Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1fef296-d006-4018-92a3-aef3e1db4a3c/1b15bff8d7d10f4580d11ca50a732db539731721.roa
File:                     1b15bff8d7d10f4580d11ca50a732db539731721.roa (raw, json)
Hash identifier:          wdxHtAOdtDPdVwmr/gU/f+kyNuZYa8Yk1Ex13aBJvzA=
Subject key identifier:   EC:07:0A:43:CC:12:1B:C6:F8:B0:50:F5:DB:34:DD:2D:81:5E:07:00
Certificate issuer:       /CN=ec097bb8a69269dfda881ddf27db6973bf527d7e
Certificate serial:       52FF
Authority key identifier: 25:27:AC:73:A4:EF:A5:6A:A2:07:15:EB:72:B1:78:49:37:C8:89:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec097bb8a69269dfda881ddf27db6973bf527d7e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1fef296-d006-4018-92a3-aef3e1db4a3c/1b15bff8d7d10f4580d11ca50a732db539731721.roa
Signing time:             Wed 24 Mar 2021 14:33:39 +0000
ROA not before:           Wed 24 Mar 2021 14:33:39 +0000
ROA not after:            Tue 24 Mar 2026 14:33:39 +0000
asID:                     271803
IP address blocks:        45.230.21.0/24 maxlen: 24
                          2803:5010::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21247 (0x52ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec097bb8a69269dfda881ddf27db6973bf527d7e
        Validity
            Not Before: Mar 24 14:33:39 2021 GMT
            Not After : Mar 24 14:33:39 2026 GMT
        Subject: CN=1b15bff8d7d10f4580d11ca50a732db539731721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c9:07:ce:8b:b3:4d:ef:11:8d:af:2e:b6:75:
                    16:af:ab:b3:e7:05:1e:54:b4:79:5d:97:ca:6f:11:
                    30:7a:ca:5a:ad:16:92:b4:d3:60:d6:0a:f5:d8:d2:
                    ae:fb:d6:ec:3a:9f:3f:19:30:10:f3:67:60:8f:d0:
                    1c:ef:73:95:e3:32:4a:e2:40:63:39:87:26:76:79:
                    1c:09:b0:01:ec:62:46:d1:5d:29:fc:3f:d8:20:63:
                    c7:de:7d:76:2a:85:ff:67:14:df:cd:00:a2:7a:41:
                    c5:a9:f5:c1:d7:5d:98:8c:56:33:95:78:dc:13:1a:
                    90:a8:79:33:df:ca:31:b1:54:45:cf:61:8f:b0:07:
                    3e:12:24:fe:82:49:df:ae:6c:9d:61:f4:75:4e:0e:
                    bf:27:d2:f4:cf:54:7a:0e:02:da:cc:56:e6:61:ad:
                    4b:aa:da:d6:1c:39:ef:7f:8d:05:80:c7:9d:54:81:
                    fa:76:84:2a:dc:58:dd:fa:a0:cb:91:38:ff:32:ef:
                    e4:86:ec:74:6a:26:b3:ea:3f:37:bd:60:9d:48:ba:
                    30:58:a8:fd:c4:a5:d8:a7:3c:14:12:a2:e8:73:c4:
                    11:6a:ec:fe:9a:38:ac:dd:72:04:16:63:81:13:2b:
                    59:59:cb:be:9c:87:8d:91:4d:cc:0e:cc:aa:4d:a1:
                    46:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:07:0A:43:CC:12:1B:C6:F8:B0:50:F5:DB:34:DD:2D:81:5E:07:00
            X509v3 Authority Key Identifier:
                keyid:25:27:AC:73:A4:EF:A5:6A:A2:07:15:EB:72:B1:78:49:37:C8:89:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec097bb8a69269dfda881ddf27db6973bf527d7e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1fef296-d006-4018-92a3-aef3e1db4a3c/1b15bff8d7d10f4580d11ca50a732db539731721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1fef296-d006-4018-92a3-aef3e1db4a3c/ec097bb8a69269dfda881ddf27db6973bf527d7e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.21.0/24
                IPv6:
                  2803:5010::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:d5:06:75:27:16:ed:b5:93:07:c0:92:70:ba:07:31:41:77:
         53:32:49:c2:c1:97:0f:c7:55:73:82:1c:73:ca:00:6d:28:8e:
         0f:67:74:ef:62:ee:7d:7d:78:82:98:25:25:b0:44:c1:dd:b7:
         1e:a6:c6:88:6f:b0:83:76:1c:01:2b:b0:2e:37:48:26:5e:75:
         d1:10:21:e8:56:4b:59:04:c2:13:13:19:6f:f1:06:77:f2:43:
         d0:7a:1c:cb:4d:df:14:6a:01:a3:ca:8e:59:5e:9d:0a:0f:5d:
         75:4f:aa:30:0d:aa:01:45:df:8a:0c:65:1c:0d:e3:82:4a:d1:
         bd:b0:08:46:b0:bf:a8:2c:b9:ef:4d:6a:64:b4:ea:7c:e8:dc:
         49:80:3c:04:ad:c8:d0:b0:e1:0b:dc:f1:d2:e0:d8:2c:70:e2:
         67:f1:7c:f1:cd:71:db:d5:21:65:66:cb:6e:35:e0:81:cb:be:
         66:64:6d:96:a1:18:3c:c2:28:1c:86:4e:00:79:ba:24:4e:09:
         af:8c:60:a5:bd:79:a3:70:ac:bb:1e:81:9c:dd:30:46:bd:65:
         d6:d2:15:e8:77:a5:86:67:53:fd:e3:8d:5c:80:2a:b6:ea:3d:
         33:15:a2:ac:7d:5e:cb:d6:f1:3e:f2:43:3b:a5:33:40:a8:6c:
         99:28:4e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----