Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/35c6a124cc3a280254ec171ab1ff1d37b283986c.roa
File:                     35c6a124cc3a280254ec171ab1ff1d37b283986c.roa (raw, json)
Hash identifier:          Fu7tKdDgcmHqCj1l8tNxWl9E9/8BbEz0CfXAcokh1gA=
Subject key identifier:   2C:46:F3:E0:49:76:39:FD:45:7B:86:53:A9:70:8F:57:78:EE:A6:13
Certificate issuer:       /CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
Certificate serial:       0BA6A8
Authority key identifier: E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/35c6a124cc3a280254ec171ab1ff1d37b283986c.roa
Signing time:             Wed 24 Mar 2021 14:34:43 +0000
ROA not before:           Wed 24 Mar 2021 14:34:43 +0000
ROA not after:            Tue 24 Mar 2026 14:34:43 +0000
asID:                     18678
IP address blocks:        45.176.232.0/22 maxlen: 22
                          2803:9260::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 763560 (0xba6a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
        Validity
            Not Before: Mar 24 14:34:43 2021 GMT
            Not After : Mar 24 14:34:43 2026 GMT
        Subject: CN=35c6a124cc3a280254ec171ab1ff1d37b283986c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e4:ef:f7:ff:51:1f:e0:45:19:3d:cf:7a:59:
                    1d:b3:5e:85:52:05:d6:c1:5f:e1:2e:bc:71:ed:88:
                    49:a5:d3:89:ce:61:89:63:1c:fc:4b:e9:89:5c:44:
                    d4:6d:8a:78:48:3a:b5:a5:cc:8f:69:b9:3a:18:ea:
                    67:39:96:ee:ee:c4:70:1b:e1:f5:5c:06:d5:6c:2d:
                    04:73:48:07:09:b5:c2:d5:06:2f:b1:2a:90:f4:fb:
                    c8:2d:93:fa:b1:99:69:73:11:62:15:87:f5:68:fa:
                    58:ed:a3:7e:6d:dd:2e:bb:90:f6:c3:5f:96:c4:12:
                    2f:11:86:57:f0:44:50:22:dc:df:5b:bd:4d:95:71:
                    4d:73:9c:36:1b:f2:31:16:ba:6e:e7:86:98:36:29:
                    d6:a3:c5:bc:31:33:bf:d2:62:d5:22:cc:2d:19:5b:
                    4d:0a:e3:ca:e5:ef:6e:6c:aa:a3:cc:cd:65:8e:8a:
                    7c:ac:68:c9:ad:1e:b5:2c:0f:5e:4d:21:a0:b5:8b:
                    f8:c8:f9:3b:cd:70:c8:9e:da:5f:78:5a:5c:2b:4a:
                    6b:53:f0:97:21:c7:0a:39:2f:aa:ed:90:90:d7:e3:
                    7a:db:62:31:ed:01:37:d4:88:04:93:e0:b9:52:3c:
                    c2:6b:0a:27:09:2a:d0:38:87:d9:81:d6:2e:44:dc:
                    de:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:46:F3:E0:49:76:39:FD:45:7B:86:53:A9:70:8F:57:78:EE:A6:13
            X509v3 Authority Key Identifier:
                keyid:E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/35c6a124cc3a280254ec171ab1ff1d37b283986c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.232.0/22
                IPv6:
                  2803:9260::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:e2:d6:d2:bd:77:a5:32:fb:22:57:58:a4:c9:0b:7c:0a:a0:
         89:1e:88:f3:fc:dd:4b:56:33:78:27:43:3f:f6:be:50:3e:39:
         9f:d7:f5:0b:59:a6:35:b2:d0:3a:28:9e:03:b9:1f:c0:c6:ea:
         5d:fb:14:10:f9:04:04:5d:db:a3:43:6d:a2:2c:5c:4a:5f:2c:
         41:d2:11:8a:8e:5b:0d:63:c8:af:58:17:a4:ca:e5:e7:e8:ec:
         5c:cb:37:09:37:57:ab:e3:5f:25:25:85:c4:f4:c3:11:8f:13:
         0b:a5:cd:aa:b3:47:bb:5b:38:fa:01:e1:07:9b:df:83:66:77:
         48:33:bf:96:bb:2e:79:7b:f8:cb:ad:7e:87:b9:8f:be:40:e8:
         b3:f9:5b:c6:86:82:ee:80:47:81:c8:8b:b2:63:0f:4c:cd:98:
         12:20:7d:b0:14:6f:bd:00:63:3e:13:21:08:43:b3:56:e6:21:
         8c:0e:f1:e1:52:47:f7:4e:27:e4:c6:ef:06:10:31:4e:59:c2:
         86:6a:f6:2c:e9:8d:da:e8:3f:b2:d0:fd:e1:1b:d8:15:d6:5b:
         16:a0:0b:2e:6b:6c:52:f3:f7:cd:c4:ea:42:8b:69:27:69:c8:
         37:ba:16:1f:40:84:00:bc:8a:ac:70:c5:26:75:aa:34:8b:ba:
         df:74:ed:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----