Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e36d8c8f-3bcd-4db3-9eaf-55e3b2d1efaf/b04cfa9ee68f1eff01438db0fbdccdc20c944bc0.roa
File:                     b04cfa9ee68f1eff01438db0fbdccdc20c944bc0.roa (raw, json)
Hash identifier:          HA2sRUhk030sqQf7S/O0SmjS5pnB7Iuqyvo693jAisU=
Subject key identifier:   6E:97:DD:EB:A3:4C:D1:A9:26:30:A0:80:4C:3D:B8:00:E8:A5:1F:6E
Certificate issuer:       /CN=35d2dd8787d06a1f532e2dd2d3ef7f7df61d9af0
Certificate serial:       0CCB0B
Authority key identifier: 72:01:63:2D:08:3E:AE:AD:08:DD:CC:00:DB:94:37:78:03:AE:7F:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35d2dd8787d06a1f532e2dd2d3ef7f7df61d9af0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e36d8c8f-3bcd-4db3-9eaf-55e3b2d1efaf/b04cfa9ee68f1eff01438db0fbdccdc20c944bc0.roa
Signing time:             Wed 24 Mar 2021 14:34:12 +0000
ROA not before:           Wed 24 Mar 2021 14:34:12 +0000
ROA not after:            Tue 24 Mar 2026 14:34:12 +0000
asID:                     266818
IP address blocks:        45.236.174.0/23 maxlen: 24
                          192.12.118.0/24 maxlen: 24
                          2803:f8a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838411 (0xccb0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35d2dd8787d06a1f532e2dd2d3ef7f7df61d9af0
        Validity
            Not Before: Mar 24 14:34:12 2021 GMT
            Not After : Mar 24 14:34:12 2026 GMT
        Subject: CN=b04cfa9ee68f1eff01438db0fbdccdc20c944bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:64:46:9a:95:27:77:e2:28:c4:4f:52:4f:c0:
                    c6:2d:23:78:4c:a1:2e:35:28:14:35:05:81:49:92:
                    f2:50:60:8d:41:a4:ea:7a:74:22:91:4d:9f:6f:e8:
                    a1:f2:e7:de:b0:01:e4:c1:8f:2e:ff:04:88:6f:9a:
                    63:76:48:5a:fe:39:d5:09:44:20:fb:45:86:18:5e:
                    a2:e4:03:a4:bb:52:13:26:88:79:8a:e5:b0:f6:34:
                    30:5c:b1:20:d0:7e:b8:64:99:1c:82:62:fe:7e:c6:
                    f7:f2:11:dd:ba:f8:22:e7:e1:9c:bf:51:1f:06:ab:
                    1b:da:dc:1a:3f:9d:86:92:87:42:b8:1d:39:69:59:
                    bb:6a:38:3c:04:40:66:75:3d:cd:37:4b:ec:3e:a3:
                    1e:6b:7a:c8:10:13:a3:18:a1:bf:24:90:28:ba:fb:
                    88:6d:35:d3:64:b9:6c:48:c5:6a:f4:51:d7:c1:8f:
                    26:e8:76:25:27:34:fa:ac:5f:fd:97:63:1e:92:cc:
                    1d:67:f5:39:97:36:01:26:aa:81:05:9b:f0:a2:1a:
                    67:2f:cb:f0:7d:78:96:a1:0f:1d:38:4a:56:2b:5d:
                    9e:68:86:f3:b8:59:a8:79:54:3d:bb:d9:22:00:c8:
                    84:b0:3e:3e:ff:5d:91:a6:7c:ce:92:01:ae:e5:7e:
                    0d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:97:DD:EB:A3:4C:D1:A9:26:30:A0:80:4C:3D:B8:00:E8:A5:1F:6E
            X509v3 Authority Key Identifier:
                keyid:72:01:63:2D:08:3E:AE:AD:08:DD:CC:00:DB:94:37:78:03:AE:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35d2dd8787d06a1f532e2dd2d3ef7f7df61d9af0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e36d8c8f-3bcd-4db3-9eaf-55e3b2d1efaf/b04cfa9ee68f1eff01438db0fbdccdc20c944bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e36d8c8f-3bcd-4db3-9eaf-55e3b2d1efaf/35d2dd8787d06a1f532e2dd2d3ef7f7df61d9af0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.174.0/23
                  192.12.118.0/24
                IPv6:
                  2803:f8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0e:c6:a7:a6:28:94:b0:57:eb:99:6c:0a:ae:78:26:26:9b:65:
         18:94:a7:37:eb:10:1b:69:b7:60:bb:39:04:55:09:bf:da:ab:
         a9:c0:f5:a7:2a:e3:62:f0:67:33:57:c5:60:e9:29:53:ef:25:
         13:d7:98:41:f2:18:b6:0a:5f:49:60:6d:39:90:43:e5:ed:3f:
         d1:55:45:c8:6b:00:4a:ae:da:df:34:36:4e:14:c7:73:f0:ac:
         f5:33:0f:3d:2f:d9:17:94:dd:1c:72:a8:f7:ea:db:e4:c2:9c:
         5e:8a:d4:fa:0c:23:55:09:77:8d:46:a3:a3:d9:b3:5c:dc:9a:
         8f:3e:b2:4b:ee:e8:1c:bc:ca:57:70:98:b8:d8:c8:d1:1c:4a:
         0d:bb:97:df:fa:dc:f7:21:cc:77:4c:c2:be:c1:fa:94:6d:5b:
         c0:5c:3a:61:b8:03:aa:e6:c3:e9:c8:87:11:4f:f9:46:ae:9d:
         ab:ff:66:26:94:8c:e5:4a:cf:93:e6:34:4a:2b:19:e1:45:78:
         86:45:0f:ca:77:d0:c6:d1:cf:6f:4c:81:96:78:78:9b:f5:da:
         e6:cc:31:2c:99:d3:3a:c9:46:34:fb:1f:46:d9:b3:04:84:f5:
         ff:e1:d7:94:3c:38:e8:0f:df:3f:e8:11:af:14:29:44:06:5a:
         cc:d4:a0:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----