Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eaa26041-a49d-4c63-a42e-8daffcf390a0/182476fc54670c21abb3a0b9b07356198dff3c76.roa
File:                     182476fc54670c21abb3a0b9b07356198dff3c76.roa (raw, json)
Hash identifier:          whlNmc50r5oDMVA3L8QP0maI9SCjL6qzHUGCCUohScc=
Subject key identifier:   D2:94:15:CB:FD:89:C5:12:AA:D5:96:9E:1E:09:C8:10:94:8D:50:7A
Certificate issuer:       /CN=bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd
Certificate serial:       0BC67A
Authority key identifier: D5:03:72:6D:33:A2:36:33:B3:3C:86:79:A8:3A:8F:E2:4C:01:26:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eaa26041-a49d-4c63-a42e-8daffcf390a0/182476fc54670c21abb3a0b9b07356198dff3c76.roa
Signing time:             Wed 24 Mar 2021 14:36:58 +0000
ROA not before:           Wed 24 Mar 2021 14:36:57 +0000
ROA not after:            Tue 24 Mar 2026 14:36:57 +0000
asID:                     267890
IP address blocks:        45.178.12.0/22 maxlen: 32
                          2803:da60::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771706 (0xbc67a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd
        Validity
            Not Before: Mar 24 14:36:57 2021 GMT
            Not After : Mar 24 14:36:57 2026 GMT
        Subject: CN=182476fc54670c21abb3a0b9b07356198dff3c76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b5:bb:c6:09:d9:d3:09:0b:da:b4:fe:32:ec:
                    03:31:2f:f1:98:8c:43:b1:89:ae:b6:63:cf:43:d9:
                    8a:af:ed:30:6e:b0:75:1b:bb:cd:f2:7b:44:bb:3d:
                    ed:c8:12:b0:d9:39:25:2e:f1:94:80:28:31:7b:78:
                    8d:1d:bf:fb:14:06:47:1a:96:c1:21:43:65:63:a0:
                    70:12:77:0b:2e:1f:53:a1:4a:16:da:a3:a9:38:ee:
                    a2:c6:f5:5a:5b:02:d8:85:95:6f:b4:2e:6b:66:d7:
                    c8:4e:70:9c:14:80:09:19:52:43:9f:3b:f2:c5:4a:
                    cc:ee:98:1d:6f:82:ef:44:eb:83:b8:46:65:7c:95:
                    d4:bb:3f:44:c8:02:de:43:8a:39:ca:81:e7:35:e7:
                    ec:e2:27:52:96:21:df:58:5d:51:56:3c:5b:b1:e5:
                    9c:86:2b:cb:50:a5:92:c7:15:24:14:b5:e5:08:41:
                    2b:4a:93:72:af:ab:dc:b7:cf:77:cd:33:b9:6e:67:
                    fa:61:2f:bd:be:51:32:5b:6c:46:91:d7:28:cb:a2:
                    02:1d:6c:93:1a:40:d1:4f:f5:0f:02:6e:a1:25:f6:
                    ac:73:19:2f:41:24:b9:60:13:7d:8f:38:68:93:39:
                    c6:c2:64:12:8c:5e:f7:69:d8:f4:c9:0c:10:2f:e4:
                    d3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:94:15:CB:FD:89:C5:12:AA:D5:96:9E:1E:09:C8:10:94:8D:50:7A
            X509v3 Authority Key Identifier:
                keyid:D5:03:72:6D:33:A2:36:33:B3:3C:86:79:A8:3A:8F:E2:4C:01:26:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eaa26041-a49d-4c63-a42e-8daffcf390a0/182476fc54670c21abb3a0b9b07356198dff3c76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eaa26041-a49d-4c63-a42e-8daffcf390a0/bf8f3c879d53761a8a6f9590bdb82a24b23ac5bd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.12.0/22
                IPv6:
                  2803:da60::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:e2:4e:2d:d5:42:4e:cf:4b:a7:4e:8e:b6:cf:c5:74:8a:da:
         2e:43:dc:c7:1a:8f:2e:50:fd:2f:7f:1b:fb:37:01:19:b3:2b:
         81:7f:10:8c:a3:15:b5:56:f5:52:ce:4b:b3:e8:2a:8d:ab:95:
         c4:75:d4:b1:8c:15:1c:2d:7c:0e:9f:e5:c0:c1:fe:3f:d4:04:
         ac:d6:5e:2d:41:e1:09:cb:f1:db:e7:d2:00:5b:b4:dc:19:69:
         a0:a2:25:ac:2e:c5:4e:ae:e5:55:3d:f6:1c:b6:6d:36:f3:eb:
         6f:83:7f:0b:52:2a:04:88:6e:11:38:ce:c3:8f:1e:d4:73:71:
         7d:8c:de:f1:9f:fa:c2:b6:4d:38:bd:23:13:36:6b:69:df:b7:
         50:f8:05:40:90:60:c6:20:82:96:35:32:6d:6a:48:ac:ce:1b:
         b2:c3:cf:92:20:2b:3b:84:73:4c:54:28:94:15:9e:ae:3c:2e:
         e5:49:48:e4:97:a7:f4:b7:dd:0f:85:38:3e:b1:48:a6:d2:2e:
         7c:17:ee:54:64:59:b6:fc:0a:4c:38:3a:9f:f1:70:e9:0e:89:
         c6:40:8f:64:80:2e:b9:4e:e9:53:95:dc:02:d4:0f:35:9b:62:
         58:e9:8e:73:e3:14:8e:aa:81:82:5c:4b:05:a8:0a:3d:1f:3f:
         02:78:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----