Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e883b3dc-230d-4358-b795-f6d76691dc97/4661fcd8add04e51c8d298802efee008525df808.roa
File:                     4661fcd8add04e51c8d298802efee008525df808.roa (raw, json)
Hash identifier:          lU55SeQQIRapPgMipZCUbKXyZXqScNd2Fk7LCln0x9Q=
Subject key identifier:   04:52:A8:6C:09:D0:17:C5:CC:AE:1A:2B:CC:63:6A:CC:48:AE:75:E8
Certificate issuer:       /CN=1b4313984e00131c798f155a8a90f10275d4805b
Certificate serial:       0DAEA6
Authority key identifier: 65:4B:75:43:D5:76:BC:26:24:4E:29:A6:AC:9B:67:79:80:74:F8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b4313984e00131c798f155a8a90f10275d4805b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e883b3dc-230d-4358-b795-f6d76691dc97/4661fcd8add04e51c8d298802efee008525df808.roa
Signing time:             Wed 24 Mar 2021 14:30:17 +0000
ROA not before:           Wed 24 Mar 2021 14:30:17 +0000
ROA not after:            Tue 24 Mar 2026 14:30:17 +0000
asID:                     52444
IP address blocks:        45.7.240.0/22 maxlen: 24
                          2803:23c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896678 (0xdaea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b4313984e00131c798f155a8a90f10275d4805b
        Validity
            Not Before: Mar 24 14:30:17 2021 GMT
            Not After : Mar 24 14:30:17 2026 GMT
        Subject: CN=4661fcd8add04e51c8d298802efee008525df808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6c:e0:e3:9d:b8:46:01:e7:e7:e2:4a:82:09:
                    78:6a:02:5c:e3:5c:f5:1b:3e:5c:75:ac:14:aa:c6:
                    49:07:cd:16:59:4b:95:46:fd:6b:bb:f2:f7:24:7c:
                    e4:29:39:87:e5:62:58:00:ca:76:8a:25:32:4f:10:
                    2b:65:37:91:58:d3:b2:87:fa:b6:c3:85:dd:06:68:
                    17:25:ac:8c:3f:a4:84:7a:7f:9e:3d:1e:fe:d3:47:
                    38:6b:80:68:a7:39:1e:b3:62:25:eb:8a:58:8d:09:
                    cd:a4:53:50:de:62:d3:77:ec:e9:e6:79:04:1f:28:
                    87:1c:42:e3:2f:69:c4:d3:cf:17:cd:73:c6:5f:3b:
                    5b:dd:f8:cc:93:16:ee:2f:49:b6:3f:27:9d:61:6e:
                    da:80:bc:e1:70:ce:34:fa:7d:99:43:b7:f0:ce:31:
                    ac:7b:59:e8:c9:2e:09:41:6b:f1:f9:c5:3b:d1:8a:
                    fb:fb:11:c2:47:7d:45:5c:af:ef:9a:7e:1a:e0:dd:
                    dc:f0:3b:20:09:2a:67:2b:b1:3c:c5:a0:dd:94:96:
                    cf:5b:07:21:6c:8a:5f:4c:83:5f:2f:75:95:cb:f4:
                    39:97:7f:b6:1d:09:b7:23:4e:0c:4c:82:25:ce:6a:
                    f5:36:fd:b9:f1:65:fb:1a:0c:68:66:b3:da:26:00:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:52:A8:6C:09:D0:17:C5:CC:AE:1A:2B:CC:63:6A:CC:48:AE:75:E8
            X509v3 Authority Key Identifier:
                keyid:65:4B:75:43:D5:76:BC:26:24:4E:29:A6:AC:9B:67:79:80:74:F8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b4313984e00131c798f155a8a90f10275d4805b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e883b3dc-230d-4358-b795-f6d76691dc97/4661fcd8add04e51c8d298802efee008525df808.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e883b3dc-230d-4358-b795-f6d76691dc97/1b4313984e00131c798f155a8a90f10275d4805b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.240.0/22
                IPv6:
                  2803:23c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:34:0d:18:2f:91:e3:24:c1:df:0b:df:c5:3d:fb:75:99:59:
         51:ad:7b:4b:86:48:ed:fc:36:49:b4:92:30:81:dc:8b:bb:f3:
         92:99:d4:71:02:11:81:f3:62:d6:33:58:65:9d:f6:59:48:bf:
         ea:2e:ca:f1:ca:38:33:1b:4b:a4:33:b9:af:1f:50:70:c6:56:
         cf:f0:53:cf:9e:64:14:8d:22:f3:84:8c:c1:77:26:a2:66:aa:
         29:35:e9:2d:7e:14:58:02:b6:7a:b9:4f:8a:52:bc:34:a8:ee:
         e4:c7:91:bb:b0:6f:5a:60:c7:b6:f6:42:f1:e4:91:4d:ae:68:
         be:e5:b5:c4:2f:15:37:f1:a0:29:8b:22:c7:83:ff:f7:89:f7:
         4e:6e:3b:7f:1e:69:aa:19:50:01:1e:da:ef:e1:f3:34:37:67:
         e2:68:fb:30:c6:b2:03:4b:86:f9:af:d3:7c:ca:8e:bd:b4:49:
         2d:30:db:b7:f9:99:6f:a0:d6:29:8f:0e:a4:36:0b:b7:4d:59:
         7d:18:61:f6:e1:2c:a2:2b:65:bd:a6:fe:da:58:12:e6:00:3d:
         79:4e:a8:bd:31:f2:1d:ba:a6:13:ca:d0:62:10:0a:1d:95:fc:
         e0:c4:05:4d:9a:a0:25:4f:8f:9e:d5:68:3d:07:46:aa:96:35:
         70:0b:77:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----