Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e5a55e5a-924d-469e-beb3-5f40f14f7dd1/b848f8036e8676bac64db56eef987847e81f6a91.roa
File:                     b848f8036e8676bac64db56eef987847e81f6a91.roa (raw, json)
Hash identifier:          9XHgulvd/DiPuCmxNq5ApcH9njRiuxD/IxQwzfZIDiY=
Subject key identifier:   06:CB:7F:21:3F:47:03:63:AE:68:63:99:34:68:43:AF:DA:B8:11:9A
Certificate issuer:       /CN=1ead9082fe2958d13ca8528edb51c485b50eb095
Certificate serial:       0D1D91
Authority key identifier: 53:FD:F3:49:53:B6:96:8E:76:34:9A:1C:78:D5:D6:77:38:85:B6:26
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ead9082fe2958d13ca8528edb51c485b50eb095.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e5a55e5a-924d-469e-beb3-5f40f14f7dd1/b848f8036e8676bac64db56eef987847e81f6a91.roa
Signing time:             Wed 24 Mar 2021 14:44:55 +0000
ROA not before:           Wed 24 Mar 2021 14:44:54 +0000
ROA not after:            Tue 24 Mar 2026 14:44:54 +0000
asID:                     18840
IP address blocks:        186.1.0.0/18 maxlen: 24
                          170.246.152.0/22 maxlen: 24
                          2800:8c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859537 (0xd1d91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ead9082fe2958d13ca8528edb51c485b50eb095
        Validity
            Not Before: Mar 24 14:44:54 2021 GMT
            Not After : Mar 24 14:44:54 2026 GMT
        Subject: CN=b848f8036e8676bac64db56eef987847e81f6a91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e7:c5:1e:21:1b:63:6b:c2:9c:9c:3d:5c:d4:
                    e5:2e:09:ad:e0:36:99:00:c5:fb:3d:e2:5f:1d:4a:
                    72:bc:35:fd:18:9c:cd:89:db:b7:71:62:54:69:11:
                    4f:ad:0c:86:a3:5b:f9:18:61:87:db:82:1f:80:f8:
                    c2:c7:fe:4f:40:64:0e:8b:17:aa:e0:7b:c9:95:db:
                    aa:2b:c6:eb:e3:6d:8a:d3:8a:16:5f:55:6b:55:25:
                    ee:91:f4:e1:53:f4:1b:c2:7b:a2:17:3a:8e:88:23:
                    e4:5a:b2:a7:b3:aa:c9:79:78:f7:2c:bb:91:c4:26:
                    68:f2:0a:14:3a:9d:33:ec:f6:19:8c:09:12:c4:1a:
                    1c:1b:29:0d:5f:10:3d:ed:96:39:71:e6:6d:6e:9a:
                    7c:4e:c0:88:f9:5a:ec:07:6b:42:1c:74:bd:7f:80:
                    14:d7:51:50:ca:53:d1:2f:e8:14:26:cf:7f:83:b4:
                    ea:05:96:29:3e:6d:a0:6e:43:9f:a7:4b:dc:63:6b:
                    33:e7:f2:4a:2b:52:49:ad:59:59:58:63:bf:a6:7c:
                    a2:42:b5:4a:57:08:ea:63:7a:29:4f:5d:b3:1b:ff:
                    78:13:14:1e:cb:a1:86:fa:e2:78:d8:d5:1b:0f:eb:
                    b4:1f:85:b1:c9:7e:f1:fb:47:0c:db:c1:93:b9:ee:
                    3c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CB:7F:21:3F:47:03:63:AE:68:63:99:34:68:43:AF:DA:B8:11:9A
            X509v3 Authority Key Identifier:
                keyid:53:FD:F3:49:53:B6:96:8E:76:34:9A:1C:78:D5:D6:77:38:85:B6:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ead9082fe2958d13ca8528edb51c485b50eb095.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e5a55e5a-924d-469e-beb3-5f40f14f7dd1/b848f8036e8676bac64db56eef987847e81f6a91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e5a55e5a-924d-469e-beb3-5f40f14f7dd1/1ead9082fe2958d13ca8528edb51c485b50eb095.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.152.0/22
                  186.1.0.0/18
                IPv6:
                  2800:8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:08:59:ac:05:7c:90:08:b2:a8:1a:e1:29:e5:83:b6:0c:00:
         42:77:96:76:41:01:ec:36:ba:c1:d4:28:91:1b:61:06:e0:c0:
         00:a6:b8:bd:c8:1b:d4:85:53:71:25:76:24:a4:88:b4:ce:f2:
         96:f5:48:5b:27:f0:81:ad:4a:3c:c3:b2:a5:bb:39:e9:2b:28:
         e3:f8:9d:16:43:29:9d:9b:e3:09:ab:57:0c:dd:8b:53:d6:b0:
         68:b0:a7:e8:68:9b:ac:99:bc:36:39:bf:45:92:5a:2f:cf:7f:
         c7:3e:a5:fd:e3:02:8b:9d:d2:36:44:d2:d7:e2:95:2b:90:fc:
         65:d4:a8:2e:82:9d:e6:54:ef:0a:38:2e:42:1c:7c:1c:86:90:
         ed:f4:7f:cf:7b:a1:bf:e7:ae:c2:7b:0b:e5:6c:a8:b6:4e:1d:
         21:11:44:24:14:55:f4:1e:32:ca:9d:85:ad:fe:ee:ad:63:15:
         87:f9:78:2a:8e:98:8c:43:04:bf:4d:e3:b0:87:32:2c:0b:40:
         b2:72:76:8d:08:11:28:42:58:88:8e:5d:b7:4f:dc:98:84:62:
         be:09:54:5a:4d:06:cc:3e:4d:c5:52:a4:e5:d5:ff:59:d5:67:
         2f:99:a7:99:43:19:61:66:82:0a:31:e7:12:3e:8a:b6:85:91:
         cb:f1:96:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----