Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/6eb547729fd9b2b3f927ed3e52b87dd94fce34a4.roa
File:                     6eb547729fd9b2b3f927ed3e52b87dd94fce34a4.roa (raw, json)
Hash identifier:          XMOHpTrayIe9M1hvukfU7BkBGBsF7Bg3BAeScmEgeLw=
Subject key identifier:   8B:42:ED:E2:3A:86:2A:9C:EB:51:44:77:DA:75:42:D7:D5:A3:F0:04
Certificate issuer:       /CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
Certificate serial:       0BA93F
Authority key identifier: E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/6eb547729fd9b2b3f927ed3e52b87dd94fce34a4.roa
Signing time:             Wed 24 Mar 2021 14:34:43 +0000
ROA not before:           Wed 24 Mar 2021 14:34:43 +0000
ROA not after:            Tue 24 Mar 2026 14:34:43 +0000
asID:                     27951
IP address blocks:        45.176.232.0/22 maxlen: 22
                          2803:9260::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764223 (0xba93f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
        Validity
            Not Before: Mar 24 14:34:43 2021 GMT
            Not After : Mar 24 14:34:43 2026 GMT
        Subject: CN=6eb547729fd9b2b3f927ed3e52b87dd94fce34a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:be:b8:32:f5:f9:78:bc:12:8b:24:cd:a7:1d:
                    1c:b4:1b:fe:ee:a7:29:3a:77:e2:f4:2e:80:fd:cd:
                    3a:c1:16:e1:34:5e:dd:09:f7:8f:d9:f9:e3:51:98:
                    25:95:fa:6b:ad:29:ac:7b:cd:30:26:d2:c9:99:cc:
                    d7:75:46:de:2e:5b:55:d6:ca:33:b5:45:7e:bf:b4:
                    36:2a:38:a9:5b:a9:80:bc:05:25:64:9f:2d:a3:d4:
                    81:bd:a1:6a:1b:6e:b7:a7:04:66:a5:7d:d4:3a:be:
                    e2:b6:1a:6b:73:f9:b8:fd:f7:d1:14:c1:7a:c1:64:
                    a8:ca:f5:8c:4f:cc:db:4d:32:4b:f3:d0:1b:fe:3b:
                    65:92:09:3b:3b:a8:f3:22:bd:3d:1b:57:c3:c2:2c:
                    e0:79:f2:a9:af:4e:59:4a:49:bd:02:27:eb:c3:d7:
                    31:e0:50:1a:43:3c:6f:95:3d:67:e2:2e:47:b7:71:
                    2b:f5:a2:2b:de:be:15:22:1b:b7:cf:de:9f:36:76:
                    77:53:b8:96:f7:ce:68:52:9d:5d:32:07:88:e4:b2:
                    28:e9:fa:ce:e4:7c:1c:82:5f:45:ba:2b:4c:d9:02:
                    06:b5:63:9d:8b:17:8f:d6:4f:2b:90:40:8e:aa:02:
                    38:69:32:b2:9c:2c:8a:d3:bf:c4:0e:32:b5:da:3a:
                    4f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:42:ED:E2:3A:86:2A:9C:EB:51:44:77:DA:75:42:D7:D5:A3:F0:04
            X509v3 Authority Key Identifier:
                keyid:E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/6eb547729fd9b2b3f927ed3e52b87dd94fce34a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.232.0/22
                IPv6:
                  2803:9260::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:b4:92:f8:7a:b6:ec:5f:27:ad:58:87:81:66:02:18:b7:8f:
         e8:cf:5e:cf:9c:b8:d0:b7:19:08:02:b7:76:33:b1:61:47:9c:
         1d:9e:a2:7c:c5:dc:5a:19:b9:6c:db:4b:35:af:6d:3a:82:ed:
         c0:4c:0c:cc:00:8e:5d:48:71:87:f6:52:a1:ff:44:5c:07:d3:
         30:ae:aa:d1:2d:32:75:5d:2f:27:4f:cd:74:1a:3f:0a:d1:a4:
         6f:a4:27:69:b3:9f:50:96:0f:38:fa:e3:84:f0:c8:cd:26:6d:
         d6:56:ad:c7:40:aa:df:c3:0c:de:cd:28:43:08:4d:cc:7e:4c:
         ce:1c:f9:a9:44:27:87:cd:91:1c:c4:73:cf:05:97:ec:df:79:
         43:fc:7c:5b:14:a3:a8:c8:d8:bb:ec:6f:ce:dd:a0:c1:d8:07:
         df:d6:9e:dd:96:3f:17:e8:03:51:6c:90:09:4a:24:8a:76:ac:
         bc:bc:c1:a1:44:b0:44:62:23:fe:b4:ff:b4:94:70:b6:f7:bc:
         ae:77:8c:2c:7a:7d:f3:9c:c8:a4:d5:4f:f5:d9:d8:74:fa:2b:
         d8:c6:62:35:73:4b:75:70:fc:94:89:f7:27:f0:54:03:24:4f:
         41:af:ba:2e:16:cc:7d:83:39:da:af:4c:2b:7d:37:90:91:ea:
         cd:3f:90:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----