Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/04e43c37-64fe-4d45-92a7-e814864c7a18/34ac81bf0d44d7cc3e972be0237c5eb96fd7c664.roa
File:                     34ac81bf0d44d7cc3e972be0237c5eb96fd7c664.roa (raw, json)
Hash identifier:          Egbw3UTH/cv3djllhrT20J/rLLH2PnVnmGQRXM++wtc=
Subject key identifier:   B1:50:EF:3B:1E:10:71:1E:5C:E6:19:A1:68:E6:22:F4:0D:BB:7B:36
Certificate issuer:       /CN=d540a2f05624a216a4589684e8e39e782d982f0e
Certificate serial:       0A1158
Authority key identifier: 30:8D:0F:A7:0F:CA:C2:8F:CF:B8:E7:1C:AB:DA:48:3A:E4:22:3E:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d540a2f05624a216a4589684e8e39e782d982f0e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/04e43c37-64fe-4d45-92a7-e814864c7a18/34ac81bf0d44d7cc3e972be0237c5eb96fd7c664.roa
Signing time:             Wed 24 Mar 2021 14:47:29 +0000
ROA not before:           Wed 24 Mar 2021 14:47:29 +0000
ROA not after:            Tue 24 Mar 2026 14:47:29 +0000
asID:                     60458
IP address blocks:        170.150.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659800 (0xa1158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d540a2f05624a216a4589684e8e39e782d982f0e
        Validity
            Not Before: Mar 24 14:47:29 2021 GMT
            Not After : Mar 24 14:47:29 2026 GMT
        Subject: CN=34ac81bf0d44d7cc3e972be0237c5eb96fd7c664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:97:2c:bb:cb:79:de:a1:64:ef:66:7f:cd:47:
                    f7:c2:7f:c3:e4:09:c9:db:d7:fc:8d:d2:97:db:38:
                    2e:ab:b7:b2:3f:85:65:9d:7f:cb:8e:f7:d6:87:8b:
                    0f:e5:48:3a:b8:e6:6d:4f:ee:11:52:1d:7c:61:85:
                    a5:dd:da:fc:66:fe:0c:ba:fa:d7:24:05:6b:d9:ec:
                    34:18:d3:98:7b:93:31:29:58:34:a0:09:cf:4c:5b:
                    a8:2f:4d:e4:19:e7:9a:0e:9f:4d:f3:0b:ae:a2:e9:
                    79:39:3a:c1:b3:4c:47:2c:c1:10:fb:cd:f6:81:9d:
                    55:2e:39:5e:43:59:29:45:8c:4c:3e:a3:ce:20:76:
                    13:6c:0b:7c:f8:dd:04:50:41:3f:e7:d9:03:f5:df:
                    50:06:31:97:bc:97:9b:88:f0:78:0b:9c:de:4c:5a:
                    ec:fd:50:05:70:cd:47:d4:3e:9b:17:13:5f:30:46:
                    10:04:6e:c8:1b:27:f3:3b:c0:b4:dc:25:83:e5:ef:
                    d6:8b:e1:bb:36:f0:a7:37:ec:e2:db:e3:30:62:b3:
                    b9:94:5a:6a:a1:c2:7f:fc:2e:b5:67:f8:cc:73:ec:
                    d1:30:5d:82:d7:50:87:68:16:04:c4:5d:f6:f7:ad:
                    51:54:af:0c:f4:20:fd:4d:b6:0f:37:97:ff:a5:7f:
                    cd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:50:EF:3B:1E:10:71:1E:5C:E6:19:A1:68:E6:22:F4:0D:BB:7B:36
            X509v3 Authority Key Identifier:
                keyid:30:8D:0F:A7:0F:CA:C2:8F:CF:B8:E7:1C:AB:DA:48:3A:E4:22:3E:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d540a2f05624a216a4589684e8e39e782d982f0e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/04e43c37-64fe-4d45-92a7-e814864c7a18/34ac81bf0d44d7cc3e972be0237c5eb96fd7c664.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/04e43c37-64fe-4d45-92a7-e814864c7a18/d540a2f05624a216a4589684e8e39e782d982f0e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:e4:ca:70:bb:4d:80:99:f7:b1:d3:e9:90:c8:bc:15:b2:44:
         e7:2a:d3:a3:93:a9:73:94:55:5d:87:3b:8e:80:78:12:85:48:
         8b:e8:c4:30:ec:99:9b:bd:1f:9a:e9:c4:a3:c8:a2:ef:f8:b1:
         ab:e5:f2:7a:71:14:b2:6b:5d:53:59:ff:2a:6d:6f:b1:a1:a7:
         6e:73:1f:cb:06:fc:8f:34:f8:9a:8a:cc:4f:c7:35:f8:46:0b:
         74:6e:36:9d:16:3b:4c:7a:4e:a0:a0:0b:f6:4c:0a:79:54:2c:
         bb:e2:9f:78:d5:75:9d:65:d9:34:1c:0e:29:d1:b6:8b:77:4f:
         39:d7:ad:6c:a8:d7:46:78:7a:95:97:b4:3b:4a:17:fd:b5:41:
         61:59:36:60:bf:80:5e:0d:47:d0:0d:c9:a4:7f:5f:3b:94:aa:
         28:e4:20:ee:e8:9f:26:18:12:fe:77:c9:a3:7d:d3:ad:cf:2c:
         ee:ce:dc:b8:86:28:86:59:a7:31:35:3d:d5:21:8a:bd:9d:b8:
         a8:4d:b5:6f:52:8c:ce:ef:d6:06:50:ea:dc:82:71:3b:7a:85:
         a3:00:e2:5b:6b:ac:8e:04:48:6d:3f:80:1a:11:d7:b8:2d:4b:
         00:08:a4:e8:68:ec:1d:04:1d:7a:db:f2:d6:ad:d3:69:ed:f9:
         21:ad:d4:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----