Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/fc3a0d0f8e85ad1b41e06adfd5950de91fb24127.roa
File:                     fc3a0d0f8e85ad1b41e06adfd5950de91fb24127.roa (raw, json)
Hash identifier:          iAM5vX5r9z4tUnw8fGr0fxNSkH3+lMxjv+FcHhUaeRo=
Subject key identifier:   36:17:F7:09:8B:0D:A2:E8:6D:3E:87:10:6B:7C:F0:D4:08:82:3B:6F
Certificate issuer:       /CN=734d48b8ac986ac396d20b61f218f6d07558ab25
Certificate serial:       0A45F2
Authority key identifier: 4E:AD:86:2E:3C:44:EA:A1:CD:E0:84:7C:0D:A0:5E:8B:EB:6E:BE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/734d48b8ac986ac396d20b61f218f6d07558ab25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/fc3a0d0f8e85ad1b41e06adfd5950de91fb24127.roa
Signing time:             Wed 24 Mar 2021 14:30:41 +0000
ROA not before:           Wed 24 Mar 2021 14:30:41 +0000
ROA not after:            Tue 24 Mar 2026 14:30:41 +0000
asID:                     269809
IP address blocks:        45.191.4.0/24 maxlen: 24
                          45.191.5.0/24 maxlen: 24
                          45.191.6.0/24 maxlen: 24
                          45.191.7.0/24 maxlen: 24
                          2803:c4e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673266 (0xa45f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=734d48b8ac986ac396d20b61f218f6d07558ab25
        Validity
            Not Before: Mar 24 14:30:41 2021 GMT
            Not After : Mar 24 14:30:41 2026 GMT
        Subject: CN=fc3a0d0f8e85ad1b41e06adfd5950de91fb24127
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:90:a7:5f:e1:ed:23:2c:da:80:f1:4a:a4:3f:
                    73:70:39:17:e8:9a:a7:ea:eb:43:72:fc:64:76:ee:
                    61:4a:ea:0e:9e:17:6a:0a:66:81:e3:48:a0:bb:1f:
                    23:92:78:2a:a9:41:a8:1f:69:fe:16:6f:f9:48:4d:
                    e8:d0:6a:7a:f8:f5:58:b4:98:88:ed:de:b3:2f:2c:
                    02:ab:f3:a0:12:f3:7b:d8:77:1f:67:83:c6:1a:08:
                    10:bb:87:f2:c7:63:0d:d1:fe:5d:0e:d1:87:10:ec:
                    dc:79:42:2e:7c:48:1d:6e:c5:a1:b2:64:22:8a:0c:
                    26:28:19:94:a0:7c:91:4f:6f:6a:fa:4d:31:3c:4b:
                    b9:16:ec:1b:0f:8c:a0:76:e0:a0:fe:3c:98:e5:a9:
                    ce:42:8e:4e:41:c4:2e:61:a5:7e:8f:db:f9:fe:49:
                    ab:ad:3d:7b:c9:9a:e4:de:0c:3c:23:f3:65:ae:c3:
                    3d:90:43:aa:24:d8:0b:b4:f6:a0:a9:28:45:a7:10:
                    fd:29:3d:c8:bc:f9:7a:78:9b:43:7b:7d:1d:d2:2a:
                    c5:46:2a:92:05:0a:87:45:8e:a5:9a:6a:6b:2f:93:
                    62:00:30:ce:c0:fe:a5:73:5a:cc:22:66:e1:cf:0c:
                    f8:6a:3d:29:84:aa:00:64:8c:58:b8:a2:f8:1d:a8:
                    d2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:17:F7:09:8B:0D:A2:E8:6D:3E:87:10:6B:7C:F0:D4:08:82:3B:6F
            X509v3 Authority Key Identifier:
                keyid:4E:AD:86:2E:3C:44:EA:A1:CD:E0:84:7C:0D:A0:5E:8B:EB:6E:BE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/734d48b8ac986ac396d20b61f218f6d07558ab25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/fc3a0d0f8e85ad1b41e06adfd5950de91fb24127.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d7366476-c137-47fa-b5f8-704deaa397ff/734d48b8ac986ac396d20b61f218f6d07558ab25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.4.0/22
                IPv6:
                  2803:c4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:ec:07:1c:70:a6:e4:23:b3:2a:75:e9:8c:20:a8:71:f8:82:
         13:9a:79:57:2f:e5:b7:6d:6e:0d:39:3a:f5:01:0a:23:67:16:
         27:30:88:5e:da:e0:f7:13:e5:d4:69:68:99:07:0e:99:ac:25:
         39:f2:2a:3b:20:85:65:cd:11:64:3e:4a:c1:78:d5:8e:1c:68:
         5b:03:3e:9d:3e:0e:22:27:18:d1:42:34:a7:7b:88:ba:9c:bf:
         59:e6:95:5d:4b:4b:43:70:8c:3f:2c:df:12:17:84:ff:06:67:
         ab:47:b4:d6:2f:a3:ff:1b:0a:c7:0f:78:5a:54:ff:27:c5:06:
         51:63:27:36:f2:2a:6d:a4:5b:8b:4e:e8:69:4c:a9:96:c5:10:
         fa:8a:95:8e:72:53:6a:1f:65:7b:68:f2:03:d9:d3:37:8d:c6:
         d2:e2:15:48:35:6d:aa:d5:26:07:c2:ca:c1:90:73:4a:a3:e8:
         08:4a:b1:61:d5:1c:62:f9:fc:7b:67:2d:f0:0c:39:60:ba:38:
         30:9a:c4:c6:f1:ab:72:c9:74:e2:9d:fc:97:44:96:32:67:22:
         85:5c:1a:82:44:6d:0a:36:b4:67:40:c5:1f:1f:f4:18:1f:b3:
         cd:b3:ad:4a:ff:a1:8d:3b:06:bc:c0:e4:59:a3:b3:72:c8:b0:
         1e:19:f6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----