Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ecc7b24b-dc8c-441b-b4af-02bc09fffac3/818d353a8ebb8280ecfa2f95f4ad5db0cf558bb9.roa
File:                     818d353a8ebb8280ecfa2f95f4ad5db0cf558bb9.roa (raw, json)
Hash identifier:          qEkl/CcmC90KYkaJSJ0UmPIP3m8pUSRgYBcn/EFb5H8=
Subject key identifier:   B9:C1:F8:48:1C:47:01:81:40:0C:AC:26:B8:BE:F4:44:C9:4D:B0:27
Certificate issuer:       /CN=677db86dc5cabd969eaef4cdc324bf546bf6044b
Certificate serial:       0487
Authority key identifier: B4:74:AE:59:44:F0:FB:14:5E:80:E1:2C:37:D2:E6:07:15:60:A5:F0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/677db86dc5cabd969eaef4cdc324bf546bf6044b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ecc7b24b-dc8c-441b-b4af-02bc09fffac3/818d353a8ebb8280ecfa2f95f4ad5db0cf558bb9.roa
Signing time:             Tue 26 Oct 2021 22:32:59 +0000
ROA not before:           Tue 26 Oct 2021 03:00:00 +0000
ROA not after:            Mon 26 Oct 2026 03:00:00 +0000
asID:                     266693
IP address blocks:        45.229.60.0/22 maxlen: 24
                          2803:b520::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159 (0x487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=677db86dc5cabd969eaef4cdc324bf546bf6044b
        Validity
            Not Before: Oct 26 03:00:00 2021 GMT
            Not After : Oct 26 03:00:00 2026 GMT
        Subject: CN=818d353a8ebb8280ecfa2f95f4ad5db0cf558bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:71:72:3c:66:05:c7:19:cf:20:22:6a:19:87:
                    59:6c:c5:8d:ad:00:0b:4b:9a:df:ff:3c:9a:ba:e4:
                    55:c2:62:0b:77:96:fe:89:26:1a:9c:6c:9a:6f:27:
                    4d:9e:0f:b5:8a:99:25:86:4d:c3:64:86:64:14:db:
                    1c:d1:6b:d4:31:2a:33:77:c9:db:a1:cb:a2:86:83:
                    9f:5c:0e:2a:86:e0:e2:58:08:e8:c3:e2:c2:ad:e8:
                    e4:df:5a:55:12:ee:1b:32:21:9d:f0:a1:54:1c:02:
                    71:ed:a4:64:e7:48:2c:91:f7:c7:ca:77:0a:e8:91:
                    c7:bc:cd:69:23:d8:77:21:c7:2c:05:11:f6:a9:9a:
                    b0:fd:eb:26:74:3b:99:38:13:3e:b4:71:1f:1b:b6:
                    e8:83:db:a9:ce:68:73:b7:89:76:94:e6:49:11:fe:
                    5d:61:ad:c9:3a:d3:7f:c8:96:e3:a0:05:80:09:e4:
                    10:70:6a:c5:4a:00:a3:25:a4:15:10:43:8b:9e:55:
                    79:70:9c:2f:08:3e:96:0d:55:8e:f2:58:28:58:10:
                    df:d0:28:92:a4:bb:eb:b5:63:67:1c:bd:b2:2f:cc:
                    64:75:33:3f:3a:c2:b2:f9:8b:56:f7:81:24:1d:04:
                    f8:51:33:85:a7:3e:1d:04:21:8b:51:a1:71:c7:e1:
                    bf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C1:F8:48:1C:47:01:81:40:0C:AC:26:B8:BE:F4:44:C9:4D:B0:27
            X509v3 Authority Key Identifier:
                keyid:B4:74:AE:59:44:F0:FB:14:5E:80:E1:2C:37:D2:E6:07:15:60:A5:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/677db86dc5cabd969eaef4cdc324bf546bf6044b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ecc7b24b-dc8c-441b-b4af-02bc09fffac3/818d353a8ebb8280ecfa2f95f4ad5db0cf558bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ecc7b24b-dc8c-441b-b4af-02bc09fffac3/677db86dc5cabd969eaef4cdc324bf546bf6044b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.60.0/22
                IPv6:
                  2803:b520::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:c0:23:f2:b3:3c:ef:84:d8:29:6f:6b:ad:f6:5c:a2:e8:f6:
         d0:7f:b7:a6:e7:a9:7e:b1:13:28:39:0c:a5:21:56:32:0d:81:
         98:e3:de:8f:d8:91:87:a3:70:13:80:75:7a:a7:a2:44:0f:f7:
         5d:a4:45:71:48:29:56:10:bf:53:ef:37:55:1a:f6:4a:48:28:
         8f:1f:90:18:34:bb:93:29:9c:98:16:99:38:da:ac:4d:7e:6e:
         6a:fd:54:ba:e8:95:fe:0b:a4:87:ff:d8:d4:9c:e0:d8:7e:fc:
         6d:18:d1:22:76:8c:d4:fb:c1:91:86:fb:6d:7d:35:30:c5:53:
         5c:99:7f:b9:f4:ec:48:ec:05:45:e3:78:53:45:c7:a4:5f:2b:
         a6:bf:d8:fb:14:0c:a0:1a:b5:b2:94:84:ff:1b:b6:58:72:16:
         27:54:b4:e4:57:ba:8d:aa:76:dc:17:a9:db:ca:e7:80:3a:d6:
         2a:52:14:c7:38:97:8e:39:83:16:f0:1a:b6:58:f8:23:df:8f:
         33:c5:c3:71:fd:05:59:47:3d:ad:2a:a1:40:92:86:4a:72:81:
         ee:94:a8:89:1a:23:43:04:96:d4:17:6c:70:da:63:ea:be:62:
         32:cb:4f:09:8d:01:3a:ea:2a:66:25:a5:19:34:16:1d:c9:74:
         b8:34:14:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----