Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ffe0b588-94c5-4db4-a92e-43c66fc5595a/ec9f11bf894d535ae259dfb67a0d8ce0c54666ff.roa
File:                     ec9f11bf894d535ae259dfb67a0d8ce0c54666ff.roa (raw, json)
Hash identifier:          FYxpeVCHY5ztZ//QPfLgt763YYyUYG8MNwfMb4oOsVw=
Subject key identifier:   91:49:9A:1C:41:85:D4:F7:5D:39:5F:5F:2B:68:46:90:E0:64:8C:D3
Certificate issuer:       /CN=c4148fec5d63878beccdfd61c25ec33637126b8c
Certificate serial:       0B93A8
Authority key identifier: AC:A2:08:E8:AB:CB:89:32:61:13:D6:AB:19:30:D6:C7:A1:84:D9:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4148fec5d63878beccdfd61c25ec33637126b8c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ffe0b588-94c5-4db4-a92e-43c66fc5595a/ec9f11bf894d535ae259dfb67a0d8ce0c54666ff.roa
Signing time:             Wed 24 Mar 2021 14:32:31 +0000
ROA not before:           Wed 24 Mar 2021 14:32:30 +0000
ROA not after:            Tue 24 Mar 2026 14:32:30 +0000
asID:                     52468
IP address blocks:        45.177.180.0/22 maxlen: 24
                          2803:4a60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 758696 (0xb93a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4148fec5d63878beccdfd61c25ec33637126b8c
        Validity
            Not Before: Mar 24 14:32:30 2021 GMT
            Not After : Mar 24 14:32:30 2026 GMT
        Subject: CN=ec9f11bf894d535ae259dfb67a0d8ce0c54666ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b7:da:cb:fd:6b:f5:f4:f3:cd:b0:e4:64:e9:
                    80:7f:23:71:92:5c:4f:8a:05:82:b4:b6:31:e4:c5:
                    53:76:40:01:1c:cd:50:64:e2:5a:2a:bd:93:56:a1:
                    4f:ff:1b:eb:8f:cc:81:62:fb:1a:36:5c:89:65:c9:
                    ab:00:db:29:49:67:6f:cf:3f:2d:ec:32:c1:d2:5c:
                    d5:74:e0:a9:40:21:6a:16:43:c5:4a:21:b0:d4:c0:
                    30:5a:53:ed:37:90:6e:b8:5d:35:36:e1:92:bd:76:
                    70:c2:3e:df:27:07:9a:ff:c2:92:69:96:76:43:5f:
                    0b:53:07:b4:f4:7d:2e:70:cf:40:32:e5:b0:93:74:
                    71:bb:93:5e:3c:e8:f4:03:86:a7:08:bf:83:b4:b9:
                    d2:5b:2c:be:84:8c:f7:3f:af:e0:2d:fa:3c:ef:79:
                    9b:93:21:3e:e1:76:6e:09:c4:5e:98:58:49:96:05:
                    09:44:27:b0:36:d6:bf:76:64:de:1a:1f:dd:71:5a:
                    67:16:eb:01:27:cb:72:73:75:8a:0f:f7:86:e2:1d:
                    05:2a:92:81:0d:e6:62:4e:20:40:39:bf:7b:c0:3b:
                    79:bd:03:e6:7c:0d:6b:9b:0c:58:68:a8:da:e5:b2:
                    a5:5b:e9:c4:53:f2:41:a7:7a:cc:78:91:48:79:18:
                    f2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:49:9A:1C:41:85:D4:F7:5D:39:5F:5F:2B:68:46:90:E0:64:8C:D3
            X509v3 Authority Key Identifier:
                keyid:AC:A2:08:E8:AB:CB:89:32:61:13:D6:AB:19:30:D6:C7:A1:84:D9:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4148fec5d63878beccdfd61c25ec33637126b8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ffe0b588-94c5-4db4-a92e-43c66fc5595a/ec9f11bf894d535ae259dfb67a0d8ce0c54666ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ffe0b588-94c5-4db4-a92e-43c66fc5595a/c4148fec5d63878beccdfd61c25ec33637126b8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.180.0/22
                IPv6:
                  2803:4a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:4c:1e:58:d9:1b:48:bb:85:d6:72:3f:0c:8d:aa:cb:36:86:
         ec:06:95:6b:36:98:35:8f:df:0c:af:bd:d1:9d:95:9a:46:0b:
         a8:00:26:03:f3:c2:82:af:b6:a3:46:04:a6:a8:66:97:36:05:
         c9:4d:5f:8e:99:5d:43:a6:73:45:1b:a1:59:68:b2:d9:77:bb:
         c7:ca:f1:60:f9:af:48:66:9c:8e:06:5d:0f:4a:49:bb:76:83:
         db:90:08:f1:34:30:87:53:42:aa:72:e6:82:c4:87:68:d4:47:
         4e:86:c8:e4:fb:39:4f:df:86:dd:ed:7f:b5:45:86:23:70:6b:
         4c:86:c5:26:62:4a:d7:ec:46:78:9b:56:bc:53:de:21:a2:3b:
         c7:23:69:e8:ec:53:ef:1d:65:03:08:eb:e5:12:26:64:ff:fd:
         58:3c:9a:74:89:25:1a:6d:58:73:c8:f6:2c:00:d0:da:50:a2:
         fd:0e:24:a3:f7:af:44:0a:85:cd:44:2e:90:db:f2:cc:61:3e:
         c4:ed:ca:7c:ff:9c:e7:fc:dc:2d:0e:59:32:f0:10:ca:62:d0:
         01:2f:51:50:4e:a8:1b:5d:b5:ec:1a:98:1d:1d:e7:cf:4c:e8:
         d9:9f:29:bf:b5:76:b6:05:e0:08:5f:68:18:e6:f2:b9:f1:89:
         87:51:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----