Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c1c5add-ad6d-484f-a9d5-f8301497d9a6/28115de2440c86fd79fa4e392914572bd928cf60.roa
File:                     28115de2440c86fd79fa4e392914572bd928cf60.roa (raw, json)
Hash identifier:          6eHVxEXr5Yu2gz+9oWdISseFT/tqLHUlGKB7rtDgR8s=
Subject key identifier:   C8:89:78:34:40:42:95:09:DD:1D:BB:39:5F:6F:62:5B:C4:A8:23:0D
Certificate issuer:       /CN=6c6ec3af9ee3ad66f567bde5f1002a96a62667c3
Certificate serial:       03D5
Authority key identifier: D0:B6:1D:66:FE:8D:1A:1E:FA:2C:6D:C5:57:56:7B:DC:D9:38:4B:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c6ec3af9ee3ad66f567bde5f1002a96a62667c3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c1c5add-ad6d-484f-a9d5-f8301497d9a6/28115de2440c86fd79fa4e392914572bd928cf60.roa
Signing time:             Tue 14 Jun 2022 18:48:08 +0000
ROA not before:           Tue 14 Jun 2022 03:00:00 +0000
ROA not after:            Fri 14 Jun 2024 03:00:00 +0000
asID:                     267765
IP address blocks:        181.114.160.0/19 maxlen: 24
                          190.3.184.0/21 maxlen: 24
                          2803:5e00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 981 (0x3d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c6ec3af9ee3ad66f567bde5f1002a96a62667c3
        Validity
            Not Before: Jun 14 03:00:00 2022 GMT
            Not After : Jun 14 03:00:00 2024 GMT
        Subject: CN=28115de2440c86fd79fa4e392914572bd928cf60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:06:cd:fe:49:52:28:47:98:c4:e7:e3:1d:
                    0b:aa:af:bb:6a:20:a1:85:ca:76:99:cf:82:04:08:
                    2c:e3:93:a9:63:54:f4:a4:bc:7e:9b:80:43:2f:44:
                    a0:59:f1:32:73:b0:b6:70:89:d6:5a:05:9e:a6:29:
                    64:08:31:cf:f3:df:cb:55:da:08:dc:78:50:b4:23:
                    9f:8d:2c:ee:4a:53:81:8b:6f:6e:9c:bc:3b:d2:be:
                    68:f8:e1:7e:c2:d2:06:25:07:32:13:86:21:18:94:
                    18:27:3a:93:c6:e5:a9:e7:69:3d:b1:ab:bb:34:bd:
                    02:7b:b3:a4:ce:de:f2:1b:26:5b:28:5b:e2:4f:c5:
                    b6:a6:50:14:58:f6:5f:ad:fa:4d:66:c7:6a:9f:30:
                    74:03:d6:82:a5:a8:31:46:b4:e9:6c:1a:37:89:ef:
                    86:ce:39:b1:c2:30:75:ef:af:5d:63:30:fc:4a:99:
                    0d:7f:45:f5:a6:36:6c:65:46:e9:6c:17:3b:31:3e:
                    8d:b1:ad:53:c6:50:ca:3f:a0:fb:02:e8:3c:fa:60:
                    de:e3:5a:1a:6e:e1:59:f0:79:05:78:a1:5c:b4:c1:
                    45:4b:ca:f5:8a:b9:32:09:ef:8a:8f:23:f0:4b:a8:
                    36:0e:d2:4a:02:8e:03:10:ba:cd:08:56:89:ae:9c:
                    cf:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:89:78:34:40:42:95:09:DD:1D:BB:39:5F:6F:62:5B:C4:A8:23:0D
            X509v3 Authority Key Identifier:
                keyid:D0:B6:1D:66:FE:8D:1A:1E:FA:2C:6D:C5:57:56:7B:DC:D9:38:4B:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6c6ec3af9ee3ad66f567bde5f1002a96a62667c3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c1c5add-ad6d-484f-a9d5-f8301497d9a6/28115de2440c86fd79fa4e392914572bd928cf60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c1c5add-ad6d-484f-a9d5-f8301497d9a6/6c6ec3af9ee3ad66f567bde5f1002a96a62667c3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.160.0/19
                  190.3.184.0/21
                IPv6:
                  2803:5e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:a7:1c:d1:d9:c3:ad:77:7c:e9:f0:17:39:f3:3d:07:66:42:
         6d:7a:e2:68:ff:26:2e:43:d2:ca:0c:43:1a:6d:c6:8d:41:43:
         bb:69:c7:21:8f:63:34:fc:fb:f1:ef:c9:89:c9:2d:64:4b:31:
         03:9a:93:89:25:c9:0e:7f:9e:64:7d:83:c1:e7:3f:15:fd:4a:
         15:28:19:88:7a:7e:d2:5c:23:2a:de:0f:3c:29:7e:0e:9a:60:
         22:e7:62:86:e7:27:e1:da:5d:73:cc:be:1c:90:9b:02:a3:2c:
         62:bb:5e:d6:91:e3:c3:ec:3f:3b:07:5d:80:de:df:0f:49:e7:
         69:74:db:dd:c2:66:f5:2f:a7:a7:a3:99:75:17:1f:f4:54:b9:
         3d:63:c6:dc:6d:28:5a:ec:d2:28:62:ec:bf:0d:50:d1:80:01:
         63:2c:d6:b7:25:a3:aa:fe:66:27:df:11:f0:8d:19:19:20:1a:
         dd:a8:46:bd:14:ad:f8:c4:42:0e:81:8a:59:49:1e:6f:a5:5c:
         30:49:14:6b:09:74:72:a5:9a:b4:fc:13:e3:9b:7b:dc:f1:f8:
         74:d2:67:b1:32:a2:fe:e0:08:b0:5d:b9:27:32:c9:a8:67:06:
         c3:e9:b6:79:2b:d4:8d:64:da:2d:d2:69:49:c4:28:68:44:de:
         6e:19:44:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----