Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8df11c9-98dd-43a9-8deb-e6fe0c01e0ef/926f4472511f8693513166f20d3fb1fd84d53c7d.roa
File:                     926f4472511f8693513166f20d3fb1fd84d53c7d.roa (raw, json)
Hash identifier:          H7eFCKDZecyd0oRQ+aUPYjDosa4M5uJtYK4zcuPho1I=
Subject key identifier:   0F:90:3E:97:DC:06:BE:EE:7D:55:9F:D7:AD:1D:23:AB:90:86:AB:78
Certificate issuer:       /CN=1714f29986ec56df8404f82eb985d5d7c646acb5
Certificate serial:       0E054C
Authority key identifier: 28:9D:B2:49:5A:AE:EB:00:49:A1:B9:2B:17:76:80:F4:38:D5:29:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1714f29986ec56df8404f82eb985d5d7c646acb5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d8df11c9-98dd-43a9-8deb-e6fe0c01e0ef/926f4472511f8693513166f20d3fb1fd84d53c7d.roa
Signing time:             Mon 14 Jun 2021 04:17:45 +0000
ROA not before:           Mon 14 Jun 2021 03:00:00 +0000
ROA not after:            Wed 14 Jun 2023 03:00:00 +0000
asID:                     269731
IP address blocks:        45.180.114.0/24 maxlen: 24
                          2803:e160::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918860 (0xe054c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1714f29986ec56df8404f82eb985d5d7c646acb5
        Validity
            Not Before: Jun 14 03:00:00 2021 GMT
            Not After : Jun 14 03:00:00 2023 GMT
        Subject: CN=926f4472511f8693513166f20d3fb1fd84d53c7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:18:a6:84:da:be:04:62:bd:6e:51:4b:a6:
                    61:d7:e8:6d:44:ec:ff:ac:a4:a4:89:d5:5e:ef:eb:
                    a2:4e:0b:62:e7:a4:88:7d:46:45:a2:5c:94:e4:f1:
                    c2:a4:6b:8a:52:bc:a1:63:8c:f7:f1:bf:f9:75:e4:
                    35:5d:d6:68:98:32:a0:b2:7a:e2:2d:32:fd:73:7b:
                    fa:50:4e:ef:5d:fd:66:82:6d:00:9b:75:19:5b:b6:
                    95:08:a3:37:49:d7:4d:bd:e4:10:08:94:62:eb:41:
                    47:36:21:39:fd:f2:2d:02:ea:ae:f4:69:b6:26:e8:
                    0e:c0:6d:2a:3a:16:89:17:10:01:93:fa:1a:cc:f8:
                    82:69:01:5e:26:71:41:75:ce:fe:0f:36:e5:ff:11:
                    f5:f1:1f:7d:36:c0:d2:92:89:52:c2:1f:0f:f8:17:
                    10:49:1b:64:a4:8d:a2:2c:06:0f:cd:23:45:58:c1:
                    37:a3:3e:66:c9:f8:3e:71:8f:04:f2:19:ec:57:ec:
                    50:d8:94:35:71:e4:ea:6c:70:d2:82:aa:2c:c9:25:
                    ed:d9:dd:a1:6a:3e:da:16:9d:df:69:63:0a:a2:c7:
                    3f:fc:cc:9c:0c:b4:f2:d6:e9:a7:d9:35:ae:e2:37:
                    15:4e:77:59:d9:f4:73:4b:37:78:96:89:aa:17:50:
                    bf:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:90:3E:97:DC:06:BE:EE:7D:55:9F:D7:AD:1D:23:AB:90:86:AB:78
            X509v3 Authority Key Identifier:
                keyid:28:9D:B2:49:5A:AE:EB:00:49:A1:B9:2B:17:76:80:F4:38:D5:29:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1714f29986ec56df8404f82eb985d5d7c646acb5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8df11c9-98dd-43a9-8deb-e6fe0c01e0ef/926f4472511f8693513166f20d3fb1fd84d53c7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d8df11c9-98dd-43a9-8deb-e6fe0c01e0ef/1714f29986ec56df8404f82eb985d5d7c646acb5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.114.0/24
                IPv6:
                  2803:e160::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:19:95:f0:ca:a3:88:fa:01:a8:58:41:ad:cd:2a:6f:4a:3b:
         d8:eb:60:bf:d2:1b:00:fc:0b:b6:9a:80:45:3f:bf:43:4a:52:
         5e:7a:9f:dc:ae:b1:31:0a:71:38:d1:06:99:be:2e:cc:87:97:
         b4:bb:13:08:fc:9a:4a:e8:5a:cc:98:c3:e1:14:27:b6:83:71:
         b0:44:64:ab:47:f1:19:a5:8a:17:6b:69:dc:cb:02:a9:92:e7:
         89:83:4a:1d:21:3a:05:82:85:fd:d6:22:c0:7f:a3:0b:8b:97:
         92:cc:68:ab:99:70:c7:60:6c:f5:f5:22:07:e4:d9:3a:88:c9:
         01:05:33:ab:24:06:f3:cc:66:14:0c:aa:9b:e7:f4:b3:03:73:
         a9:3c:36:50:3e:1e:9d:aa:5a:33:d4:f8:6c:04:6d:39:05:ce:
         10:97:e5:82:7d:3d:5a:ba:c8:74:a8:8f:44:b3:d0:1b:a7:ca:
         f5:a8:a9:e1:d9:00:fa:d6:03:59:c3:b3:ad:b8:54:19:f8:76:
         41:81:29:7e:c4:54:b8:25:30:95:74:02:1c:24:cf:6e:fc:61:
         63:80:42:36:73:3a:13:4e:56:42:17:76:76:ef:38:04:a5:09:
         a3:9a:0e:de:af:3e:19:63:46:a0:ac:c0:eb:d9:d7:a1:9b:cb:
         3b:fc:ab:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----