Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7fa06d5-6cf2-4aa7-8654-5ccfda63e95d/344fc442caefe7bbeb0b3f03f3ff74280a71121a.roa
File:                     344fc442caefe7bbeb0b3f03f3ff74280a71121a.roa (raw, json)
Hash identifier:          2Lg8yVMiqkFe4/ZUKAwNBLGn7b9O/Yw8SfR27eiZ8/U=
Subject key identifier:   3B:29:10:37:2E:18:48:CC:D1:61:EB:6B:06:B5:55:C1:05:C3:A3:C1
Certificate issuer:       /CN=07e2e6c3332dc1c0dd7cf2fdfee30f92800baf3a
Certificate serial:       036F39
Authority key identifier: 54:4B:CD:8E:97:D5:DD:76:E6:7D:78:3D:09:8C:17:7D:F0:84:08:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07e2e6c3332dc1c0dd7cf2fdfee30f92800baf3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7fa06d5-6cf2-4aa7-8654-5ccfda63e95d/344fc442caefe7bbeb0b3f03f3ff74280a71121a.roa
Signing time:             Wed 24 Mar 2021 14:32:29 +0000
ROA not before:           Wed 24 Mar 2021 14:32:29 +0000
ROA not after:            Tue 24 Mar 2026 14:32:29 +0000
asID:                     265876
IP address blocks:        45.226.228.0/22 maxlen: 24
                          2803:1e20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225081 (0x36f39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07e2e6c3332dc1c0dd7cf2fdfee30f92800baf3a
        Validity
            Not Before: Mar 24 14:32:29 2021 GMT
            Not After : Mar 24 14:32:29 2026 GMT
        Subject: CN=344fc442caefe7bbeb0b3f03f3ff74280a71121a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:30:5d:9d:30:02:13:79:8e:9f:e1:27:d5:c1:
                    92:70:fd:07:44:46:c3:89:4d:84:46:f2:cc:92:4c:
                    d4:18:6c:ba:39:1c:f0:38:e7:b0:3c:13:38:1b:06:
                    de:9d:63:e8:e0:6c:f4:a3:92:24:03:80:0e:ca:98:
                    92:70:c8:fb:da:ac:91:b4:cf:9b:3e:94:3a:68:c8:
                    fd:a7:4c:b6:22:80:11:e2:e0:4b:cb:bf:4c:6e:a2:
                    32:84:34:24:97:ad:86:54:85:09:49:94:8a:87:ce:
                    b4:dc:a4:20:81:00:b0:db:4a:b8:89:10:fe:c0:e4:
                    36:3e:82:6f:dd:9b:9d:a1:8d:bb:70:db:b9:01:2d:
                    39:b7:63:9d:7a:6b:a1:27:15:82:bb:ef:ef:dc:65:
                    14:c1:0d:69:94:2d:18:7e:d8:de:a1:74:94:5c:be:
                    59:9f:92:c3:30:bd:92:e7:17:97:6a:c0:14:25:9d:
                    cd:aa:6a:87:1e:0e:df:23:1d:88:8b:db:bf:3f:76:
                    df:a9:37:27:1d:76:b7:94:dc:72:2e:0f:b2:bb:1b:
                    b4:46:0e:1c:26:ce:e7:18:02:39:0a:b4:93:56:5d:
                    59:d0:54:d5:63:09:44:63:88:8a:3d:35:a7:33:32:
                    dc:71:e1:c3:bd:b0:3b:51:9a:52:76:e1:48:87:51:
                    fb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:29:10:37:2E:18:48:CC:D1:61:EB:6B:06:B5:55:C1:05:C3:A3:C1
            X509v3 Authority Key Identifier:
                keyid:54:4B:CD:8E:97:D5:DD:76:E6:7D:78:3D:09:8C:17:7D:F0:84:08:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07e2e6c3332dc1c0dd7cf2fdfee30f92800baf3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7fa06d5-6cf2-4aa7-8654-5ccfda63e95d/344fc442caefe7bbeb0b3f03f3ff74280a71121a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7fa06d5-6cf2-4aa7-8654-5ccfda63e95d/07e2e6c3332dc1c0dd7cf2fdfee30f92800baf3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.228.0/22
                IPv6:
                  2803:1e20::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:ad:75:40:0c:92:c8:fd:01:7f:92:41:fb:32:d2:4e:2a:32:
         ff:25:94:42:d2:57:0a:67:0e:ca:ec:f6:35:fb:f3:1c:11:06:
         7d:54:4f:e5:46:3e:3d:57:0a:ee:fa:0c:9d:52:03:4c:07:1b:
         c0:8e:a1:9a:3d:5b:31:ef:ce:95:f4:d6:7a:29:34:0b:e8:bc:
         83:4b:49:88:9f:d6:f6:f9:7f:67:24:c6:85:6e:95:19:d7:39:
         d3:aa:80:0a:9d:e5:a4:ac:86:07:2e:f1:d2:ae:5c:d7:20:45:
         e7:2c:60:44:ad:10:c2:9d:d1:ad:2e:d1:0c:bb:db:db:6a:fc:
         35:3a:2b:5d:66:f5:c0:c2:35:93:e4:d6:69:f6:fa:71:95:f3:
         22:c8:d5:61:5f:e3:5a:9f:a2:61:b0:95:7a:4b:d2:ef:6e:ee:
         c4:7d:50:82:8a:b7:7a:42:9a:a0:c3:26:d0:6f:50:a6:74:24:
         e0:ed:f8:63:2f:1a:98:bb:09:5e:ee:83:72:30:cf:90:93:89:
         cd:9a:8c:a9:19:70:40:de:4d:41:03:c6:ea:53:18:f1:c9:17:
         ec:03:1c:ea:b9:d2:76:93:92:51:0d:26:81:49:f4:59:0e:b4:
         fd:77:e1:10:b5:a9:84:a1:a7:a2:ab:6f:14:e2:10:8c:f3:9b:
         c3:e9:3c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----