Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4997a4b-4015-4a0b-b9e7-4be167340d41/d5c2aea30dcbc83492748132da451136dae15954.roa
File:                     d5c2aea30dcbc83492748132da451136dae15954.roa (raw, json)
Hash identifier:          h+l7dHJqI8HVoh+nNNvCPBxRVEGWrto0H9IAyJULS0s=
Subject key identifier:   94:F6:D8:E8:91:0C:8B:43:8E:80:D8:56:2E:DF:4B:AA:63:54:04:8D
Certificate issuer:       /CN=3e95a63d17dd730b1ef48c1a5faae09b393461ce
Certificate serial:       0B60FC
Authority key identifier: DD:57:B3:E2:B2:FE:45:0E:A0:44:9B:F6:56:DF:3F:9A:9B:06:12:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e95a63d17dd730b1ef48c1a5faae09b393461ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4997a4b-4015-4a0b-b9e7-4be167340d41/d5c2aea30dcbc83492748132da451136dae15954.roa
Signing time:             Wed 24 Mar 2021 14:36:21 +0000
ROA not before:           Wed 24 Mar 2021 14:36:21 +0000
ROA not after:            Tue 24 Mar 2026 14:36:21 +0000
asID:                     64114
IP address blocks:        45.191.0.0/22 maxlen: 24
                          2803:c8e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 745724 (0xb60fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e95a63d17dd730b1ef48c1a5faae09b393461ce
        Validity
            Not Before: Mar 24 14:36:21 2021 GMT
            Not After : Mar 24 14:36:21 2026 GMT
        Subject: CN=d5c2aea30dcbc83492748132da451136dae15954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3e:08:83:09:0f:64:8e:5b:6f:b4:a5:c7:7a:
                    7c:c0:1a:83:85:2e:b5:e7:33:94:a1:a6:2d:1d:94:
                    f1:54:75:01:ad:c6:9c:a3:e1:ef:f4:d4:c0:f2:d6:
                    c3:ac:60:e4:de:56:34:77:4b:c1:f2:db:7e:75:f0:
                    0e:65:06:7d:e9:29:8e:5f:64:85:3a:70:69:d9:ce:
                    df:d9:c4:e8:12:b5:6f:c8:02:3c:cb:92:42:6a:04:
                    d4:fa:35:81:9b:51:1d:e1:64:eb:aa:ef:48:4b:db:
                    3a:bb:e6:c5:6d:49:97:71:c9:12:7a:be:a4:dd:bd:
                    62:0e:62:a0:7b:b5:75:7c:24:0f:af:dd:97:65:fa:
                    83:61:0e:33:47:10:89:ab:58:81:72:2f:61:d9:03:
                    63:9a:3a:63:58:6a:79:d2:8a:b6:d7:70:df:16:8d:
                    a5:16:16:5d:7b:80:22:c1:7f:61:97:3d:51:fa:d1:
                    34:aa:56:e3:60:03:7a:4b:0a:c0:29:ae:21:36:d0:
                    84:a1:19:cb:8d:ce:82:4a:1d:c3:c8:6e:28:84:c5:
                    8e:01:3e:ed:33:e1:54:b0:42:95:9c:71:c2:4f:e0:
                    c2:f4:6c:d7:3d:e5:25:c0:b7:99:c6:7f:28:e6:db:
                    e8:ae:cf:a2:18:d0:f2:e8:dd:84:c0:23:bb:60:7d:
                    cb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F6:D8:E8:91:0C:8B:43:8E:80:D8:56:2E:DF:4B:AA:63:54:04:8D
            X509v3 Authority Key Identifier:
                keyid:DD:57:B3:E2:B2:FE:45:0E:A0:44:9B:F6:56:DF:3F:9A:9B:06:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e95a63d17dd730b1ef48c1a5faae09b393461ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4997a4b-4015-4a0b-b9e7-4be167340d41/d5c2aea30dcbc83492748132da451136dae15954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4997a4b-4015-4a0b-b9e7-4be167340d41/3e95a63d17dd730b1ef48c1a5faae09b393461ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.0.0/22
                IPv6:
                  2803:c8e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d3:6e:03:54:90:cc:de:e4:7b:92:95:f4:0a:9f:9e:a9:79:cf:
         66:9c:83:aa:ed:9a:64:ae:e4:04:dc:7f:94:7f:99:29:a9:a3:
         8a:e9:6f:d1:dc:e4:a0:d6:d0:1b:9a:f8:e8:1d:49:06:5b:39:
         ed:2b:d8:ae:2d:a9:72:cc:a6:23:26:77:51:87:ee:ed:29:ca:
         5b:c6:e0:0c:24:85:28:c0:c6:0e:65:e8:bf:ef:83:b9:12:9a:
         25:ef:37:7f:ab:84:54:c1:1e:53:9f:98:54:ca:61:0a:97:a0:
         e5:f9:5a:6e:67:33:20:a3:eb:04:94:1e:9b:ab:51:f5:11:01:
         30:23:37:52:16:7a:00:08:f0:19:50:3e:7a:2a:60:bc:4c:31:
         f6:1e:f5:9a:f7:09:85:5b:d8:23:7a:e5:9a:a7:bd:6e:4b:aa:
         da:5e:af:6e:81:c1:17:4c:d4:4b:6c:d7:32:85:1a:84:d5:5e:
         8a:3a:90:c1:72:44:d7:56:ce:1d:2c:ac:0e:b6:66:4b:2c:e3:
         af:62:e8:1b:f4:06:4f:6c:d0:e9:75:8f:42:37:40:77:2c:b4:
         2a:06:2f:13:ca:43:94:cf:1f:35:20:5e:f2:0a:26:2a:9d:da:
         09:c2:26:4e:20:13:87:7c:50:db:f5:d1:f7:8e:3d:f1:73:89:
         45:d7:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----