Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f7dae7db-258c-4699-b729-61d73d546e81/0900d619445abf47383900f8db0df17692a5a073.roa
File:                     0900d619445abf47383900f8db0df17692a5a073.roa (raw, json)
Hash identifier:          9U7eHjKN/2LAEEonZlOHThiA61zF+RS9p5Rv3ZspuU0=
Subject key identifier:   2A:F0:5C:0F:61:3C:B0:80:96:21:5E:DC:E2:36:3A:B2:66:E4:E6:D2
Certificate issuer:       /CN=dd24c345578697f2d4824ba7a63f561d5b626def
Certificate serial:       01CFC0
Authority key identifier: AE:5E:1E:2D:89:FC:D9:6B:25:FE:80:69:6C:B6:6C:01:2C:E8:66:FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd24c345578697f2d4824ba7a63f561d5b626def.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f7dae7db-258c-4699-b729-61d73d546e81/0900d619445abf47383900f8db0df17692a5a073.roa
Signing time:             Wed 24 Mar 2021 14:34:04 +0000
ROA not before:           Wed 24 Mar 2021 14:34:04 +0000
ROA not after:            Tue 24 Mar 2026 14:34:04 +0000
asID:                     271846
IP address blocks:        45.232.208.0/22 maxlen: 24
                          2803:410::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118720 (0x1cfc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd24c345578697f2d4824ba7a63f561d5b626def
        Validity
            Not Before: Mar 24 14:34:04 2021 GMT
            Not After : Mar 24 14:34:04 2026 GMT
        Subject: CN=0900d619445abf47383900f8db0df17692a5a073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:35:f7:b0:47:d4:b7:8e:6f:64:79:6a:72:1e:
                    cd:92:ca:df:14:cf:90:fa:d2:1f:fc:c2:cb:d3:e7:
                    8d:09:5c:c1:f6:49:86:2c:df:ef:46:3d:2d:c3:74:
                    5c:94:e7:63:aa:de:78:01:86:36:44:e5:57:30:31:
                    5b:ff:91:3b:cb:ce:24:1a:3c:e0:fd:be:37:49:65:
                    93:0b:78:4f:df:8c:83:fe:79:79:0f:55:9e:79:f0:
                    a4:97:43:e1:d8:67:48:14:93:27:df:cc:b9:cd:70:
                    7b:1d:72:79:b8:ae:2c:0d:e3:cf:9c:50:bf:62:52:
                    12:ff:ef:af:43:f5:6f:ca:92:86:74:68:c5:7e:1e:
                    ea:71:59:44:69:5a:a0:4a:0f:3a:a5:d6:1f:94:fa:
                    63:a1:53:99:96:eb:65:6d:9d:18:ac:5a:dd:c6:6e:
                    44:10:7c:1e:4f:48:16:5b:12:dd:10:85:1c:fc:bd:
                    12:21:0e:54:85:74:d1:08:a7:31:8e:7a:d7:10:ca:
                    61:c0:bc:33:67:3e:89:a5:33:10:32:0b:3f:95:ba:
                    bf:e2:4f:52:0f:1a:ec:a2:67:11:af:17:b2:bf:76:
                    57:17:95:8e:f5:59:f9:72:08:ef:c9:79:fa:6c:d5:
                    5d:e5:42:6a:1a:e7:18:db:9f:28:62:53:6e:55:37:
                    d4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F0:5C:0F:61:3C:B0:80:96:21:5E:DC:E2:36:3A:B2:66:E4:E6:D2
            X509v3 Authority Key Identifier:
                keyid:AE:5E:1E:2D:89:FC:D9:6B:25:FE:80:69:6C:B6:6C:01:2C:E8:66:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd24c345578697f2d4824ba7a63f561d5b626def.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f7dae7db-258c-4699-b729-61d73d546e81/0900d619445abf47383900f8db0df17692a5a073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f7dae7db-258c-4699-b729-61d73d546e81/dd24c345578697f2d4824ba7a63f561d5b626def.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.208.0/22
                IPv6:
                  2803:410::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:41:5d:58:da:76:d2:bb:f0:b0:72:1f:20:59:ae:4f:e7:d8:
         c0:53:df:35:91:86:77:0f:c0:a5:de:07:75:77:e2:dc:e8:07:
         0f:cd:8e:2a:20:ff:9d:94:94:67:ff:b1:43:02:88:40:0d:ce:
         cb:d1:b0:0a:49:8d:f2:12:d9:d0:27:c5:ba:1a:58:bb:8c:7b:
         4e:a6:15:ac:5c:81:bf:af:2d:95:d4:0d:91:64:a4:c6:fb:fc:
         09:e0:92:19:97:93:03:8d:cc:b2:ab:27:b2:dd:99:68:73:97:
         05:75:de:d9:86:4e:ff:47:7c:3b:e7:97:4f:87:23:a3:f4:f5:
         08:cf:35:84:aa:3c:93:f3:9a:5d:68:1b:33:0e:44:81:2a:2b:
         eb:75:e7:07:cf:2e:4e:37:e4:99:90:36:76:20:9b:b0:91:57:
         90:35:2f:54:0f:7b:1b:26:98:33:ea:32:a6:96:bc:90:3f:d2:
         00:f7:f7:eb:a0:8f:ed:a6:21:81:a8:42:9e:1c:d3:49:05:64:
         49:34:73:9f:17:70:a1:73:ec:29:86:ba:83:06:be:71:b5:aa:
         c5:71:bf:22:21:45:f7:f7:7d:1c:0b:92:6c:2d:00:20:63:cb:
         94:5f:44:0b:7d:bd:25:cd:69:52:f5:0b:28:ab:c4:ec:1b:4e:
         86:52:89:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----