Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f0535b69-d85d-4fdf-9ae7-cd4126537e27/ae14dae1e7d55592c87043963f5e10fac34a8c79.roa
File:                     ae14dae1e7d55592c87043963f5e10fac34a8c79.roa (raw, json)
Hash identifier:          bvgd3vUz+gZTkXMCUw1hrm4LAzrziGRRdxsCvjrBZxY=
Subject key identifier:   45:1B:5F:15:9E:61:6C:F4:A3:8A:4F:38:FC:C4:63:64:00:A4:DE:80
Certificate issuer:       /CN=0408f6f6cb2521dde4a049f40685a6ac29e79153
Certificate serial:       0BFD49
Authority key identifier: D1:69:4B:84:22:EF:55:1C:92:67:75:58:40:C4:C8:8F:2B:13:E8:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0408f6f6cb2521dde4a049f40685a6ac29e79153.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f0535b69-d85d-4fdf-9ae7-cd4126537e27/ae14dae1e7d55592c87043963f5e10fac34a8c79.roa
Signing time:             Wed 24 Mar 2021 14:35:29 +0000
ROA not before:           Wed 24 Mar 2021 14:35:29 +0000
ROA not after:            Tue 24 Mar 2026 14:35:29 +0000
asID:                     267757
IP address blocks:        45.229.192.0/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785737 (0xbfd49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0408f6f6cb2521dde4a049f40685a6ac29e79153
        Validity
            Not Before: Mar 24 14:35:29 2021 GMT
            Not After : Mar 24 14:35:29 2026 GMT
        Subject: CN=ae14dae1e7d55592c87043963f5e10fac34a8c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4d:a9:f7:fb:3b:e0:11:71:99:28:ad:08:57:
                    d7:5d:ff:51:72:7f:ca:d1:55:a6:09:93:ad:12:3c:
                    1d:73:a8:43:ee:81:7d:b8:0d:20:2b:42:2f:a0:36:
                    12:4f:03:99:18:a3:ec:00:23:50:cb:9d:2e:6a:0b:
                    5b:f6:43:05:af:d6:2c:f0:14:50:68:13:f4:01:34:
                    05:c2:86:15:39:32:9d:a7:8a:5d:fa:76:87:be:fa:
                    0d:14:01:91:5a:30:9a:88:9e:61:84:10:2a:13:df:
                    b8:d0:bd:cd:3e:ac:05:2f:d1:b7:d5:d2:f1:f0:a0:
                    6e:6a:33:26:e8:d8:0f:f3:24:b5:81:f4:03:93:38:
                    28:26:df:6a:dd:a0:58:0d:43:37:93:2e:04:fe:51:
                    5e:4d:cd:d2:17:b0:4b:d1:e3:90:da:ce:f2:0b:d8:
                    5e:52:ca:d6:99:96:01:f0:96:8f:a2:67:2d:b8:a4:
                    d7:42:bb:ad:44:ea:71:5e:85:fc:ea:41:b9:f8:75:
                    89:ff:c3:7f:70:03:d8:31:74:06:c6:44:98:34:bb:
                    6c:f6:1a:75:4a:c3:3c:68:93:6f:ff:e8:46:8d:15:
                    dc:08:30:79:fb:84:9d:20:f2:10:5f:a9:c3:63:f6:
                    68:4f:ab:f1:4f:82:ec:43:1a:c7:d7:ca:83:06:a6:
                    cd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1B:5F:15:9E:61:6C:F4:A3:8A:4F:38:FC:C4:63:64:00:A4:DE:80
            X509v3 Authority Key Identifier:
                keyid:D1:69:4B:84:22:EF:55:1C:92:67:75:58:40:C4:C8:8F:2B:13:E8:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0408f6f6cb2521dde4a049f40685a6ac29e79153.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f0535b69-d85d-4fdf-9ae7-cd4126537e27/ae14dae1e7d55592c87043963f5e10fac34a8c79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f0535b69-d85d-4fdf-9ae7-cd4126537e27/0408f6f6cb2521dde4a049f40685a6ac29e79153.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.192.0/26

    Signature Algorithm: sha256WithRSAEncryption
         64:82:14:56:52:52:33:19:5e:b6:a9:5b:68:ac:80:58:1e:2b:
         97:7a:55:73:33:e7:27:8d:ff:6d:06:e0:91:0d:c4:f2:30:31:
         26:39:24:05:2c:1a:2f:a3:f8:cc:e7:c4:39:66:b5:fd:38:9b:
         e9:69:c0:b4:6b:13:f8:24:19:6a:19:a8:52:b7:a6:87:10:f9:
         f7:08:05:42:61:3c:78:83:69:8e:bc:80:80:17:58:3e:1d:cf:
         b3:4a:cf:95:76:c6:0c:cf:80:76:18:08:a4:23:07:31:f2:82:
         31:42:37:e6:0a:73:fb:16:c0:5f:4f:a9:25:00:26:c2:60:9e:
         1b:a2:77:f3:7f:07:4a:cf:ed:e7:19:d8:a0:45:20:f7:08:64:
         ca:1b:cc:bf:d0:3e:c4:35:42:d6:ff:ed:e0:5b:b7:48:fe:0c:
         d4:ef:2a:79:17:77:b4:1d:96:15:12:83:14:f9:de:08:cb:6b:
         4d:ae:82:ed:9a:72:dc:13:80:58:42:59:4a:b4:6d:0c:11:30:
         a4:e8:f1:1c:2b:a9:ae:3f:e0:ba:f2:b0:20:7e:f1:00:f1:f4:
         ea:6e:65:b3:4c:2e:45:ca:a1:99:f4:88:a4:6f:8e:3b:7d:59:
         a9:61:af:78:3b:05:27:1a:94:5d:9c:db:58:a5:86:9f:87:af:
         8d:41:38:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----