Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f341684c-056d-47d0-a192-d5e7dd8be9f6/27b6456995cde2b000778ccf06be3a8308124ec0.roa
File:                     27b6456995cde2b000778ccf06be3a8308124ec0.roa (raw, json)
Hash identifier:          8ytBqyOoJjzccdx0W8juZPsujKIMaYUbgOyGCMsNVXE=
Subject key identifier:   7E:A2:29:CE:3C:B7:CC:20:D8:60:37:C3:88:79:89:52:C2:B3:97:CE
Certificate issuer:       /CN=0877ad4c255c772310fc0fd863e49e3674d41ad5
Certificate serial:       045E28
Authority key identifier: 7E:3A:D1:B5:D3:1A:01:73:46:C2:A8:62:53:4C:84:C6:41:76:1B:5A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0877ad4c255c772310fc0fd863e49e3674d41ad5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f341684c-056d-47d0-a192-d5e7dd8be9f6/27b6456995cde2b000778ccf06be3a8308124ec0.roa
Signing time:             Wed 24 Mar 2021 14:31:15 +0000
ROA not before:           Wed 24 Mar 2021 14:31:15 +0000
ROA not after:            Tue 24 Mar 2026 14:31:15 +0000
asID:                     269819
IP address blocks:        45.187.132.0/22 maxlen: 24
                          2803:c760::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286248 (0x45e28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0877ad4c255c772310fc0fd863e49e3674d41ad5
        Validity
            Not Before: Mar 24 14:31:15 2021 GMT
            Not After : Mar 24 14:31:15 2026 GMT
        Subject: CN=27b6456995cde2b000778ccf06be3a8308124ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c0:ab:f8:6a:7c:b1:f0:c0:aa:03:26:26:96:
                    63:11:cf:cc:ae:d3:5d:48:12:70:1e:3c:6a:fa:bd:
                    59:ad:0d:aa:bb:e2:ae:ed:1c:2a:c2:a6:75:f3:be:
                    5f:fb:77:55:ce:af:66:67:19:ca:62:c0:b0:a7:04:
                    59:85:e1:fd:9a:1a:69:3c:b4:a9:24:50:dd:92:d6:
                    07:53:33:36:ae:60:05:96:4f:dd:b7:4c:f6:7b:5c:
                    44:43:bd:bf:95:5a:c3:17:44:c6:15:fa:fc:dd:36:
                    ee:18:97:9d:12:30:c6:bc:c5:a1:ff:cd:63:8e:35:
                    82:eb:21:a1:b8:68:3e:f6:ec:bf:2c:9f:07:8f:fd:
                    31:e8:5c:e6:f4:0f:a8:ce:56:81:91:19:bf:d9:b8:
                    2a:20:61:e7:ce:64:f2:96:e6:ab:63:9c:5c:59:c6:
                    06:48:25:9b:a7:6b:eb:2e:87:36:6e:ae:5c:06:2a:
                    e2:70:ba:b6:08:40:bb:cc:50:62:a4:f8:18:5a:df:
                    b6:5c:0a:eb:68:3c:93:3c:5f:f5:f6:93:33:f0:e6:
                    13:57:95:e2:3c:11:51:e8:fe:25:25:7b:34:87:46:
                    ec:75:e8:e1:a2:1d:e8:18:90:c0:c7:45:12:5b:0e:
                    cd:ed:13:a7:54:08:f8:84:6f:16:c8:76:68:d7:e8:
                    e9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A2:29:CE:3C:B7:CC:20:D8:60:37:C3:88:79:89:52:C2:B3:97:CE
            X509v3 Authority Key Identifier:
                keyid:7E:3A:D1:B5:D3:1A:01:73:46:C2:A8:62:53:4C:84:C6:41:76:1B:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0877ad4c255c772310fc0fd863e49e3674d41ad5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f341684c-056d-47d0-a192-d5e7dd8be9f6/27b6456995cde2b000778ccf06be3a8308124ec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f341684c-056d-47d0-a192-d5e7dd8be9f6/0877ad4c255c772310fc0fd863e49e3674d41ad5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.132.0/22
                IPv6:
                  2803:c760::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:48:e6:72:f0:1a:de:45:6c:e4:26:d7:c6:f5:63:aa:4b:9b:
         a7:bc:6e:5b:17:f4:0b:2b:4c:f1:29:e7:b4:76:d3:ff:7f:91:
         d2:21:dc:06:c7:6f:c0:db:40:8b:6a:74:6d:7f:ea:f1:f7:23:
         92:5c:09:7d:da:69:5a:22:ea:31:5e:81:98:91:d7:51:2b:c7:
         90:f2:c4:62:f5:ae:a6:4d:9e:80:9c:36:d2:83:61:cb:68:f6:
         3e:4e:72:1b:1f:a4:7d:50:83:a7:3a:25:a2:ee:18:6c:37:e0:
         b9:99:fb:3d:dd:b1:f2:95:3f:16:12:5e:ac:b0:4f:f9:ca:f0:
         22:d4:d1:a3:be:0f:ae:f8:c8:2a:64:0c:fd:d2:04:10:7b:e0:
         06:19:3e:9a:37:eb:4c:07:f4:f2:13:96:e8:91:e2:17:5a:eb:
         bb:8f:d8:dd:a2:c0:19:c2:14:c9:c6:55:10:65:8f:0c:0e:68:
         4e:cf:23:2f:9e:a8:3f:0a:40:97:29:cb:18:f7:a0:62:3f:28:
         73:aa:2b:f4:ec:f3:5b:73:6d:98:32:74:da:ac:f7:43:54:79:
         d4:a3:a9:e3:ea:37:d5:26:49:97:00:68:80:2b:47:ce:33:60:
         1a:d8:48:c4:ab:74:5c:50:e6:66:06:da:de:f4:d5:d6:9b:2b:
         e9:a4:1c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----