Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/edb8f5cc-35d9-49b0-b6d4-b7ac242f1e45/7f64b4156ef9250a4010850b5e5b0d5555ba04c7.roa
File:                     7f64b4156ef9250a4010850b5e5b0d5555ba04c7.roa (raw, json)
Hash identifier:          +dBMeRrCDiWPhPm1+yYCQ+Yz4uej/RF85urJCYEF/R4=
Subject key identifier:   40:82:5A:14:5B:29:04:D8:C9:AD:14:BA:A9:4A:2E:6E:CF:78:C4:3A
Certificate issuer:       /CN=106bdbba30a216f7b3c1f887e3f4a00e30cecd6d
Certificate serial:       0C58EA
Authority key identifier: 3A:4D:F1:61:8B:D6:A1:45:37:11:F6:21:1F:F5:D3:F7:CD:64:00:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/106bdbba30a216f7b3c1f887e3f4a00e30cecd6d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/edb8f5cc-35d9-49b0-b6d4-b7ac242f1e45/7f64b4156ef9250a4010850b5e5b0d5555ba04c7.roa
Signing time:             Wed 24 Mar 2021 14:33:21 +0000
ROA not before:           Wed 24 Mar 2021 14:33:21 +0000
ROA not after:            Tue 24 Mar 2026 14:33:21 +0000
asID:                     266840
IP address blocks:        45.239.28.0/22 maxlen: 24
                          2803:1ca0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809194 (0xc58ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=106bdbba30a216f7b3c1f887e3f4a00e30cecd6d
        Validity
            Not Before: Mar 24 14:33:21 2021 GMT
            Not After : Mar 24 14:33:21 2026 GMT
        Subject: CN=7f64b4156ef9250a4010850b5e5b0d5555ba04c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ca:41:34:a9:87:1a:6d:f6:f9:0b:2c:f2:f3:
                    79:db:b6:c4:4e:bb:d1:d7:bb:50:48:6f:61:08:69:
                    59:c9:3f:02:be:bf:33:81:bd:50:ab:7a:4c:a4:48:
                    37:a3:be:a2:31:b2:15:24:c9:e3:45:8f:e9:bb:73:
                    e7:d2:ee:bc:ce:20:4d:9e:e4:7e:ab:ef:51:7b:a6:
                    5c:32:38:65:b3:e6:76:f9:10:a2:47:24:d7:93:02:
                    6c:7f:1f:2f:2b:69:86:da:e1:f7:36:30:53:f6:87:
                    e9:68:c1:dc:11:0d:2c:64:ef:46:04:70:0d:45:ff:
                    e1:b3:d9:89:b4:87:ed:27:53:72:23:3d:1d:ab:0d:
                    30:33:d8:a2:3f:87:c9:5e:c0:3f:9a:7f:86:aa:f7:
                    91:9e:e1:d2:08:b3:7f:9d:b3:22:eb:40:13:7d:79:
                    08:40:c3:56:8e:e2:7f:62:44:b6:9c:4b:59:22:e4:
                    b3:9f:a1:87:28:ad:95:8c:52:e8:71:91:bd:ee:e7:
                    3a:c5:14:cb:e7:5f:ec:3e:56:8e:e1:d3:c0:8b:95:
                    b6:d3:79:d2:9e:9a:3b:50:0d:3f:ea:f7:9a:95:cb:
                    93:cd:3d:1b:f4:e8:7e:67:6e:57:9a:e5:a7:07:81:
                    53:5e:53:0e:43:f7:c6:a2:cb:93:af:12:14:97:1c:
                    bb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:82:5A:14:5B:29:04:D8:C9:AD:14:BA:A9:4A:2E:6E:CF:78:C4:3A
            X509v3 Authority Key Identifier:
                keyid:3A:4D:F1:61:8B:D6:A1:45:37:11:F6:21:1F:F5:D3:F7:CD:64:00:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/106bdbba30a216f7b3c1f887e3f4a00e30cecd6d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/edb8f5cc-35d9-49b0-b6d4-b7ac242f1e45/7f64b4156ef9250a4010850b5e5b0d5555ba04c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/edb8f5cc-35d9-49b0-b6d4-b7ac242f1e45/106bdbba30a216f7b3c1f887e3f4a00e30cecd6d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.28.0/22
                IPv6:
                  2803:1ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:d9:da:24:4f:4a:de:dd:b4:12:ec:81:d8:2f:84:8a:e1:
         c8:5e:09:02:c4:92:e8:da:39:a6:0f:6b:fd:0e:34:e1:e4:91:
         2e:a8:7b:bc:10:72:39:ad:07:9a:b8:ba:5f:00:26:84:4e:d6:
         c2:a2:15:a5:b4:2d:ff:34:f9:5c:4c:34:ac:1e:3e:a3:16:83:
         cb:4d:c4:f5:d7:a7:9a:96:69:21:d9:4a:ab:e5:4f:a4:92:b5:
         ba:83:69:74:f2:15:e5:92:71:22:e4:ed:00:a8:69:e3:91:bc:
         bf:77:9f:50:96:6a:81:c2:12:7e:5a:d8:04:f4:fc:b2:f6:06:
         1b:c8:08:29:96:4b:94:c7:52:2e:b3:bd:9e:8e:6e:2f:82:38:
         bc:7b:f6:8f:c9:b5:1d:8c:c4:8a:0a:31:2c:03:94:0f:80:b8:
         86:ba:83:89:4c:62:30:05:3e:a3:d1:75:0e:e3:74:8c:21:6c:
         b1:14:7f:9e:db:8d:8b:46:05:b5:ed:21:20:53:0c:9c:d7:48:
         3c:00:0d:be:91:fc:cd:ed:27:1b:29:fd:9e:16:b8:55:f6:3a:
         31:41:e3:4b:6d:ac:55:4f:e6:d5:3d:d1:69:fc:7a:4a:50:df:
         fd:e2:71:1a:cd:49:39:db:98:8f:74:74:b3:b6:1f:09:0b:1d:
         7f:8b:ff:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----