Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/14cb66e0785a21427652d66407d414eb0fa13d2a.roa
File:                     14cb66e0785a21427652d66407d414eb0fa13d2a.roa (raw, json)
Hash identifier:          IKGRN9oonLXL2OIpTj149dWCvwWUdd5N74/4JQz5vHE=
Subject key identifier:   32:F6:8F:A9:EC:60:FB:D2:B2:65:95:C0:E9:57:E7:C2:B6:2B:17:AF
Certificate issuer:       /CN=ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8
Certificate serial:       0BAC50
Authority key identifier: 63:D0:1E:66:9E:CA:C8:56:7B:7E:A3:8D:12:F2:9E:1E:E4:2E:30:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/14cb66e0785a21427652d66407d414eb0fa13d2a.roa
Signing time:             Wed 24 Mar 2021 14:30:29 +0000
ROA not before:           Wed 24 Mar 2021 14:30:29 +0000
ROA not after:            Tue 24 Mar 2026 14:30:29 +0000
asID:                     269833
IP address blocks:        45.188.20.0/22 maxlen: 22
                          2803:cf60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765008 (0xbac50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8
        Validity
            Not Before: Mar 24 14:30:29 2021 GMT
            Not After : Mar 24 14:30:29 2026 GMT
        Subject: CN=14cb66e0785a21427652d66407d414eb0fa13d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:67:fd:65:65:22:9a:c3:d8:0f:94:87:e1:a8:
                    c0:35:2f:9c:ab:c4:aa:85:c0:69:68:29:73:3d:e0:
                    ee:bd:d7:44:2d:41:ca:4f:09:18:04:16:4d:aa:f3:
                    83:da:09:b7:6c:ff:e1:c7:62:6c:3a:62:35:1b:15:
                    8a:f4:48:03:1d:fc:28:91:12:dd:c4:9a:28:73:b6:
                    83:de:e2:fe:65:6c:28:15:07:4c:c4:b1:90:13:30:
                    44:ff:33:91:d2:3e:e6:84:77:ec:68:a7:32:8e:3b:
                    fd:66:c6:d5:78:58:6d:ab:5e:0e:cd:37:68:e4:00:
                    63:6c:a2:c2:14:36:ae:99:64:51:62:3e:9b:e0:63:
                    97:0b:0a:49:1c:ef:5a:63:6b:15:24:5b:86:8c:01:
                    da:3e:ad:15:64:e7:4f:ae:cd:34:e4:3d:e4:e1:a1:
                    0e:28:b4:61:17:8b:0f:4d:06:7d:1c:56:e8:2d:4e:
                    4a:f9:d9:01:4b:fd:72:1b:0d:6d:38:64:67:34:c4:
                    91:be:aa:c9:70:6a:8a:81:27:07:9c:df:29:23:35:
                    ff:99:ae:25:80:2a:9f:5c:4c:64:b6:23:0d:cf:d6:
                    ed:00:7a:17:2c:01:09:1e:cd:af:62:cc:c5:06:60:
                    5a:45:4b:3f:8e:78:78:4f:e9:b6:08:4f:9b:a7:48:
                    a5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F6:8F:A9:EC:60:FB:D2:B2:65:95:C0:E9:57:E7:C2:B6:2B:17:AF
            X509v3 Authority Key Identifier:
                keyid:63:D0:1E:66:9E:CA:C8:56:7B:7E:A3:8D:12:F2:9E:1E:E4:2E:30:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/14cb66e0785a21427652d66407d414eb0fa13d2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce1de52a-4851-4983-949e-fa59bbc6cd50/ac4ee1fa267419bb6fa30cbc7ddf0dcfa2720aa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.188.20.0/22
                IPv6:
                  2803:cf60::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:8e:77:a4:50:bb:66:5c:34:72:b9:89:e9:9a:60:54:61:c6:
         88:a0:54:2d:3b:c9:d3:29:e0:4a:c4:4e:c6:48:10:60:c5:48:
         61:01:46:4f:92:35:f2:6d:88:72:65:ba:e3:81:e5:05:48:35:
         9a:37:c6:24:a8:1f:b6:6b:4f:0f:3f:fe:30:db:13:18:9d:69:
         87:24:06:0c:f6:33:1a:17:89:d9:92:40:8a:69:a3:e3:d1:69:
         b0:f9:10:36:b5:e7:18:3f:ff:65:29:fe:14:01:c7:cf:ce:6a:
         eb:62:38:26:f0:1e:1a:d1:39:01:d5:f4:00:bb:7c:0d:ad:55:
         1b:2a:33:81:e5:12:b1:af:95:90:3b:d3:8c:71:e8:fc:ce:72:
         2d:b8:80:c6:e6:d8:5a:8c:29:45:1a:d6:85:ca:71:47:d4:0a:
         dd:b0:e2:cf:8a:4a:28:b4:89:b9:39:33:88:84:dc:85:ae:5c:
         8a:f5:f5:cb:3b:e5:08:6c:16:07:73:10:81:88:74:f8:ed:39:
         55:b3:16:4c:61:62:9c:7f:38:a1:48:c5:84:e6:03:6d:57:9e:
         ec:a4:5b:bc:f1:43:f5:64:7a:75:5a:f3:17:b3:d3:6d:97:e7:
         2f:84:6a:4b:3b:f6:2b:70:a1:a1:e4:bc:fb:d0:e3:10:bb:9a:
         4a:13:93:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----