Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fca4035f-ce49-443e-ad0a-aef540a4256e/8d054d7f24eca8e582aab3c6edfa01e599f6a28d.roa
File:                     8d054d7f24eca8e582aab3c6edfa01e599f6a28d.roa (raw, json)
Hash identifier:          SsfZchupUr5SW8gEUe7E4QzMYgyE10uFVGJ0MzeWqFY=
Subject key identifier:   96:16:D9:97:71:56:01:CE:19:27:A0:D8:99:9B:91:79:68:E0:EC:16
Certificate issuer:       /CN=85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59
Certificate serial:       054443
Authority key identifier: 20:AE:FF:D0:A2:02:AA:14:52:26:B7:6E:56:6C:10:AD:2B:D6:A9:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fca4035f-ce49-443e-ad0a-aef540a4256e/8d054d7f24eca8e582aab3c6edfa01e599f6a28d.roa
Signing time:             Wed 24 Mar 2021 14:46:25 +0000
ROA not before:           Wed 24 Mar 2021 14:46:25 +0000
ROA not after:            Tue 24 Mar 2026 14:46:25 +0000
asID:                     269887
IP address blocks:        45.191.88.0/22 maxlen: 24
                          2803:a4e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345155 (0x54443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59
        Validity
            Not Before: Mar 24 14:46:25 2021 GMT
            Not After : Mar 24 14:46:25 2026 GMT
        Subject: CN=8d054d7f24eca8e582aab3c6edfa01e599f6a28d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:08:d1:a3:41:fc:ce:a7:68:55:3b:a8:a3:94:
                    b6:49:9e:17:93:02:76:ea:5c:4f:12:4c:43:6a:68:
                    86:89:a1:e8:65:03:a1:40:e1:39:1d:f7:7e:3d:1e:
                    3d:04:62:fa:b4:3d:60:b0:cd:84:4d:f6:f7:fa:32:
                    e4:e7:f9:a9:18:46:9c:73:a0:c3:af:c4:60:26:ac:
                    37:45:4a:18:3b:fa:7e:d2:6a:4f:0c:69:2d:1b:e9:
                    f7:74:70:86:c7:f1:20:e1:29:fa:4f:ec:61:1f:a4:
                    fe:ef:f5:be:b1:fb:a4:3d:23:5e:01:15:8f:58:9f:
                    bc:50:1d:84:20:0e:87:4d:82:b6:c2:ae:b4:c3:dc:
                    de:67:a3:e0:2d:9b:1d:dd:10:61:83:9d:4d:37:30:
                    68:eb:e4:f2:ac:d7:02:62:95:29:04:61:12:b2:cb:
                    b0:3a:40:bd:a4:8c:b7:0e:4c:f3:aa:10:5a:c7:93:
                    63:91:87:40:7a:a6:17:d3:a0:ec:9a:71:d0:a5:2f:
                    e2:a9:5a:70:bd:2e:1e:9d:6c:54:5e:1e:86:da:df:
                    d0:0c:35:7d:04:2c:a2:c3:f6:ee:8e:fc:f9:8f:ab:
                    fa:4e:81:08:40:98:83:5e:64:75:ac:a7:ac:f0:16:
                    b0:af:18:51:2e:88:3d:ed:16:0e:c7:e5:12:fd:bb:
                    76:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:16:D9:97:71:56:01:CE:19:27:A0:D8:99:9B:91:79:68:E0:EC:16
            X509v3 Authority Key Identifier:
                keyid:20:AE:FF:D0:A2:02:AA:14:52:26:B7:6E:56:6C:10:AD:2B:D6:A9:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fca4035f-ce49-443e-ad0a-aef540a4256e/8d054d7f24eca8e582aab3c6edfa01e599f6a28d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fca4035f-ce49-443e-ad0a-aef540a4256e/85b34eb4fa9249c2cb1d62834b1e1484ee3cbf59.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.191.88.0/22
                IPv6:
                  2803:a4e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:9a:6e:cb:90:98:55:f5:95:a3:b2:5c:8f:dc:cc:37:e7:42:
         3d:fc:e7:e2:8d:ab:4c:4d:fa:4d:14:4f:4e:a3:b2:fc:e6:7b:
         8e:5b:4b:22:ab:90:ac:e4:2b:f3:ff:78:3d:b0:4f:78:2b:fd:
         da:ef:14:17:c0:5c:bd:6c:c1:02:f0:1c:20:fe:d1:f0:d0:4f:
         80:d4:f3:6d:e2:e1:6f:f6:1c:24:11:d2:57:4c:30:5b:a2:19:
         05:9c:6f:c5:9f:24:9a:a7:82:2c:78:a8:e0:fe:24:a2:0e:f2:
         7a:77:2d:0c:50:d1:8c:46:ef:bc:f6:a9:58:99:bb:e0:b5:46:
         56:28:84:3b:a6:2b:d2:e1:28:17:eb:16:08:12:6a:d8:a1:63:
         dd:74:d8:39:be:4c:b2:24:42:3d:2d:3c:ee:5b:a6:c5:3a:c2:
         1a:4d:0d:ed:9e:72:b4:67:87:fa:02:b4:aa:b3:d6:6a:45:01:
         c6:0a:0e:9c:e4:ee:1b:44:27:85:73:2e:e1:25:cc:79:ac:1a:
         af:8d:92:38:1f:07:ee:f3:a9:de:09:70:0b:7b:12:53:0c:c4:
         d2:86:44:99:65:1f:57:b0:ff:54:25:76:8d:20:88:a4:71:97:
         ca:36:e9:42:f2:bc:1f:cd:4e:f8:84:c4:5a:73:e9:81:f9:09:
         1f:15:55:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----