Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/3159fbc152618392cd6b839d630f981af3c862d5.roa
File:                     3159fbc152618392cd6b839d630f981af3c862d5.roa (raw, json)
Hash identifier:          TsU4othBQDHYY32GLZjOEBd2ej+tma3uny1EI0NKpn8=
Subject key identifier:   DF:26:E4:25:89:BC:5B:6D:9E:4B:B0:C1:28:70:9C:C6:3F:8B:95:B1
Certificate issuer:       /CN=064899b606f78a681c0fd0649043cb728d259f11
Certificate serial:       04D1
Authority key identifier: CE:5B:D5:C9:B3:2A:A6:B5:E2:F9:92:17:F7:0D:52:19:77:FE:0B:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/064899b606f78a681c0fd0649043cb728d259f11.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/3159fbc152618392cd6b839d630f981af3c862d5.roa
Signing time:             Mon 19 Apr 2021 04:10:21 +0000
ROA not before:           Mon 19 Apr 2021 03:00:00 +0000
ROA not after:            Wed 19 Apr 2023 03:00:00 +0000
asID:                     267904
IP address blocks:        45.230.248.0/22 maxlen: 24
                          2803:f320::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1233 (0x4d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=064899b606f78a681c0fd0649043cb728d259f11
        Validity
            Not Before: Apr 19 03:00:00 2021 GMT
            Not After : Apr 19 03:00:00 2023 GMT
        Subject: CN=3159fbc152618392cd6b839d630f981af3c862d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1e:53:08:76:ff:e5:f6:e5:7d:93:fe:00:60:
                    ee:2b:c4:3d:d2:e8:22:eb:65:bc:de:3a:10:9f:74:
                    7a:6a:c9:c1:d9:0b:57:db:14:b8:36:1c:ca:31:49:
                    72:cd:ef:5c:58:17:1f:21:bc:1a:c3:28:da:2c:04:
                    83:c9:a1:31:2e:9d:6c:95:a1:94:70:0d:60:3f:dd:
                    7a:ce:fa:42:dd:7b:31:3c:63:2e:ba:90:71:44:b3:
                    a5:ac:65:83:47:bc:68:24:6c:ce:23:fd:61:91:5c:
                    9d:6c:28:23:80:61:ff:13:75:9c:b7:67:a3:fc:48:
                    38:f1:06:e3:54:c1:bf:cc:a8:3d:b8:4a:bd:c6:96:
                    1a:ad:d3:5f:c9:b0:7d:78:bd:06:3d:82:ac:e9:cb:
                    a4:9e:ed:0a:80:68:78:b4:96:d0:53:a8:bb:66:f8:
                    24:dd:a9:5c:9c:e5:45:c3:f8:66:ec:1c:ed:d1:e4:
                    dc:ee:4d:fe:b4:13:7b:76:24:0d:4e:9e:ce:d3:5f:
                    0a:3c:3b:b5:4d:38:46:f4:ce:f1:50:eb:cf:75:6e:
                    6d:93:2e:e1:ad:c7:44:9b:1c:73:20:c5:d1:00:3a:
                    d2:67:20:68:fb:79:86:34:92:82:b2:76:8a:ea:10:
                    e2:24:13:05:97:fa:df:e1:93:78:22:1b:bb:04:6f:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:26:E4:25:89:BC:5B:6D:9E:4B:B0:C1:28:70:9C:C6:3F:8B:95:B1
            X509v3 Authority Key Identifier:
                keyid:CE:5B:D5:C9:B3:2A:A6:B5:E2:F9:92:17:F7:0D:52:19:77:FE:0B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/064899b606f78a681c0fd0649043cb728d259f11.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/3159fbc152618392cd6b839d630f981af3c862d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cd79907d-a9cc-4a93-a793-03463bb71f96/064899b606f78a681c0fd0649043cb728d259f11.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.248.0/22
                IPv6:
                  2803:f320::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:ce:34:b9:b4:e5:f7:c3:f0:40:19:68:66:8b:85:85:43:7d:
         a0:ee:43:e0:5b:69:a6:cc:c8:cc:bc:b3:f5:31:9b:1c:59:59:
         5f:90:29:e7:dc:5c:5d:df:bc:45:87:80:d5:eb:a2:e0:cc:b1:
         94:d9:49:c1:8d:cf:61:14:13:c3:78:16:5c:eb:0d:5d:b3:17:
         69:45:09:0e:d5:50:8a:84:3f:03:f6:a1:56:e6:b6:8c:03:14:
         a5:77:b6:a7:3c:71:db:3d:27:bb:76:a5:fc:32:e1:a2:a8:cd:
         2c:86:cf:3f:02:c4:e6:b1:5c:0d:aa:a9:b2:54:17:76:2d:a3:
         4e:c7:89:0b:d9:3d:2f:66:7d:9d:49:64:ff:8c:7d:33:ba:50:
         37:3a:3e:0e:3e:53:c7:63:f0:a9:96:10:09:3d:79:4e:d5:02:
         36:38:cb:b0:6f:fa:1c:e5:4e:51:cd:03:5d:5a:8a:1b:a7:f2:
         1c:42:10:13:5a:e3:df:b2:2f:f3:8d:90:7d:76:ee:0f:f7:9c:
         f8:46:e9:b9:bb:8f:9d:50:68:df:67:08:38:62:db:52:ba:8b:
         5e:df:51:7a:30:6c:5a:3e:c3:1c:43:90:f1:7c:2f:82:62:0e:
         c8:fd:6c:79:ca:5b:ac:cb:6f:ec:cc:b7:23:40:f3:25:2d:5e:
         c1:23:78:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----