Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fec06e03-0683-4e92-a721-84e9c307a08c/e88e5238d0fa17c98fe84e21cc1eafac9b5c56ae.roa
File:                     e88e5238d0fa17c98fe84e21cc1eafac9b5c56ae.roa (raw, json)
Hash identifier:          dspoF+wznXVVULwiTtHqmV6oppt/ntPc8J7bxVI//AY=
Subject key identifier:   4D:9A:BA:59:DC:CE:F7:8D:B4:07:09:3D:D6:2D:35:F5:15:16:34:98
Certificate issuer:       /CN=acf3bb686e32ebc18cd86ea468114ebd153206e5
Certificate serial:       0C9C25
Authority key identifier: 7B:18:2D:95:C4:1E:BD:D0:20:C0:0F:7E:6A:9F:7A:5B:7D:CB:9D:D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acf3bb686e32ebc18cd86ea468114ebd153206e5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fec06e03-0683-4e92-a721-84e9c307a08c/e88e5238d0fa17c98fe84e21cc1eafac9b5c56ae.roa
Signing time:             Wed 24 Mar 2021 14:47:00 +0000
ROA not before:           Wed 24 Mar 2021 14:46:59 +0000
ROA not after:            Tue 24 Mar 2026 14:46:59 +0000
asID:                     267709
IP address blocks:        45.164.207.0/24 maxlen: 24
                          2803:a9a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 826405 (0xc9c25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf3bb686e32ebc18cd86ea468114ebd153206e5
        Validity
            Not Before: Mar 24 14:46:59 2021 GMT
            Not After : Mar 24 14:46:59 2026 GMT
        Subject: CN=e88e5238d0fa17c98fe84e21cc1eafac9b5c56ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ca:1e:78:26:25:7b:4b:01:e1:fe:b1:6a:9e:
                    e4:6f:f3:4f:6a:f4:db:64:3e:9a:ef:34:68:42:a2:
                    be:bd:df:34:01:6c:44:e2:2e:e7:a0:9d:6a:9b:be:
                    14:0d:ad:9a:19:b1:c8:c5:71:8c:b6:80:0d:15:37:
                    90:c1:a3:1f:86:e4:04:db:36:5c:d6:1d:c2:ed:c6:
                    05:f4:ea:a2:7b:b9:a6:73:78:7c:1a:1b:12:b7:ec:
                    51:21:4e:01:20:10:51:8f:3e:62:ef:79:aa:00:74:
                    d7:e5:3d:17:ea:5a:f8:ad:b7:61:f0:74:03:90:45:
                    63:37:69:88:fb:12:3b:e0:bc:b7:4b:13:74:b6:18:
                    31:45:1f:6d:89:43:d8:39:aa:4b:dc:e0:b8:de:43:
                    52:d9:f4:ec:d2:cc:c1:e6:67:ec:79:3a:0f:81:bf:
                    b9:ae:28:7a:92:86:07:3a:c1:73:2c:60:d6:a5:c0:
                    28:c7:5d:6c:36:25:4d:38:60:8f:6f:c4:aa:ae:4c:
                    65:a2:77:46:4e:71:f8:e7:48:3f:df:68:f1:13:fc:
                    21:43:87:a8:d4:3d:c6:8d:09:44:cf:9d:6a:50:7e:
                    13:c8:14:aa:2f:f0:32:3b:93:d4:1c:32:81:cb:d6:
                    71:06:68:49:64:c5:f0:c9:c8:11:7d:4c:40:e9:5d:
                    7c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:9A:BA:59:DC:CE:F7:8D:B4:07:09:3D:D6:2D:35:F5:15:16:34:98
            X509v3 Authority Key Identifier:
                keyid:7B:18:2D:95:C4:1E:BD:D0:20:C0:0F:7E:6A:9F:7A:5B:7D:CB:9D:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acf3bb686e32ebc18cd86ea468114ebd153206e5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fec06e03-0683-4e92-a721-84e9c307a08c/e88e5238d0fa17c98fe84e21cc1eafac9b5c56ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fec06e03-0683-4e92-a721-84e9c307a08c/acf3bb686e32ebc18cd86ea468114ebd153206e5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.164.207.0/24
                IPv6:
                  2803:a9a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:9f:a2:db:07:c5:8a:87:1d:2d:73:d1:fc:85:35:56:05:07:
         a8:00:29:b9:1a:5b:44:12:81:1e:21:4b:07:d6:fe:c6:07:47:
         d1:74:24:8b:f4:32:cf:d0:14:a1:81:24:56:e1:64:c8:bf:fa:
         d6:ca:02:8c:59:a0:e3:fb:03:c3:b5:22:7e:4c:0c:43:c8:d3:
         0f:18:ef:0b:7e:e1:49:28:e8:09:54:1e:e0:d3:f0:bf:cd:0d:
         3d:9b:ac:0e:2a:db:d3:3e:5f:bf:61:82:5f:70:30:89:c7:03:
         c8:54:c1:2a:50:33:c0:a0:77:3f:63:22:9e:75:2d:d4:63:d4:
         6a:f7:e5:53:58:ef:82:a7:4c:42:af:08:3a:c0:06:09:43:5a:
         e1:56:14:53:f7:bc:3f:c6:5c:ef:ba:81:3f:7e:01:58:14:a2:
         55:ae:bc:6f:3e:ab:f8:d0:a1:47:2e:f0:db:5a:8a:a6:26:f1:
         49:09:81:32:e3:7d:7a:11:01:a3:e1:b5:db:d0:56:44:49:57:
         9c:1d:a9:7f:94:9b:79:e9:49:76:be:35:7f:33:66:4a:4f:bc:
         5e:94:b0:7f:6a:d7:c6:04:60:5b:5a:ab:04:9a:fe:3f:a0:02:
         7a:13:1c:73:b0:16:d0:70:66:cd:f0:4a:83:fd:4d:fe:0a:bb:
         a3:6a:f2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----