Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e42c879a-82b5-4939-bdda-072666b8f97e/fa164ebefda7912170fb818fc0bd0af85d561bbe.roa
File:                     fa164ebefda7912170fb818fc0bd0af85d561bbe.roa (raw, json)
Hash identifier:          WdqVPkIjVWR6MOfZzmwmpLce07CPqkugTm84mDaqons=
Subject key identifier:   00:FA:F6:CA:08:D6:92:36:29:D4:9A:AC:4B:90:FC:C5:C4:3A:F1:05
Certificate issuer:       /CN=29024272554211c78e58b388c13c64df8f339de9
Certificate serial:       033E6F
Authority key identifier: 9D:6B:13:F2:6D:C5:83:94:D5:4A:96:D1:D9:C9:88:8C:C7:EA:58:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29024272554211c78e58b388c13c64df8f339de9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e42c879a-82b5-4939-bdda-072666b8f97e/fa164ebefda7912170fb818fc0bd0af85d561bbe.roa
Signing time:             Wed 24 Mar 2021 14:43:27 +0000
ROA not before:           Wed 24 Mar 2021 14:43:27 +0000
ROA not after:            Tue 24 Mar 2026 14:43:27 +0000
asID:                     265566
IP address blocks:        45.172.92.0/22 maxlen: 24
                          2806:316::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 212591 (0x33e6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29024272554211c78e58b388c13c64df8f339de9
        Validity
            Not Before: Mar 24 14:43:27 2021 GMT
            Not After : Mar 24 14:43:27 2026 GMT
        Subject: CN=fa164ebefda7912170fb818fc0bd0af85d561bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:aa:b3:46:ef:c2:9e:1c:3c:26:55:34:b8:68:
                    85:b2:a1:bb:1b:19:c6:35:9d:59:15:c3:2e:24:e2:
                    16:f2:35:10:60:58:b7:3c:ea:be:98:20:35:c6:2d:
                    d7:05:1d:a2:ad:76:8d:bf:09:81:fd:13:1d:d2:0e:
                    45:ab:d0:a6:63:33:20:20:e5:f2:a7:0e:7d:e4:ff:
                    e5:04:af:85:35:80:03:4e:0c:fa:a6:00:b2:7b:db:
                    e5:52:65:54:ce:13:2c:99:e4:f4:2b:97:2e:a5:54:
                    32:33:17:9f:04:8f:75:11:7a:79:68:00:d0:3b:f3:
                    78:15:3d:7f:92:9c:9e:df:da:28:5b:bf:17:7c:9b:
                    51:ab:45:54:bb:e7:e7:a4:8a:b3:12:93:86:b6:45:
                    9a:98:d9:cc:85:b9:c3:a9:5d:11:da:f8:1a:d2:b7:
                    c4:ac:06:aa:ec:e4:c9:0e:54:56:62:af:0c:fe:45:
                    77:99:17:07:ce:2d:d8:a7:3c:89:66:ed:ce:44:4d:
                    9b:e2:bd:f6:38:b2:99:95:37:47:97:cb:e5:58:7b:
                    85:91:c2:80:0c:14:e7:86:37:d4:28:11:63:0d:99:
                    ea:04:70:8e:de:9a:6b:33:c3:cd:d3:a1:0b:ec:bd:
                    b5:89:8f:25:5d:67:5c:fa:86:fa:72:a9:5e:ab:d7:
                    67:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FA:F6:CA:08:D6:92:36:29:D4:9A:AC:4B:90:FC:C5:C4:3A:F1:05
            X509v3 Authority Key Identifier:
                keyid:9D:6B:13:F2:6D:C5:83:94:D5:4A:96:D1:D9:C9:88:8C:C7:EA:58:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29024272554211c78e58b388c13c64df8f339de9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e42c879a-82b5-4939-bdda-072666b8f97e/fa164ebefda7912170fb818fc0bd0af85d561bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e42c879a-82b5-4939-bdda-072666b8f97e/29024272554211c78e58b388c13c64df8f339de9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.92.0/22
                IPv6:
                  2806:316::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:d8:65:7a:1a:26:69:62:cf:20:dc:ce:8f:9a:50:12:c7:e4:
         6b:93:76:05:5e:48:0b:81:6d:9e:ed:96:36:f2:44:4b:a3:a0:
         4b:35:74:60:cc:43:30:ae:ff:bd:40:03:c2:58:fa:e2:f9:92:
         8f:b3:30:a9:e4:21:47:43:00:69:98:df:0a:13:23:98:14:57:
         03:c5:e7:8f:ec:a8:79:8e:23:5e:90:41:e1:cb:85:8e:0b:c5:
         bc:08:5b:2d:71:0c:ec:74:3f:f1:13:a5:db:59:6a:ba:eb:c0:
         b3:87:e8:36:dd:3f:6e:e5:6b:a4:81:67:b4:62:5a:0c:bf:27:
         84:80:44:e9:bc:d0:4e:1b:c8:8b:96:1c:70:2a:8e:d6:fc:05:
         44:78:ef:9a:c0:54:56:30:a8:c2:7f:c9:eb:80:8c:c6:b5:b5:
         07:c2:79:48:cb:2e:0e:76:d1:21:80:79:8f:0b:14:b9:be:cb:
         44:22:16:89:50:2a:42:20:5d:b5:f1:57:58:b9:48:a8:dd:da:
         02:fa:11:c6:fe:ba:b4:3e:b2:74:e3:3a:a4:f6:61:e4:51:44:
         57:a7:9e:b0:7f:d5:a0:b7:be:1a:42:5c:63:46:2b:8f:02:27:
         dd:4e:18:73:25:b6:3d:70:92:83:53:55:93:20:75:cb:42:72:
         f4:e0:b0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----