Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5df1744-7e84-428a-8686-c8782cc092cc/cb73682d489707296b929de0e0a03f58149a43a6.roa
File:                     cb73682d489707296b929de0e0a03f58149a43a6.roa (raw, json)
Hash identifier:          TeEK/EIx9EZZTCs7NO30LiMzP+bIQfNgHR+nX56gYu8=
Subject key identifier:   54:11:1F:96:8A:21:35:3F:B3:93:3F:32:2E:A8:18:BA:12:57:A5:70
Certificate issuer:       /CN=a45ed9891ebefc1daf2825f1096211931bbf962c
Certificate serial:       0D072E
Authority key identifier: 68:AB:51:0E:DC:D3:0E:EF:55:3E:96:50:9C:AB:1F:FD:3B:F7:B2:E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a45ed9891ebefc1daf2825f1096211931bbf962c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5df1744-7e84-428a-8686-c8782cc092cc/cb73682d489707296b929de0e0a03f58149a43a6.roa
Signing time:             Wed 24 Mar 2021 14:34:32 +0000
ROA not before:           Wed 24 Mar 2021 14:34:32 +0000
ROA not after:            Tue 24 Mar 2026 14:34:32 +0000
asID:                     266801
IP address blocks:        45.236.124.0/22 maxlen: 24
                          2803:c8a0::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853806 (0xd072e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a45ed9891ebefc1daf2825f1096211931bbf962c
        Validity
            Not Before: Mar 24 14:34:32 2021 GMT
            Not After : Mar 24 14:34:32 2026 GMT
        Subject: CN=cb73682d489707296b929de0e0a03f58149a43a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:be:10:51:f9:93:a6:3a:64:b7:b6:e5:cc:7a:
                    cc:9b:a4:9d:de:56:8f:75:eb:9d:70:74:87:a9:25:
                    32:e1:66:4d:18:10:5e:94:9b:41:df:ad:17:3d:da:
                    3b:32:b5:4c:9b:e0:61:f4:c3:02:73:7b:c7:ca:1c:
                    67:38:79:32:94:16:fb:b1:23:f7:b5:8f:89:e2:82:
                    28:ac:7e:09:69:d2:59:93:ed:5d:14:bc:60:8b:b8:
                    79:00:4a:d1:1d:bb:e7:c2:ad:c8:d0:70:a9:c9:ef:
                    07:b0:65:f5:a9:65:5c:6b:dd:4a:a9:db:69:b3:80:
                    a5:de:b4:22:70:27:a1:ae:8c:fe:07:6c:44:09:ef:
                    bb:8d:8a:17:1a:3a:ea:3f:22:65:13:c0:f8:16:c1:
                    36:2f:ce:27:ff:d7:2f:9a:e1:a4:5c:16:1a:7f:27:
                    0d:55:c9:cf:96:28:fd:a1:0c:cc:6d:07:82:ca:2c:
                    f1:b5:9e:c5:c7:b3:0d:2e:cc:3a:12:ee:80:db:c9:
                    d6:b7:45:f3:17:db:8c:2f:08:96:8b:25:a9:c5:3a:
                    a8:fe:f9:d7:9c:5c:ef:3c:44:e1:2b:a4:21:4a:a7:
                    b2:bb:8b:70:3f:ad:e5:43:d1:36:05:8b:e4:20:64:
                    68:21:fb:21:c5:2c:bf:10:6c:03:74:a7:58:45:9d:
                    49:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:11:1F:96:8A:21:35:3F:B3:93:3F:32:2E:A8:18:BA:12:57:A5:70
            X509v3 Authority Key Identifier:
                keyid:68:AB:51:0E:DC:D3:0E:EF:55:3E:96:50:9C:AB:1F:FD:3B:F7:B2:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a45ed9891ebefc1daf2825f1096211931bbf962c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5df1744-7e84-428a-8686-c8782cc092cc/cb73682d489707296b929de0e0a03f58149a43a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5df1744-7e84-428a-8686-c8782cc092cc/a45ed9891ebefc1daf2825f1096211931bbf962c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.124.0/22
                IPv6:
                  2803:c8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:3c:32:69:f1:75:32:7d:62:e2:bb:d4:df:3e:68:1f:58:f6:
         94:6d:f7:7f:dd:59:e5:7d:8f:7f:ec:ec:e7:01:8f:b9:c8:ac:
         a9:8b:c6:4d:9c:fd:11:66:3c:c9:0d:3e:3b:0b:b2:31:fe:8d:
         89:2e:16:23:b6:01:5e:29:b7:af:e4:93:2d:30:85:c8:09:68:
         d6:77:f0:9e:f5:99:d5:11:8b:1b:b3:3e:d4:c9:e2:a3:8c:4d:
         a7:fd:39:1a:4e:1c:c6:3f:4c:a3:3a:ac:8f:77:a0:d0:f5:c8:
         d5:5b:fe:b5:e3:c8:e4:21:17:63:13:d7:2a:29:a8:18:95:b1:
         92:67:76:2c:d8:31:98:4c:e5:ca:ad:a4:b4:f6:00:13:98:9b:
         f2:23:eb:fb:26:41:30:c9:41:67:0d:fa:00:a5:4c:51:ea:b1:
         fa:97:fc:47:ad:c5:a8:35:b7:3f:0d:d4:6b:28:65:14:c5:4c:
         2d:0f:8a:66:18:fb:8d:db:11:bc:01:9d:bd:ed:df:d3:f0:71:
         50:74:99:f7:1f:ae:5b:90:38:ba:18:e8:5d:72:2a:16:4e:30:
         12:80:e4:ff:79:5c:b3:42:c1:76:b8:08:ce:64:69:d2:87:f4:
         ae:d9:d5:7e:5f:33:2b:61:6f:81:ee:bb:14:3c:01:ce:23:a6:
         3c:bf:cc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----