Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/e8b89dd5e4b21782f1484cfae4c0ad31df3e3493.roa
File:                     e8b89dd5e4b21782f1484cfae4c0ad31df3e3493.roa (raw, json)
Hash identifier:          pl7QUKzsFxkCeQkicz8ITVH/Ge6ckmKuXWBe005ykzY=
Subject key identifier:   49:56:CC:7C:AF:9D:01:B2:C2:96:11:5B:0F:1C:15:8B:7D:62:FE:FB
Certificate issuer:       /CN=fd73397c8b35c9d5277acc116720117fd7bd3019
Certificate serial:       0CB2D4
Authority key identifier: 42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/e8b89dd5e4b21782f1484cfae4c0ad31df3e3493.roa
Signing time:             Wed 24 Mar 2021 14:33:01 +0000
ROA not before:           Wed 24 Mar 2021 14:33:01 +0000
ROA not after:            Tue 24 Mar 2026 14:33:01 +0000
asID:                     265826
IP address blocks:        45.70.228.0/22 maxlen: 22
                          2803:7420::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832212 (0xcb2d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd73397c8b35c9d5277acc116720117fd7bd3019
        Validity
            Not Before: Mar 24 14:33:01 2021 GMT
            Not After : Mar 24 14:33:01 2026 GMT
        Subject: CN=e8b89dd5e4b21782f1484cfae4c0ad31df3e3493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:88:64:43:05:0d:18:13:8f:25:74:cc:fa:d6:
                    cf:fc:ec:ce:28:1c:e9:64:fc:e9:48:d7:cb:b7:02:
                    4b:15:09:7f:a8:2c:49:6a:b3:91:fb:1e:60:e8:a9:
                    00:6b:1e:23:3a:6e:fa:88:2d:c8:1a:8a:c6:5d:e6:
                    2d:d1:08:56:f1:75:45:20:50:4b:34:5a:bd:43:08:
                    ff:94:47:23:96:04:d1:2f:48:6f:2f:5b:ea:ab:cc:
                    37:14:c6:1f:aa:ec:8b:13:ca:80:1c:51:44:9d:7a:
                    6e:73:78:64:86:b3:c4:57:dd:cf:7f:91:34:ee:cb:
                    87:29:10:64:cc:21:61:a9:bb:c1:d2:02:ee:27:18:
                    9b:92:3a:68:ed:be:c9:bd:e9:be:68:fd:f5:fb:c7:
                    9e:bc:78:c9:88:02:a3:d5:e0:28:bd:2f:0e:d1:c4:
                    e6:c0:55:94:ef:05:d9:c9:38:e9:81:75:2f:f6:ab:
                    29:35:4d:ca:21:9f:e6:bb:04:f9:f8:d8:24:1f:3a:
                    3e:e9:72:60:91:cf:70:75:df:15:52:93:4c:4e:c3:
                    7f:38:fb:ce:24:ae:17:6f:08:84:6a:70:0d:d0:f9:
                    96:de:fe:d1:76:57:5c:78:b7:2b:34:1c:0b:cd:ba:
                    7c:20:fd:1e:b0:ce:65:30:44:f8:04:54:e7:ea:50:
                    a0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:56:CC:7C:AF:9D:01:B2:C2:96:11:5B:0F:1C:15:8B:7D:62:FE:FB
            X509v3 Authority Key Identifier:
                keyid:42:D7:DB:F5:52:44:E1:80:47:26:DE:07:0F:65:8E:F6:A6:AA:D4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd73397c8b35c9d5277acc116720117fd7bd3019.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/e8b89dd5e4b21782f1484cfae4c0ad31df3e3493.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e2285186-1a7e-4650-989e-75c9c67f0b01/fd73397c8b35c9d5277acc116720117fd7bd3019.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.228.0/22
                IPv6:
                  2803:7420::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:e2:3d:ea:18:0f:da:ea:e5:9e:5a:11:f4:64:aa:6f:db:96:
         d2:c6:d3:cc:e4:0d:d4:93:44:df:80:5e:8c:e3:3a:44:90:ce:
         1d:ca:31:55:35:32:36:21:25:1f:dd:19:17:20:2a:22:20:74:
         11:fc:28:3b:02:3b:f6:ce:d9:8b:38:6a:67:f5:e0:de:2b:20:
         a2:15:04:5e:cd:4d:84:e2:56:a2:18:4f:68:67:30:fc:01:f2:
         0f:57:40:b5:11:22:b5:cf:e9:37:10:b8:86:a0:b9:e3:e4:a2:
         ac:9d:79:21:ea:60:d2:0f:f7:7a:cb:3a:2c:94:16:6c:6f:58:
         d4:d0:ec:92:1e:d2:1a:b6:4e:40:15:4f:ce:61:ac:81:82:fe:
         4b:25:ca:7f:5e:31:b2:8d:5a:a1:47:09:42:a5:5e:53:d5:e8:
         e2:7b:fe:5a:5e:b0:f4:3e:17:81:28:1d:cd:1e:40:38:74:6d:
         be:04:bd:68:dc:cc:34:75:5d:f4:3f:0a:b5:61:b4:03:eb:b6:
         3c:8b:6b:88:e8:9f:d4:19:77:57:67:30:05:a3:00:e4:a6:ce:
         f5:2e:d7:fa:3e:bb:cb:4e:23:76:58:dc:92:6a:1d:ec:b8:b8:
         97:6c:1e:7c:9a:66:f3:7d:4a:b2:3a:4e:31:b4:77:f0:19:37:
         24:42:d5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----