Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/511b7d74b98c60bbb631bf934a35eef0a5fe2ab5.roa
File:                     511b7d74b98c60bbb631bf934a35eef0a5fe2ab5.roa (raw, json)
Hash identifier:          Kmw5Q90TONBmkjc+y9YUTMXoo7ChuHDPa0KZM7QOTE0=
Subject key identifier:   0D:F6:97:B6:90:92:C9:13:E0:8F:68:7A:DC:98:0F:7B:40:3A:6A:A8
Certificate issuer:       /CN=fd73397c8b35c9d5277acc116720117fd7bd3019
Certificate serial:       113627
Authority key identifier: 42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/511b7d74b98c60bbb631bf934a35eef0a5fe2ab5.roa
Signing time:             Tue 21 Sep 2021 23:08:56 +0000
ROA not before:           Tue 21 Sep 2021 03:00:00 +0000
ROA not after:            Mon 21 Sep 2026 03:00:00 +0000
asID:                     265826
IP address blocks:        45.70.228.0/22 maxlen: 23
                          45.70.228.0/23 maxlen: 23
                          45.70.230.0/23 maxlen: 23
                          2803:7420::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1127975 (0x113627)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd73397c8b35c9d5277acc116720117fd7bd3019
        Validity
            Not Before: Sep 21 03:00:00 2021 GMT
            Not After : Sep 21 03:00:00 2026 GMT
        Subject: CN=511b7d74b98c60bbb631bf934a35eef0a5fe2ab5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5c:cf:b4:fc:18:74:b6:7f:eb:7f:4b:ed:8c:
                    18:b0:f1:dc:76:3b:3d:20:13:af:54:87:a8:ff:74:
                    3e:08:e9:64:09:6c:ea:37:e8:46:38:49:9e:76:19:
                    27:ec:33:c5:67:18:04:5e:ca:b7:86:10:37:8e:db:
                    17:98:69:36:1c:ca:62:f0:3a:ce:d0:ee:c9:c2:5d:
                    3b:ca:06:23:b7:8c:54:cd:30:20:10:21:78:e3:93:
                    03:a5:15:c3:ae:21:fb:e8:d5:82:ee:5e:03:2d:c7:
                    2c:db:76:80:dd:47:97:f2:86:1f:ae:fd:e5:85:5c:
                    75:8d:f3:01:8a:95:7f:89:e5:67:3a:70:a1:82:c0:
                    81:83:44:61:75:bc:73:7a:dd:36:d4:71:89:7e:46:
                    a9:30:66:5d:c8:84:8c:cd:00:d4:78:55:f4:8d:05:
                    27:0a:b5:f3:25:76:20:75:9d:5a:84:81:64:9b:d6:
                    3f:79:23:f0:e3:26:5f:a7:00:2c:9f:67:30:ac:14:
                    f7:46:43:e5:a1:81:28:e0:ca:d8:9b:7c:68:14:fa:
                    42:f0:46:32:9f:9c:b5:2f:cd:b0:ae:3c:4b:c5:d9:
                    bd:96:93:82:75:61:28:35:9f:d8:92:7b:f6:ca:8b:
                    ed:7a:45:1d:a8:d0:e1:14:49:de:bd:bb:38:73:0c:
                    87:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F6:97:B6:90:92:C9:13:E0:8F:68:7A:DC:98:0F:7B:40:3A:6A:A8
            X509v3 Authority Key Identifier:
                keyid:42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/511b7d74b98c60bbb631bf934a35eef0a5fe2ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/fd73397c8b35c9d5277acc116720117fd7bd3019.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.228.0/22
                IPv6:
                  2803:7420::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:c2:22:78:aa:01:9a:41:64:7a:6f:f5:02:3c:4a:ad:de:fd:
         1a:30:8e:89:75:73:46:69:74:cf:29:9c:ac:ef:1e:8f:ae:a0:
         51:2a:c0:5a:29:c4:51:91:e8:a8:55:c7:e6:54:06:ac:e4:17:
         5b:45:63:1c:45:40:0c:d6:4c:1d:1e:b5:44:5f:82:f0:bf:15:
         f2:18:ad:c8:f6:67:7b:d3:46:7e:cb:01:73:9f:38:ba:5a:5e:
         04:2f:7c:e5:16:67:0b:e1:50:d3:e6:6a:7b:bb:3d:34:18:b6:
         f4:91:4c:04:84:e0:af:bf:02:66:82:f7:d2:14:52:a1:8b:e3:
         7f:c3:9d:76:ca:eb:48:81:dd:d9:fa:99:ac:2e:87:0d:4b:12:
         dc:a0:fb:70:3c:b3:bb:91:72:67:7d:f4:e9:f9:8d:a9:b0:ae:
         eb:67:07:d9:8c:59:f4:e6:b2:65:01:70:11:7c:ac:24:3a:a1:
         c7:6e:35:52:1e:0c:3e:1b:e8:5c:54:c3:46:7b:7a:91:02:c9:
         a3:95:ba:24:f7:a0:88:81:42:28:db:08:8c:ac:8c:1a:dc:9b:
         e6:58:bb:f0:b7:a5:95:93:3e:ea:36:1a:80:37:6a:da:ad:2c:
         9c:6a:97:52:e1:b0:6a:9b:ac:46:5d:33:6c:26:67:05:d5:e7:
         69:05:4e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----