Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/276314fb0a728ea013dbaf565f9ef836d793c389.roa
File:                     276314fb0a728ea013dbaf565f9ef836d793c389.roa (raw, json)
Hash identifier:          IKadxNZ24VcQ1WI0P2xDn/edMPkY51KCHXQXD9OKLSk=
Subject key identifier:   96:95:25:2A:8E:4A:4F:7C:2B:DC:F3:95:17:A0:4C:57:E7:6E:75:0B
Certificate issuer:       /CN=fc6091a171764c5580404ef6c3191061870281ff
Certificate serial:       1783
Authority key identifier: 2E:35:E9:47:CF:2E:58:C0:F7:90:02:B1:A8:3B:8D:93:20:8E:B6:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6091a171764c5580404ef6c3191061870281ff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/276314fb0a728ea013dbaf565f9ef836d793c389.roa
Signing time:             Fri 16 Apr 2021 17:17:47 +0000
ROA not before:           Fri 16 Apr 2021 03:00:00 +0000
ROA not after:            Sun 16 Apr 2023 03:00:00 +0000
asID:                     267878
IP address blocks:        45.175.148.0/22 maxlen: 22
                          2803:a60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6019 (0x1783)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc6091a171764c5580404ef6c3191061870281ff
        Validity
            Not Before: Apr 16 03:00:00 2021 GMT
            Not After : Apr 16 03:00:00 2023 GMT
        Subject: CN=276314fb0a728ea013dbaf565f9ef836d793c389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:8b:d4:33:d7:62:ce:d9:dc:71:de:b6:23:90:
                    14:fa:27:0a:2e:aa:aa:ed:7d:e0:66:b7:9e:36:c5:
                    ca:16:d4:62:50:e2:b5:69:1d:ec:81:5e:cc:f3:58:
                    2f:1a:cb:f8:66:3e:fd:ca:55:1e:16:02:85:36:eb:
                    bc:95:b7:fb:90:8c:34:60:d3:97:d1:4e:cc:3e:de:
                    f0:a5:39:4f:5c:f5:9f:d0:e2:6f:0c:2d:e1:7e:c4:
                    ea:e5:9c:6b:46:77:c3:a0:29:1e:0c:00:a5:e7:c1:
                    f2:28:90:be:b7:d7:41:90:65:63:de:a3:9f:f1:9f:
                    dc:10:73:14:61:01:2c:a7:43:08:1e:ec:68:0e:df:
                    b8:96:dd:1c:e7:d2:bc:23:fe:f3:a4:f7:73:55:06:
                    54:eb:9d:a9:24:35:1c:37:e6:a8:31:50:57:b7:05:
                    b6:b9:7b:91:6e:cb:85:34:81:4d:66:fc:85:1d:55:
                    c5:89:c3:fc:74:6d:45:45:36:04:b5:cd:62:f0:60:
                    10:0d:2a:30:32:2a:a5:88:04:a0:61:fa:32:6f:fc:
                    99:41:d8:1c:e9:5d:29:b7:93:27:bb:e0:94:6f:52:
                    3d:c7:d4:1f:15:c9:97:59:83:45:3c:7d:e8:31:e4:
                    0e:84:80:5e:97:3b:43:79:11:b7:e0:8d:c6:b2:ad:
                    b2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:95:25:2A:8E:4A:4F:7C:2B:DC:F3:95:17:A0:4C:57:E7:6E:75:0B
            X509v3 Authority Key Identifier:
                keyid:2E:35:E9:47:CF:2E:58:C0:F7:90:02:B1:A8:3B:8D:93:20:8E:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc6091a171764c5580404ef6c3191061870281ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/276314fb0a728ea013dbaf565f9ef836d793c389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/eff30749-fdf0-466e-8ec5-0e8556d826bc/fc6091a171764c5580404ef6c3191061870281ff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.148.0/22
                IPv6:
                  2803:a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:83:0d:7d:25:fc:de:36:54:5c:13:24:c4:7b:e5:9b:ed:e7:
         f8:70:3a:6b:49:df:b7:83:ec:ff:f9:43:e0:80:6c:97:25:43:
         8d:4e:5a:07:d9:6d:4d:2c:e5:54:bd:9b:d9:46:86:60:7a:34:
         aa:ce:3c:72:ec:d7:b7:1c:52:21:74:e8:3f:20:cf:5b:7c:d2:
         6a:1d:32:3d:67:46:c6:25:be:b3:3c:31:f8:c0:57:f6:d7:df:
         a8:eb:cd:b7:ad:0a:12:9e:e6:f8:9a:7b:c9:63:e4:4c:64:ee:
         65:05:ca:86:ce:be:6a:e2:9c:37:8e:9c:ca:f9:64:6f:ca:eb:
         f9:39:af:d8:1c:f3:ab:9a:07:0c:01:b8:9a:c2:0b:7e:d9:b9:
         17:5c:ef:26:b6:17:29:f8:7b:56:8f:e2:7e:01:88:7a:cb:79:
         57:19:c9:8d:ee:bb:2c:31:68:42:dc:cb:1f:cd:12:a4:ce:5d:
         92:34:f7:a5:5d:8a:17:96:99:0a:c7:d5:39:3a:2b:41:fe:2f:
         c2:1e:29:c1:fe:4a:de:c9:d6:f9:52:37:6d:38:7d:9a:98:0d:
         c9:02:8e:ae:26:2c:46:58:1a:e0:cf:14:e7:78:90:32:46:16:
         54:f2:30:70:51:05:19:7f:ad:2a:c9:f7:b9:87:71:31:74:ec:
         f1:e9:db:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----