Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e35632a4-983c-4122-a09f-9d121a7aa206/5bbfb419abe1503f2bbb62c9a277c72b7ca17d55.roa
File:                     5bbfb419abe1503f2bbb62c9a277c72b7ca17d55.roa (raw, json)
Hash identifier:          K+vofTnpDMn45PN/hCfRxpi9lCjHLlmVwA9H06fWnxE=
Subject key identifier:   81:98:57:30:10:1D:4C:81:FC:3F:57:CD:0B:CB:66:63:B9:40:B0:21
Certificate issuer:       /CN=9ce5ca5d2bce578ea8898f8262cf5e0334bc0ab9
Certificate serial:       0BB700
Authority key identifier: 53:53:12:97:1B:92:05:9D:EA:8B:D4:FA:51:DC:78:E7:EC:F7:BF:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9ce5ca5d2bce578ea8898f8262cf5e0334bc0ab9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e35632a4-983c-4122-a09f-9d121a7aa206/5bbfb419abe1503f2bbb62c9a277c72b7ca17d55.roa
Signing time:             Wed 24 Mar 2021 14:32:38 +0000
ROA not before:           Wed 24 Mar 2021 14:32:38 +0000
ROA not after:            Tue 24 Mar 2026 14:32:38 +0000
asID:                     269762
IP address blocks:        45.181.164.0/22 maxlen: 24
                          2803:8560::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767744 (0xbb700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ce5ca5d2bce578ea8898f8262cf5e0334bc0ab9
        Validity
            Not Before: Mar 24 14:32:38 2021 GMT
            Not After : Mar 24 14:32:38 2026 GMT
        Subject: CN=5bbfb419abe1503f2bbb62c9a277c72b7ca17d55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:be:7a:b6:73:7f:40:e6:b8:ac:d6:ce:eb:8b:
                    c0:0b:e8:bd:f4:74:21:85:55:dd:3c:18:3c:75:4c:
                    e1:f7:d6:5b:ed:30:8b:81:bd:04:d9:12:07:fa:a7:
                    70:44:b0:ee:83:bd:ac:cd:68:ab:c8:99:2a:0e:cf:
                    ef:5d:f3:60:75:e1:6c:03:63:32:7e:1f:91:ed:10:
                    20:6f:32:92:99:6b:09:3f:03:ae:7a:e4:78:94:71:
                    d0:3b:62:19:fa:d4:ef:e5:2f:de:48:7a:8a:de:3f:
                    41:b8:d5:87:ff:65:f0:99:af:81:97:5f:b7:27:b8:
                    84:17:3f:92:10:5a:2f:f9:92:37:d0:bc:e2:d4:5c:
                    71:d4:a6:d5:43:67:0f:52:1d:97:e6:f9:13:84:0a:
                    9f:fc:ec:0e:02:b9:d4:ad:b4:5c:3c:5b:48:85:a4:
                    70:e5:74:65:4f:24:6e:14:72:c7:56:13:77:a3:9b:
                    e7:ad:c6:6a:a3:8a:fe:6a:36:04:95:68:38:8c:a2:
                    08:fa:94:41:a7:8a:31:bd:46:3b:11:79:7c:91:7e:
                    aa:ca:5e:3a:23:cf:80:d4:c6:c7:01:e5:eb:ee:88:
                    24:71:76:0e:2a:fc:69:0d:41:48:5f:56:e5:74:0f:
                    50:83:fa:e7:c7:97:e6:16:39:70:b8:66:1f:93:25:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:98:57:30:10:1D:4C:81:FC:3F:57:CD:0B:CB:66:63:B9:40:B0:21
            X509v3 Authority Key Identifier:
                keyid:53:53:12:97:1B:92:05:9D:EA:8B:D4:FA:51:DC:78:E7:EC:F7:BF:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9ce5ca5d2bce578ea8898f8262cf5e0334bc0ab9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e35632a4-983c-4122-a09f-9d121a7aa206/5bbfb419abe1503f2bbb62c9a277c72b7ca17d55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e35632a4-983c-4122-a09f-9d121a7aa206/9ce5ca5d2bce578ea8898f8262cf5e0334bc0ab9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.164.0/22
                IPv6:
                  2803:8560::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:71:e8:e9:94:b6:aa:9f:78:49:37:f5:4c:36:1e:c2:0d:5f:
         3e:07:a2:fc:51:fc:3e:cf:53:16:14:9e:3b:ee:27:35:0b:f2:
         fc:85:26:17:62:b6:b5:8b:56:0c:92:e5:3d:06:aa:b6:88:0f:
         ab:a1:53:53:bd:e9:09:98:e9:c3:a5:83:12:3d:26:7a:3f:4b:
         53:51:d5:b8:f5:ba:e2:f9:37:28:54:fd:0c:9d:d0:60:ec:6d:
         c3:26:0b:1d:cb:22:84:0c:5b:ee:aa:73:c2:45:d2:dd:53:33:
         59:d5:a7:27:90:60:81:d7:78:8f:0b:0d:95:96:dc:c7:67:80:
         47:aa:41:f9:fe:30:99:91:57:4b:88:86:3a:9e:84:b6:ba:9a:
         60:5a:1e:90:1c:78:87:db:82:37:8d:e2:cf:06:19:cc:35:54:
         88:14:e9:0d:0c:e6:3b:0e:cf:6f:fc:7e:5b:12:dd:30:de:e5:
         32:e9:19:2f:c5:4a:43:23:a5:ed:0c:a5:09:5f:f1:41:01:c8:
         90:62:53:6a:b5:b9:3f:f3:14:0d:47:22:51:c9:a8:73:d6:c8:
         11:6c:15:fb:7c:a6:d9:4c:6e:b7:7d:37:54:8d:18:5f:dc:91:
         05:7d:9c:2a:6a:8f:e8:a1:4d:6b:f4:44:e7:fb:19:24:a0:30:
         0e:4e:52:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----