Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e11e4b56-56b0-4c90-a0b5-6406c4e1a7a8/b5ae77f5688e08b6ab54b1678a92bd1bc5ec06d9.roa
File:                     b5ae77f5688e08b6ab54b1678a92bd1bc5ec06d9.roa (raw, json)
Hash identifier:          QKMU/deFGfDt0HF+ecfkEo1C1pxVeIHaJP/5cUgPuMA=
Subject key identifier:   24:F7:B6:3B:D6:DC:7C:C5:90:C7:5C:1E:BD:09:CF:CE:E6:98:53:E1
Certificate issuer:       /CN=aef9fcb57e330becab3bfc6b2df780b9d23861cc
Certificate serial:       0D9688
Authority key identifier: 65:54:E0:16:C8:17:9A:BB:D7:8D:61:85:E7:4F:E0:2A:5E:D6:D5:FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aef9fcb57e330becab3bfc6b2df780b9d23861cc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e11e4b56-56b0-4c90-a0b5-6406c4e1a7a8/b5ae77f5688e08b6ab54b1678a92bd1bc5ec06d9.roa
Signing time:             Wed 24 Mar 2021 14:32:05 +0000
ROA not before:           Wed 24 Mar 2021 14:32:05 +0000
ROA not after:            Tue 24 Mar 2026 14:32:05 +0000
asID:                     266687
IP address blocks:        45.229.44.0/22 maxlen: 24
                          2803:e520::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890504 (0xd9688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aef9fcb57e330becab3bfc6b2df780b9d23861cc
        Validity
            Not Before: Mar 24 14:32:05 2021 GMT
            Not After : Mar 24 14:32:05 2026 GMT
        Subject: CN=b5ae77f5688e08b6ab54b1678a92bd1bc5ec06d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b1:3d:c2:24:de:19:cb:70:ad:8d:61:ef:45:
                    c7:d1:07:0c:7c:59:38:85:22:1f:f3:7a:40:aa:93:
                    5a:49:9f:ca:72:7e:64:80:cb:56:4c:b3:36:4c:62:
                    56:96:e4:ff:67:9d:3f:05:31:8a:39:9f:a9:1a:c1:
                    0b:26:79:a1:78:4e:2d:57:83:eb:bc:f0:52:ef:7f:
                    e5:f6:65:50:e5:c3:06:87:3a:78:4f:ff:06:aa:d8:
                    5a:f7:d1:00:a8:15:96:f1:ee:bb:ac:78:34:dc:e5:
                    b2:37:f0:e6:64:a2:57:b9:67:de:d9:b9:67:23:51:
                    14:ab:15:60:f3:df:12:d0:a8:61:f2:59:a8:a6:e5:
                    eb:c2:e7:dc:f0:fc:07:98:78:55:9e:24:d9:25:96:
                    6e:57:92:c5:2e:01:6c:f7:d2:6d:0f:a3:45:9a:c1:
                    11:33:2f:70:34:60:f8:05:02:4d:7e:4c:52:8b:b7:
                    b6:9d:07:6d:19:fc:ed:68:2b:f5:96:b1:bd:1e:be:
                    c8:36:14:20:04:5c:e6:9a:13:f4:cc:1b:6d:56:12:
                    74:c1:14:76:41:7b:92:ee:ca:bc:cb:3f:e4:3e:03:
                    0d:ce:bc:37:59:cd:30:9f:e1:f1:e4:bc:8d:27:69:
                    2f:b5:14:dc:33:d2:f1:18:bd:a2:5c:87:a6:0b:5d:
                    03:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:F7:B6:3B:D6:DC:7C:C5:90:C7:5C:1E:BD:09:CF:CE:E6:98:53:E1
            X509v3 Authority Key Identifier:
                keyid:65:54:E0:16:C8:17:9A:BB:D7:8D:61:85:E7:4F:E0:2A:5E:D6:D5:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aef9fcb57e330becab3bfc6b2df780b9d23861cc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e11e4b56-56b0-4c90-a0b5-6406c4e1a7a8/b5ae77f5688e08b6ab54b1678a92bd1bc5ec06d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e11e4b56-56b0-4c90-a0b5-6406c4e1a7a8/aef9fcb57e330becab3bfc6b2df780b9d23861cc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.44.0/22
                IPv6:
                  2803:e520::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:a2:0a:f0:cd:8f:14:45:f4:1f:6a:58:3d:c9:70:57:a7:38:
         ec:b3:2d:12:70:ab:4c:bd:d3:0e:11:ae:3e:50:38:5b:e2:df:
         4d:a9:d0:27:4a:ab:3c:f5:3b:cf:4d:66:7e:74:9a:1b:b4:21:
         db:b5:96:58:76:f6:5f:fb:15:92:a8:65:9a:d8:66:10:c9:58:
         c1:9e:c1:f8:d1:87:ef:b4:62:ef:80:0f:90:bc:bb:16:9c:e1:
         2c:d6:36:d4:e9:f0:cd:31:78:6b:23:74:8e:be:ed:77:c1:40:
         05:0e:c3:4d:70:b9:79:95:bd:e9:90:fc:8a:dc:df:07:7f:1c:
         ae:90:0f:8e:75:c7:33:f0:d5:25:44:64:a2:0f:7e:43:da:44:
         a6:9b:82:f1:bd:b4:06:30:dc:e6:97:39:a5:72:c7:ea:ae:47:
         7c:7c:12:19:e5:34:66:89:68:56:d8:ec:f2:81:b9:eb:56:d3:
         4d:6f:97:5a:e7:90:12:00:c0:d4:d5:fa:8c:3b:db:75:c5:67:
         58:ff:6b:b1:c5:30:26:7b:14:20:a0:42:fd:b2:d9:d9:8b:4b:
         05:81:b6:0f:35:d6:69:f0:d8:dc:66:4c:44:5b:3d:aa:05:17:
         75:e3:56:dd:0e:37:3d:60:b8:ee:43:45:1c:84:45:03:28:33:
         63:11:92:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----