Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ee1304-afb1-4af4-a5bb-0edabf482e01/814f1b23d466599be9c76aa8fb95a0eb3407a283.roa
File:                     814f1b23d466599be9c76aa8fb95a0eb3407a283.roa (raw, json)
Hash identifier:          fs39mA0UJUjwjodKZn1InLKjYeiwq1GAhe6Z6iJLBVo=
Subject key identifier:   F1:53:C8:17:62:54:D9:5E:56:DF:6A:2D:45:C8:1A:13:67:47:5A:96
Certificate issuer:       /CN=ec67c96fab7ae6c58319eae29ffd8cc885fd2f54
Certificate serial:       048F53
Authority key identifier: D5:C1:61:79:96:CC:97:AD:7C:72:74:60:4E:55:CA:EF:7D:B2:0B:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec67c96fab7ae6c58319eae29ffd8cc885fd2f54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9ee1304-afb1-4af4-a5bb-0edabf482e01/814f1b23d466599be9c76aa8fb95a0eb3407a283.roa
Signing time:             Wed 24 Mar 2021 14:30:04 +0000
ROA not before:           Wed 24 Mar 2021 14:30:04 +0000
ROA not after:            Tue 24 Mar 2026 14:30:04 +0000
asID:                     269808
IP address blocks:        45.186.44.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298835 (0x48f53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec67c96fab7ae6c58319eae29ffd8cc885fd2f54
        Validity
            Not Before: Mar 24 14:30:04 2021 GMT
            Not After : Mar 24 14:30:04 2026 GMT
        Subject: CN=814f1b23d466599be9c76aa8fb95a0eb3407a283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b9:97:46:dc:b7:70:ef:67:42:a1:b4:49:a0:
                    1d:7a:e0:5e:83:11:05:11:19:f5:ec:04:64:ba:a3:
                    e0:5d:13:ee:29:83:b5:aa:9d:78:48:65:c6:78:a4:
                    f0:04:32:98:7d:71:da:c2:03:eb:1f:f6:f2:66:39:
                    4e:8a:53:ec:47:04:c5:4e:69:cf:5f:67:2c:57:dc:
                    78:c2:e9:01:4a:39:83:4a:a8:3d:69:49:11:a4:75:
                    68:41:26:81:d4:93:f5:83:14:76:1e:4f:6b:ee:26:
                    25:d3:d6:13:b6:17:28:86:8d:ef:42:a8:c7:4c:f1:
                    2d:8c:c9:29:39:0f:fc:99:ff:28:55:4b:57:f5:a1:
                    fd:6f:c3:77:66:e8:02:2b:91:c6:c2:0a:ca:ad:97:
                    c2:fe:b4:93:90:6f:dc:e4:53:ca:eb:f4:4e:48:f8:
                    fe:c1:0d:92:b4:48:cc:96:55:2d:79:09:06:4e:53:
                    b9:65:2e:d6:99:bf:22:d5:8e:0d:c0:29:da:37:7e:
                    13:f7:3f:fe:9b:7f:c9:46:a4:b7:d3:d0:67:5a:d5:
                    b0:3d:2f:8b:55:b9:7f:8c:10:9b:0d:53:62:83:d7:
                    09:74:03:ce:05:a9:9b:f8:6f:99:e9:fd:b7:d2:c8:
                    e0:43:98:5a:b4:e6:25:75:52:25:d2:e4:33:26:f2:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:53:C8:17:62:54:D9:5E:56:DF:6A:2D:45:C8:1A:13:67:47:5A:96
            X509v3 Authority Key Identifier:
                keyid:D5:C1:61:79:96:CC:97:AD:7C:72:74:60:4E:55:CA:EF:7D:B2:0B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec67c96fab7ae6c58319eae29ffd8cc885fd2f54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ee1304-afb1-4af4-a5bb-0edabf482e01/814f1b23d466599be9c76aa8fb95a0eb3407a283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9ee1304-afb1-4af4-a5bb-0edabf482e01/ec67c96fab7ae6c58319eae29ffd8cc885fd2f54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:2d:b8:97:6c:88:b0:74:9b:80:19:1a:87:af:f3:08:8e:c6:
         b8:9d:41:66:b5:5c:49:a3:ba:54:8e:a0:7c:af:26:34:49:89:
         1f:65:63:cd:89:9e:5b:18:4f:67:d1:df:24:36:f3:25:4b:14:
         50:58:96:76:9f:07:60:28:26:b9:53:90:83:d7:9f:71:fd:6d:
         3b:e8:d4:10:9d:13:aa:81:64:64:6d:9d:82:43:d5:80:36:59:
         4d:54:1f:0a:35:df:c3:de:19:bc:05:fe:56:13:0e:38:2f:bf:
         49:c3:3d:0e:9a:72:77:3e:c1:b4:90:4c:d2:28:3c:b9:f0:44:
         d5:7b:2b:a1:61:03:02:6a:24:a6:e3:4a:68:8e:e8:59:49:e2:
         10:b0:6e:5e:5d:12:2d:ba:c9:ea:b7:c9:52:fe:26:6e:9b:e4:
         96:a8:09:c9:65:e3:33:78:42:84:d2:e7:de:53:33:14:9f:1f:
         1f:6a:b6:16:be:6c:c2:d3:6c:ad:58:a8:36:4b:6c:da:87:dc:
         d5:2a:93:7f:65:a2:63:59:07:fb:da:f2:1a:6b:87:ba:35:da:
         51:33:32:5f:93:14:d0:ac:13:f3:8f:50:8f:15:80:cb:c1:36:
         76:d4:a3:ae:d6:2c:28:9b:50:d6:2e:3c:aa:18:0e:d7:65:bc:
         36:21:f6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----