Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/b6dd9945bfead77c04211700446776924375542e.roa
File:                     b6dd9945bfead77c04211700446776924375542e.roa (raw, json)
Hash identifier:          RWsP7TvZuz/BwTh1vRIg/7aPAki4Xrt71Lu8KLRnIcc=
Subject key identifier:   7D:0F:09:D5:C7:61:B8:AD:EC:7F:3C:FE:97:BA:BC:FC:37:C2:9E:EA
Certificate issuer:       /CN=bd3bd11871d7a19dd2b97bb97aaad07aef4beeda
Certificate serial:       0AC8F6
Authority key identifier: 43:2A:75:F9:AD:3F:D6:4D:E9:E8:66:6F:38:0A:6D:B9:56:57:E9:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd3bd11871d7a19dd2b97bb97aaad07aef4beeda.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/b6dd9945bfead77c04211700446776924375542e.roa
Signing time:             Wed 24 Mar 2021 14:42:02 +0000
ROA not before:           Wed 24 Mar 2021 14:42:02 +0000
ROA not after:            Tue 24 Mar 2026 14:42:02 +0000
asID:                     265684
IP address blocks:        45.186.104.0/22 maxlen: 24
                          2803:9760::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706806 (0xac8f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3bd11871d7a19dd2b97bb97aaad07aef4beeda
        Validity
            Not Before: Mar 24 14:42:02 2021 GMT
            Not After : Mar 24 14:42:02 2026 GMT
        Subject: CN=b6dd9945bfead77c04211700446776924375542e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:24:ae:5d:3a:f3:ff:5a:64:87:7e:43:9b:5d:
                    b4:3b:87:81:f6:85:2a:5c:75:ea:50:b5:82:84:c9:
                    23:f5:cb:62:f8:c1:38:53:ce:f1:07:36:78:b2:c0:
                    7c:d5:b7:a5:56:e0:19:c3:56:9f:e2:f6:e1:f9:36:
                    de:5b:7f:12:69:e8:2a:c4:3b:73:bb:e0:24:1c:9d:
                    aa:76:91:3d:27:e0:9d:25:36:8f:f2:03:97:fc:12:
                    6b:9b:0d:f9:83:99:ca:82:8a:d7:89:13:e4:03:fa:
                    1d:0f:77:c1:db:fa:16:24:18:a6:b7:db:77:83:e6:
                    50:d5:2d:e6:11:da:67:bc:6d:97:f4:73:dc:78:d8:
                    11:5a:73:d0:d0:06:e8:26:3a:9c:73:8e:72:26:06:
                    f4:9a:6b:9c:d8:e8:44:13:2c:95:ca:3a:de:90:dd:
                    90:66:d5:7f:38:7c:ef:a6:df:39:6c:76:cf:c9:d6:
                    4a:30:4e:bf:f7:2e:3f:52:27:c6:fe:9a:3e:66:65:
                    83:3c:2b:86:e5:ff:94:24:49:ac:8b:51:73:1d:d9:
                    93:d5:2b:a9:ed:59:38:68:6d:7a:08:c7:42:0e:52:
                    6f:fe:03:4a:30:ae:cf:81:95:ed:a7:c0:e5:cf:00:
                    04:f9:1b:da:3a:3a:61:55:77:d6:10:6a:9e:66:21:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0F:09:D5:C7:61:B8:AD:EC:7F:3C:FE:97:BA:BC:FC:37:C2:9E:EA
            X509v3 Authority Key Identifier:
                keyid:43:2A:75:F9:AD:3F:D6:4D:E9:E8:66:6F:38:0A:6D:B9:56:57:E9:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd3bd11871d7a19dd2b97bb97aaad07aef4beeda.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/b6dd9945bfead77c04211700446776924375542e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/bd3bd11871d7a19dd2b97bb97aaad07aef4beeda.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.104.0/22
                IPv6:
                  2803:9760::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:6c:34:e5:f8:fa:14:01:b5:2e:5e:6a:37:1a:da:0b:f1:bb:
         bb:38:24:17:cd:1c:0f:a8:ff:6e:4b:9e:f1:fc:fa:73:68:c9:
         f1:6e:0d:77:c6:20:d3:18:c1:90:4b:08:fe:4a:51:bd:53:a8:
         33:94:27:3f:4a:c2:f1:0d:68:89:f0:3d:0d:9e:bf:e2:59:b8:
         9b:70:69:47:78:27:3b:ba:3e:95:45:93:59:c2:a5:8b:c7:3c:
         36:67:46:98:00:f9:08:72:23:dd:29:6c:c7:eb:ef:02:3e:6d:
         23:6e:e1:ed:62:12:5c:66:f0:8c:de:22:5c:d7:06:1e:19:d0:
         c5:0f:57:6d:8d:37:34:92:7b:38:f5:bc:fa:7b:b7:a8:a7:68:
         15:5c:b3:03:16:1d:8d:68:f8:42:11:d0:e8:dc:49:40:64:41:
         68:2d:ad:b1:35:e0:a8:9f:7f:b0:4c:3d:95:72:fe:48:c8:59:
         2a:31:6a:d4:b2:79:98:9f:aa:38:e6:9d:07:00:84:2c:da:45:
         7f:ff:dc:c6:d7:4b:01:a0:27:9c:26:f6:0b:92:c7:53:05:78:
         fe:e2:3c:c7:9f:3f:9d:97:ac:f0:e5:fa:b4:ad:18:d8:ac:ef:
         fc:f2:23:3b:d1:9f:f0:88:5d:3e:34:ca:32:13:e1:d0:0d:0f:
         ef:a0:5b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----