Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/842524f5e36608b8e8151235a7c3c462b4fb3d19.roa
File:                     842524f5e36608b8e8151235a7c3c462b4fb3d19.roa (raw, json)
Hash identifier:          AMAIIyLEKhoWL8+bQtNNpTDZDiNC/ns6ubFK1Hz+miU=
Subject key identifier:   E9:80:BA:62:31:ED:EC:B7:6F:71:D2:27:03:4C:CD:8D:F7:BE:46:62
Certificate issuer:       /CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
Certificate serial:       0BAF47
Authority key identifier: E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/842524f5e36608b8e8151235a7c3c462b4fb3d19.roa
Signing time:             Wed 24 Mar 2021 14:34:43 +0000
ROA not before:           Wed 24 Mar 2021 14:34:43 +0000
ROA not after:            Tue 24 Mar 2026 14:34:43 +0000
asID:                     27951
IP address blocks:        45.176.232.0/22 maxlen: 22
                          2803:9260::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765767 (0xbaf47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=359bbb07d3fe384f9e2ef6eebcf99283833f3c0c
        Validity
            Not Before: Mar 24 14:34:43 2021 GMT
            Not After : Mar 24 14:34:43 2026 GMT
        Subject: CN=842524f5e36608b8e8151235a7c3c462b4fb3d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:36:1b:8a:59:21:0a:4e:16:69:6e:4e:f0:94:
                    c4:4a:0f:a4:56:74:84:5c:58:ec:28:57:62:55:f0:
                    fb:98:8a:87:14:62:2f:a8:27:17:97:00:07:93:83:
                    ff:91:13:30:96:70:4f:9e:8b:a0:5f:33:93:ba:83:
                    44:19:72:ed:9e:d1:17:87:d3:46:e3:c1:b1:35:05:
                    15:a7:91:13:c6:df:01:74:55:8d:d1:42:e5:a9:fe:
                    a9:14:84:23:03:dd:1f:94:13:b9:78:97:30:5e:e7:
                    8f:c1:a0:22:43:c3:1d:fe:a6:db:bd:b2:b2:7b:87:
                    18:eb:cd:4b:4d:1e:a3:3e:9d:7e:35:08:b4:a6:d3:
                    a9:51:95:7b:e8:a7:da:70:57:a8:5d:72:e9:25:e1:
                    b7:ff:48:c9:0a:31:32:83:d7:08:21:0b:a7:ce:9d:
                    d2:04:3a:f8:b6:7f:45:5b:44:50:43:a8:40:fc:bd:
                    a0:20:69:3b:2f:cd:81:9f:4d:bc:4e:fc:6c:39:ad:
                    d3:11:09:b6:bf:81:2b:43:f8:57:02:88:47:81:90:
                    0f:4c:4c:ce:b0:aa:4e:22:14:37:df:b5:45:49:33:
                    57:b2:bd:73:6a:97:58:92:27:47:f8:d5:4d:81:99:
                    62:33:1e:7c:6f:8c:65:93:ab:dd:6f:80:da:54:9e:
                    d0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:80:BA:62:31:ED:EC:B7:6F:71:D2:27:03:4C:CD:8D:F7:BE:46:62
            X509v3 Authority Key Identifier:
                keyid:E8:2D:E3:E8:40:29:3A:8E:69:BD:27:77:CB:36:9D:49:A2:3E:71:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/842524f5e36608b8e8151235a7c3c462b4fb3d19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cb67e9d1-1243-45c8-9a3b-4b6de5358322/359bbb07d3fe384f9e2ef6eebcf99283833f3c0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.232.0/22
                IPv6:
                  2803:9260::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:59:9e:27:4d:12:da:36:a0:be:93:41:4c:b6:4d:2d:87:7f:
         1e:3b:ad:09:91:41:20:e7:9b:d4:5f:b3:d3:11:1e:ce:ac:d4:
         5b:a8:d6:10:18:85:d8:6f:8e:0a:0c:fe:fc:79:11:48:4f:c9:
         52:8d:f1:ad:81:e4:6e:af:f1:e6:a7:8e:45:a7:1a:5e:66:67:
         d3:af:79:9b:ca:d9:02:06:42:b6:68:f4:1d:68:ac:6d:b2:f0:
         1b:b3:bf:88:aa:05:68:7d:a4:82:3f:f4:cc:39:9a:5d:0e:85:
         af:0e:fe:7a:d6:af:e5:56:26:c3:31:c1:24:a2:b7:72:91:c2:
         10:5f:7d:1c:63:60:b2:53:9a:57:fb:cf:e8:3b:bd:6d:2a:63:
         67:7b:de:ad:1b:10:ae:73:09:4c:59:3f:b9:7d:67:92:42:7c:
         a3:c7:7e:3e:ae:dd:63:ca:4d:86:24:2a:b1:1d:bc:cf:42:1b:
         7d:c6:57:f2:4b:99:84:48:68:b2:0b:a3:26:ca:0b:6a:a4:3c:
         21:4b:4b:bf:46:e8:25:37:56:c4:44:8a:75:92:68:92:16:c8:
         18:35:ba:d4:5e:3e:c5:40:1d:bc:5d:7b:4f:3e:f8:56:f4:69:
         c0:5b:88:0f:fc:b4:2f:68:a9:7f:27:b0:ae:80:d9:47:e3:ca:
         4a:2a:23:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----