Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0535b69-d85d-4fdf-9ae7-cd4126537e27/1a7cc5256b8267acd58442a89b1868eabbe3f66b.roa
File:                     1a7cc5256b8267acd58442a89b1868eabbe3f66b.roa (raw, json)
Hash identifier:          CllXoFcC5i5deCMi7G22AcgtfM9M4JS7q2E2ObPEaqw=
Subject key identifier:   3C:C2:39:DE:D5:F4:29:76:18:FD:EF:9F:76:F7:65:8D:81:15:B8:97
Certificate issuer:       /CN=0408f6f6cb2521dde4a049f40685a6ac29e79153
Certificate serial:       0C0014
Authority key identifier: D1:69:4B:84:22:EF:55:1C:92:67:75:58:40:C4:C8:8F:2B:13:E8:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0408f6f6cb2521dde4a049f40685a6ac29e79153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0535b69-d85d-4fdf-9ae7-cd4126537e27/1a7cc5256b8267acd58442a89b1868eabbe3f66b.roa
Signing time:             Wed 24 Mar 2021 14:35:29 +0000
ROA not before:           Wed 24 Mar 2021 14:35:29 +0000
ROA not after:            Tue 24 Mar 2026 14:35:29 +0000
asID:                     267757
IP address blocks:        45.229.192.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786452 (0xc0014)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0408f6f6cb2521dde4a049f40685a6ac29e79153
        Validity
            Not Before: Mar 24 14:35:29 2021 GMT
            Not After : Mar 24 14:35:29 2026 GMT
        Subject: CN=1a7cc5256b8267acd58442a89b1868eabbe3f66b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:e9:4d:e4:f8:88:65:f1:32:49:8a:8e:73:
                    eb:86:da:7c:05:78:db:22:d6:d1:5b:d7:e7:c1:2a:
                    04:5e:2c:50:b1:17:4e:99:e3:88:5b:91:e7:f6:01:
                    8e:31:b9:f2:aa:7b:ba:ad:d2:5c:0a:5e:12:b1:00:
                    ee:3b:8a:db:21:6f:24:43:aa:6a:7f:da:11:02:d2:
                    1b:97:62:95:be:ce:54:44:98:cc:21:9e:8f:cc:35:
                    d6:96:77:59:44:63:cb:45:e5:4d:a4:32:af:64:f0:
                    9f:af:a6:18:6d:3d:51:2e:92:19:35:33:ff:64:e9:
                    8d:d9:a7:1c:07:96:3c:bd:be:c5:5c:33:d3:03:45:
                    25:dd:68:27:1e:51:6c:b9:e1:ee:74:bd:55:f4:2f:
                    42:ca:24:1a:0a:9b:63:2d:0e:b7:96:da:c3:28:51:
                    77:1a:14:6f:b1:91:52:3b:30:06:df:d7:f3:12:38:
                    33:9c:03:3c:a3:50:16:b3:8d:c3:cc:4b:b9:a4:20:
                    05:e1:e5:3f:e4:56:4c:02:9b:b6:52:59:0c:8c:5d:
                    6f:65:bf:27:72:24:30:ee:65:aa:2a:ca:e3:d1:9a:
                    b9:0c:d9:4a:7b:c9:68:7e:02:94:46:fb:c3:cc:b1:
                    50:a4:6b:86:38:61:fc:69:1d:0c:d2:c5:31:97:12:
                    cd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C2:39:DE:D5:F4:29:76:18:FD:EF:9F:76:F7:65:8D:81:15:B8:97
            X509v3 Authority Key Identifier:
                keyid:D1:69:4B:84:22:EF:55:1C:92:67:75:58:40:C4:C8:8F:2B:13:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0408f6f6cb2521dde4a049f40685a6ac29e79153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0535b69-d85d-4fdf-9ae7-cd4126537e27/1a7cc5256b8267acd58442a89b1868eabbe3f66b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0535b69-d85d-4fdf-9ae7-cd4126537e27/0408f6f6cb2521dde4a049f40685a6ac29e79153.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:71:4a:78:9b:ff:15:99:75:ff:f8:6c:04:94:5a:04:79:c5:
         af:05:dc:a9:b5:c1:79:51:01:13:13:12:b4:58:0d:a1:93:12:
         66:19:7a:0e:03:92:ce:96:1c:56:05:90:81:94:8c:78:08:67:
         6c:09:96:59:a6:62:48:75:4a:0c:1f:5a:1e:84:e0:36:75:13:
         e1:23:93:ff:c0:86:5e:55:ba:36:4e:a9:05:f4:20:25:6f:99:
         12:ee:d4:cc:e4:1e:c4:48:1d:24:78:b8:c3:a4:f7:e5:63:f1:
         3f:b3:90:ac:ff:7c:e5:9e:8d:e8:59:fe:d6:a3:2c:74:db:b1:
         d4:17:77:e5:4e:ab:d8:d0:3f:9a:6d:7d:1f:c3:ed:ea:4c:a9:
         7b:ee:21:ec:a9:7b:bd:bc:28:4a:4d:4f:5e:78:ad:71:32:b4:
         c1:fc:10:72:f8:78:3b:ff:31:1f:8d:4e:c6:46:fe:82:d7:5d:
         8e:86:9d:11:bd:0b:58:2a:39:4b:fa:67:0f:df:fc:40:90:fc:
         15:74:61:6d:97:46:9a:ea:ca:aa:85:56:20:32:b4:17:22:fa:
         90:e3:d0:c0:fe:67:a2:bd:bf:40:6d:c5:d5:20:e1:f8:02:68:
         47:b1:36:70:86:02:8a:2c:d3:e3:3f:f6:0b:2f:88:85:ae:8d:
         eb:08:92:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----