:
         0b:f2:bc:dc:9f:8e:30:1b:0e:32:dc:ea:ec:4f:d0:d6:c6:c5:
         2d:94:b2:5c:27:e2:43:e5:ba:68:e1:0d:45:22:e7:ad:ab:b5:
         5b:ef:bb:dd:e3:a9:4c:25:35:79:1e:cf:c2:c6:9b:6b:d9:48:
         0e:d9:15:d4:80:66:c8:47:3e:10:5f:18:a2:48:24:b9:26:0f:
         92:63:b0:6b:05:84:c1:a7:d9:95:dd:46:b7:fe:72:38:0b:04:
         47:f6:69:d8:dd:17:6a:7e:f3:27:cb:0e:13:36:f4:da:55:ee:
         f9:85:dc:74:f2:bf:ba:76:08:72:59:38:4d:ff:8e:c3:d3:7f:
         ca:4a:96:ec:37:31:aa:b7:5e:97:4e:c8:57:e1:03:ad:44:b0:
         a0:56:d2:30:1e:f2:57:b8:41:ed:ad:e8:da:8c:42:80:5a:40:
         4e:0c:5f:bc:7a:c6:5b:0a:78:9e:4c:3d:e0:e3:7a:e3:62:0c:
         5c:ba:9f:e3:72:20:72:92:e2:af:ca:2c:1e:ae:ff:46:76:2d:
         68:f3:a1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----