Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/eecd263b28915e0a0aabe599fcebde495af060ab.roa
File:                     eecd263b28915e0a0aabe599fcebde495af060ab.roa (raw, json)
Hash identifier:          mvrn0AcOo+b1F5ldTNQ5t8XHxssaZRXBa/rbE5/hFAQ=
Subject key identifier:   5C:73:80:EA:4A:D0:41:BA:33:1B:67:AA:BB:D8:89:B5:6C:B9:64:E4
Certificate issuer:       /CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
Certificate serial:       12AFC6
Authority key identifier: 52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/eecd263b28915e0a0aabe599fcebde495af060ab.roa
Signing time:             Fri 15 Oct 2021 01:47:01 +0000
ROA not before:           Thu 14 Oct 2021 03:00:00 +0000
ROA not after:            Sat 14 Oct 2023 03:00:00 +0000
asID:                     269799
IP address blocks:        45.233.103.0/24 maxlen: 24
                          2803:a0a0:900::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1224646 (0x12afc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f636851443b2f7396ed85156f5c70cbcfa4debd5
        Validity
            Not Before: Oct 14 03:00:00 2021 GMT
            Not After : Oct 14 03:00:00 2023 GMT
        Subject: CN=eecd263b28915e0a0aabe599fcebde495af060ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f2:d1:da:58:b2:7a:3c:34:d5:5a:26:0d:bd:
                    c3:51:5f:5a:30:92:bb:03:56:f0:79:a4:6f:11:c7:
                    15:fb:ef:41:4a:63:dd:90:c3:df:bd:c2:5f:df:79:
                    5b:66:20:5f:e2:97:8d:f9:45:59:ca:44:13:30:23:
                    c0:85:cd:73:a3:7a:e6:ec:04:ef:7f:6a:c9:e6:b6:
                    05:19:fe:e5:6e:fe:d6:02:03:fd:bc:a5:c5:2e:db:
                    3b:42:d7:91:21:01:2b:59:68:b6:37:f9:37:f9:32:
                    71:0f:9c:c5:ec:55:04:ee:69:53:c1:d6:48:bd:34:
                    63:65:1c:47:31:3f:90:95:a9:5c:4b:88:f9:0b:47:
                    49:a3:89:6d:e3:6a:bb:45:dc:8d:25:2f:da:12:71:
                    95:65:fe:ff:94:16:f3:bb:55:8b:c4:60:f1:06:fc:
                    5d:94:9c:a0:06:9d:d5:f0:0f:64:b8:16:60:a6:59:
                    67:d1:23:83:35:ac:90:ed:dc:a2:76:1d:dc:93:d2:
                    09:c8:50:87:db:eb:11:4e:0f:7b:3b:f9:a9:2f:9d:
                    68:11:f5:ea:f6:8d:f6:e7:d5:f8:85:9d:6d:5a:2d:
                    7c:b9:a3:e9:8d:0b:2d:25:5f:e3:6b:e6:2b:6e:70:
                    9a:2c:9c:a8:f9:7a:ab:a7:6a:ec:07:3e:cb:eb:e2:
                    dd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:73:80:EA:4A:D0:41:BA:33:1B:67:AA:BB:D8:89:B5:6C:B9:64:E4
            X509v3 Authority Key Identifier:
                keyid:52:BC:7B:8C:C8:D3:91:E2:24:05:1C:BB:CB:C4:E1:7A:60:86:38:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f636851443b2f7396ed85156f5c70cbcfa4debd5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/eecd263b28915e0a0aabe599fcebde495af060ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d63272f3-6db6-4333-b950-15c17bf3382a/f636851443b2f7396ed85156f5c70cbcfa4debd5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.103.0/24
                IPv6:
                  2803:a0a0:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:9a:d3:08:fe:05:cc:e2:fc:be:ae:b2:12:8f:9b:56:ee:9a:
         88:0a:5c:80:bf:52:35:36:b8:fa:dd:c8:e8:ed:0e:de:5e:31:
         b1:69:0a:45:bf:2d:cb:96:34:dd:07:e7:f4:61:c8:15:ea:06:
         e1:4f:3e:19:8d:f4:1c:d5:19:26:6d:fa:63:68:1b:df:12:67:
         d1:10:38:63:32:9a:b7:97:17:37:72:58:69:86:3f:c3:98:e0:
         74:41:92:91:77:f1:10:01:e8:bc:36:3f:1b:43:3f:5d:bb:24:
         31:a5:9f:28:7f:07:25:ce:27:fa:6c:86:51:c0:47:2f:ac:50:
         75:85:c4:8a:94:77:eb:a8:6e:dd:11:0f:19:0e:80:ed:48:a8:
         ab:a8:94:91:fd:94:47:8d:68:36:bc:b1:78:dd:3a:6b:35:30:
         72:36:ec:d9:c2:6c:70:08:1c:44:68:d3:a2:83:3c:d8:2d:9d:
         34:27:a8:81:24:38:72:43:84:33:14:24:72:09:28:be:f1:18:
         b7:a9:40:ca:3c:81:53:33:30:49:c1:10:d1:cb:e8:26:84:2a:
         7d:2e:43:c2:b2:09:c6:0c:9b:d1:ec:43:a9:96:9d:26:28:7d:
         d2:cf:a7:ec:63:00:bd:3a:d6:4a:80:b1:a0:45:51:0a:17:3d:
         f6:f0:89:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----