Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c667d6a0-1dd1-4fd6-b2fa-950bd5aae6e4/f6bb07fd168b73971739242d43e931391eb16507.roa
File:                     f6bb07fd168b73971739242d43e931391eb16507.roa (raw, json)
Hash identifier:          G+4bMBoRIHGHMtYN+St1bCBxokfQJ3mpeoykg2Cakqc=
Subject key identifier:   18:E5:A1:29:E9:B9:84:E7:EB:E9:CF:C3:BD:16:4D:36:92:D4:4D:63
Certificate issuer:       /CN=e37a218ee29c865f53e2c74290e5e5ec58887802
Certificate serial:       062FFC
Authority key identifier: 14:66:08:86:05:BD:E6:07:8B:B8:DD:FF:CA:CD:86:1B:D5:1D:D1:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e37a218ee29c865f53e2c74290e5e5ec58887802.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c667d6a0-1dd1-4fd6-b2fa-950bd5aae6e4/f6bb07fd168b73971739242d43e931391eb16507.roa
Signing time:             Wed 24 Mar 2021 14:33:11 +0000
ROA not before:           Wed 24 Mar 2021 14:33:11 +0000
ROA not after:            Tue 24 Mar 2026 14:33:11 +0000
asID:                     61466
IP address blocks:        45.180.68.0/22 maxlen: 24
                          2803:a960::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405500 (0x62ffc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e37a218ee29c865f53e2c74290e5e5ec58887802
        Validity
            Not Before: Mar 24 14:33:11 2021 GMT
            Not After : Mar 24 14:33:11 2026 GMT
        Subject: CN=f6bb07fd168b73971739242d43e931391eb16507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3c:85:d5:73:66:cd:14:4e:17:e0:b2:c0:46:
                    1b:41:32:c5:d5:76:5d:82:19:4a:1e:2e:91:07:d7:
                    e3:6f:1c:ec:ab:db:2b:b4:b5:63:c1:a3:a9:63:d2:
                    3e:33:e7:d6:19:d3:8e:67:6f:d0:6e:68:ee:10:8d:
                    0b:0e:93:a6:ad:e5:ad:c6:c3:4d:dd:34:d5:2e:ca:
                    2e:de:3d:67:4f:29:84:07:c2:1a:64:1b:28:d6:1c:
                    fd:9c:63:8b:59:6b:05:e8:3b:8e:1b:bb:48:b2:2f:
                    0a:64:ef:0b:17:6f:db:92:57:6a:c0:7a:a1:60:c9:
                    aa:90:3a:58:c4:fa:36:7c:ec:d8:ad:76:d4:ac:ad:
                    d2:96:80:67:0a:9f:fa:0b:26:a6:c2:dc:d3:ea:c9:
                    d0:51:92:ce:96:b1:8b:43:5f:43:b6:50:08:aa:f8:
                    2c:7e:30:e8:8f:b6:0a:a8:f3:d4:ad:c7:32:c3:42:
                    fc:2f:80:55:89:0e:fe:86:15:52:2e:10:db:a1:13:
                    3c:e2:67:06:fe:df:31:7a:ff:67:5f:7c:84:f9:24:
                    36:83:19:55:af:46:3c:b2:3d:8a:43:99:22:57:21:
                    82:eb:ce:92:68:6b:1b:38:e5:6f:fd:61:f4:fd:06:
                    03:0e:11:4f:63:98:46:5e:94:de:42:6e:e9:26:84:
                    89:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E5:A1:29:E9:B9:84:E7:EB:E9:CF:C3:BD:16:4D:36:92:D4:4D:63
            X509v3 Authority Key Identifier:
                keyid:14:66:08:86:05:BD:E6:07:8B:B8:DD:FF:CA:CD:86:1B:D5:1D:D1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e37a218ee29c865f53e2c74290e5e5ec58887802.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c667d6a0-1dd1-4fd6-b2fa-950bd5aae6e4/f6bb07fd168b73971739242d43e931391eb16507.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c667d6a0-1dd1-4fd6-b2fa-950bd5aae6e4/e37a218ee29c865f53e2c74290e5e5ec58887802.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.68.0/22
                IPv6:
                  2803:a960::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:27:06:50:5d:ca:2e:14:77:6e:f4:5a:8f:fe:e0:c9:d5:40:
         a7:63:6f:dc:3d:8b:c3:db:53:e2:ba:ae:41:dd:e4:27:38:8f:
         d4:ba:28:43:8b:e1:1c:7e:cb:23:1e:41:26:41:b2:05:f1:61:
         45:06:c1:1e:ea:69:29:52:30:62:e4:7d:43:5f:84:13:0f:3a:
         80:0d:58:4c:c0:aa:57:7c:2f:0b:67:2b:8d:97:61:4c:5e:61:
         04:a6:63:b5:79:eb:17:d9:a4:65:09:1d:35:a0:2f:26:7a:ab:
         9f:97:17:d2:79:72:e6:db:f3:ed:69:d7:57:00:96:78:7c:8b:
         40:56:6c:b3:e2:c6:25:c4:86:9d:0f:73:b3:76:c7:97:d4:f2:
         51:3d:29:47:9a:31:cf:42:ba:60:d7:eb:c8:f4:1f:fc:32:88:
         5f:50:0c:87:a5:e2:24:71:e8:6b:8e:3a:cc:25:6d:28:fa:24:
         a3:49:38:90:54:e7:10:99:ba:67:bc:56:dd:81:77:51:d4:e7:
         ca:29:ab:08:7c:c5:9c:5e:7b:76:ef:4c:52:c2:10:ef:7e:af:
         ec:b3:e9:f7:f1:de:68:51:fb:ef:26:33:c7:52:6b:ba:b2:2d:
         fd:90:73:97:19:6d:65:2b:60:1c:0e:6b:47:9b:c2:6f:0a:1f:
         33:7e:0d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----