Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/5a7940a25017cdaeefb4d7e599f298da6beba3f9.roa
File:                     5a7940a25017cdaeefb4d7e599f298da6beba3f9.roa (raw, json)
Hash identifier:          MzRm2roQhcR3f9ou5h04SxJ0MqsK6vpQ7gKZ31LF4vc=
Subject key identifier:   B1:DE:D2:3E:D5:7B:AA:F5:8D:86:B6:31:92:50:F1:31:79:21:74:49
Certificate issuer:       /CN=386b033044549633844a1e355380fa99c6222818
Certificate serial:       093A3B
Authority key identifier: 1F:3D:46:D4:6B:9E:81:60:68:EF:D7:23:82:B0:32:C9:DE:7B:2B:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/386b033044549633844a1e355380fa99c6222818.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/5a7940a25017cdaeefb4d7e599f298da6beba3f9.roa
Signing time:             Wed 24 Mar 2021 14:31:45 +0000
ROA not before:           Wed 24 Mar 2021 14:31:45 +0000
ROA not after:            Tue 24 Mar 2026 14:31:45 +0000
asID:                     52444
IP address blocks:        45.227.152.0/22 maxlen: 24
                          2803:be20::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604731 (0x93a3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=386b033044549633844a1e355380fa99c6222818
        Validity
            Not Before: Mar 24 14:31:45 2021 GMT
            Not After : Mar 24 14:31:45 2026 GMT
        Subject: CN=5a7940a25017cdaeefb4d7e599f298da6beba3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:72:33:a5:f6:bb:1a:92:12:67:3e:f0:8d:7c:
                    0c:e4:69:3c:a2:f5:a4:06:d3:03:81:56:e2:58:7d:
                    ac:12:fa:bd:d9:bf:c5:11:6b:47:6f:a5:7f:85:79:
                    2d:54:e0:b5:ca:e0:a0:ff:e4:a2:a5:f4:25:94:1f:
                    54:5f:cb:70:b4:1a:e5:ef:40:90:e5:57:11:40:22:
                    8e:27:96:0d:8e:32:30:e3:0c:40:78:41:24:a1:83:
                    0c:11:eb:3c:a1:c5:ca:23:35:4c:47:92:17:c9:27:
                    36:ed:07:2e:1c:5b:8f:eb:b0:a7:33:a2:42:d1:2c:
                    04:c1:88:2d:df:ea:16:2f:ad:83:d3:02:08:6b:52:
                    09:9b:ec:d0:ea:fc:f0:57:1c:7f:71:e1:f1:cb:04:
                    0d:97:bf:ee:e6:4c:bc:74:e1:38:5b:e9:9b:f9:c8:
                    f1:7d:0f:cf:f6:ad:b9:94:3c:d7:f5:24:a1:88:ef:
                    c8:a0:f4:fe:67:14:02:94:25:d1:1a:68:8c:97:61:
                    38:30:ee:24:2e:92:4c:53:7c:af:4a:bf:bb:8f:f0:
                    bb:4d:96:43:c7:e0:33:a1:d9:fb:49:0e:21:79:06:
                    83:8d:be:e3:38:0e:77:f9:ed:99:1d:94:2e:a2:c4:
                    0e:70:da:37:0b:81:22:2f:9c:5c:2a:ff:d5:0d:58:
                    16:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DE:D2:3E:D5:7B:AA:F5:8D:86:B6:31:92:50:F1:31:79:21:74:49
            X509v3 Authority Key Identifier:
                keyid:1F:3D:46:D4:6B:9E:81:60:68:EF:D7:23:82:B0:32:C9:DE:7B:2B:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/386b033044549633844a1e355380fa99c6222818.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/5a7940a25017cdaeefb4d7e599f298da6beba3f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8a50861-2da1-41f7-82a9-ac68cd1c1b4a/386b033044549633844a1e355380fa99c6222818.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.152.0/22
                IPv6:
                  2803:be20::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:e6:16:5f:11:10:8b:e1:2e:65:d9:06:f4:0d:9c:ee:e7:93:
         18:1b:ab:b4:f1:90:be:c1:db:18:89:f8:8c:dc:60:9c:f8:27:
         b0:f4:18:35:31:41:39:53:a3:03:6d:1e:ca:05:a1:9b:85:df:
         98:78:3b:5c:6c:e3:46:d3:20:97:e2:fc:31:38:1e:70:4b:c5:
         f6:1f:8c:f9:73:d9:dd:65:c3:3f:6b:c7:64:8f:43:5e:83:79:
         4f:a8:c3:5a:4f:de:31:4f:86:eb:c0:46:a3:4a:e1:f1:73:cb:
         5a:3f:52:21:5a:57:db:08:6b:c6:3c:5f:b3:18:84:6d:87:60:
         48:f9:15:31:e1:8a:35:7a:27:d1:02:65:61:8e:b3:65:e0:f5:
         2e:87:a5:87:9f:be:e8:c3:3e:68:b6:60:a5:00:bf:e7:a2:99:
         de:e8:e8:c2:28:b0:03:35:71:33:bf:bd:f4:a2:4e:35:63:f8:
         db:f7:48:62:a6:a8:c2:a2:62:af:09:0e:a2:da:9a:f5:5e:9a:
         52:dd:99:7c:6a:a6:88:72:33:8d:b3:16:ae:c7:1a:1b:b5:3e:
         fc:49:75:66:0e:cd:d4:56:58:a2:ff:8f:3e:ea:60:77:30:d3:
         e5:92:d6:0a:17:7b:94:57:3a:68:0f:2e:4b:22:3d:04:c3:74:
         25:3e:f6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----