Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/03428cbb-7efd-40b1-8868-80e86c26ff7f/6479ba5c4491f5d024db5015fd4b0a2dc5e90e3b.roa
File:                     6479ba5c4491f5d024db5015fd4b0a2dc5e90e3b.roa (raw, json)
Hash identifier:          shmOKQcyXKx8dSOctX0/qF6X/mZBVin9nMqB2tCeiUc=
Subject key identifier:   7B:19:BC:B7:24:7E:B3:94:BA:D1:53:AC:9B:95:6C:55:8B:E2:3D:EE
Certificate issuer:       /CN=f2d84447c9b58d7ab8bdbf01e7e737ac666115ac
Certificate serial:       066628
Authority key identifier: 85:FD:53:64:32:98:F4:6A:AA:A1:17:5E:83:20:DD:C7:4E:5B:93:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2d84447c9b58d7ab8bdbf01e7e737ac666115ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/03428cbb-7efd-40b1-8868-80e86c26ff7f/6479ba5c4491f5d024db5015fd4b0a2dc5e90e3b.roa
Signing time:             Wed 24 Mar 2021 14:33:58 +0000
ROA not before:           Wed 24 Mar 2021 14:33:58 +0000
ROA not after:            Tue 24 Mar 2026 14:33:58 +0000
asID:                     61466
IP address blocks:        170.238.32.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419368 (0x66628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2d84447c9b58d7ab8bdbf01e7e737ac666115ac
        Validity
            Not Before: Mar 24 14:33:58 2021 GMT
            Not After : Mar 24 14:33:58 2026 GMT
        Subject: CN=6479ba5c4491f5d024db5015fd4b0a2dc5e90e3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:7c:3e:62:91:36:3a:1b:a7:2b:83:ea:9b:
                    fa:4f:d8:ee:91:4d:34:9a:b2:fa:57:4a:24:64:ae:
                    0d:60:ed:9b:cc:2d:aa:39:59:40:d9:38:4f:8f:d5:
                    63:6f:e1:87:16:bf:e8:41:ec:5a:31:9e:f7:75:92:
                    4b:91:6d:0d:aa:16:e6:74:4c:4d:24:5a:7c:be:59:
                    79:d3:54:39:38:90:0c:66:8d:22:96:ed:c1:c2:17:
                    17:63:70:49:5e:4f:a9:d7:d5:b4:a8:0c:fb:fb:dc:
                    c7:80:00:67:07:15:b6:39:cc:94:db:c1:0f:cd:a3:
                    69:84:8a:6d:1d:83:9e:13:d7:64:bf:96:20:43:e2:
                    1f:1a:08:a2:b7:2c:ce:7d:4e:fc:01:41:1a:31:27:
                    41:40:a5:45:63:ce:d7:85:43:b1:ce:59:6c:0b:56:
                    a1:da:01:88:57:07:7b:7c:4f:46:5e:98:f7:63:bb:
                    28:e2:9b:80:fc:32:3f:cd:cf:59:19:4d:41:cc:b7:
                    75:9f:5d:28:27:bd:11:2f:8b:56:a4:9d:87:47:80:
                    ae:9a:67:ed:cd:71:c6:64:59:db:cf:46:e7:bc:39:
                    52:03:9e:3c:a8:51:3a:b5:35:8c:a8:b6:26:e4:83:
                    4f:f0:7a:e5:e4:e1:dc:69:b1:93:b7:7f:62:a4:c3:
                    a7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:19:BC:B7:24:7E:B3:94:BA:D1:53:AC:9B:95:6C:55:8B:E2:3D:EE
            X509v3 Authority Key Identifier:
                keyid:85:FD:53:64:32:98:F4:6A:AA:A1:17:5E:83:20:DD:C7:4E:5B:93:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2d84447c9b58d7ab8bdbf01e7e737ac666115ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/03428cbb-7efd-40b1-8868-80e86c26ff7f/6479ba5c4491f5d024db5015fd4b0a2dc5e90e3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/03428cbb-7efd-40b1-8868-80e86c26ff7f/f2d84447c9b58d7ab8bdbf01e7e737ac666115ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:cf:3a:ab:5d:77:1b:f1:a6:c7:67:6e:4c:fe:43:ed:7e:d3:
         4f:6b:47:1f:f3:bc:45:88:76:92:3f:66:88:fd:c6:cb:7d:57:
         35:80:ff:fd:16:cf:ba:15:1e:3c:ae:2f:e0:4a:b2:c2:d6:49:
         34:92:9d:50:48:93:1d:d5:75:53:96:d0:5f:2c:35:33:b6:e1:
         3e:7e:47:8c:d8:49:2a:08:54:c9:e2:52:5d:0f:ad:ac:6f:ee:
         bb:3e:f1:55:19:a4:c0:bb:e4:28:8b:4d:5c:1b:50:43:2f:27:
         9b:54:84:aa:80:ac:53:6b:27:8e:12:54:a1:2a:cc:f2:ef:13:
         05:1e:e1:77:f5:e8:61:12:38:ee:12:16:25:5e:7f:46:4c:1f:
         33:57:14:0b:54:15:33:e2:1d:47:25:79:6e:a4:c3:ad:89:29:
         0f:ec:65:e1:3f:34:b9:7a:c0:b2:ac:12:19:27:eb:23:15:5f:
         4b:80:a9:d1:71:75:d0:98:d3:72:ef:f9:19:b1:ee:c0:a0:9c:
         35:a1:43:1d:4b:21:38:65:2e:1e:56:e9:d9:a9:6a:47:5e:51:
         f6:d5:e6:7a:d3:7c:c5:55:e5:30:fd:00:aa:ff:0b:24:9c:57:
         ac:05:f2:9f:01:6c:9a:45:bb:f2:6e:95:b0:55:22:b1:00:3f:
         4e:88:1a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----