Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0e54a05e-e8de-45ad-a23f-9a593a838eaf/b9842d70887aa1246adf445437de4b46c5b3876e.roa
File:                     b9842d70887aa1246adf445437de4b46c5b3876e.roa (raw, json)
Hash identifier:          kzU47Z3cSQPTXT5He85j17+nPy360J8EqltQJF1ZDio=
Subject key identifier:   8B:3A:71:0B:AC:FD:57:93:37:72:25:EE:58:D8:5C:AD:7D:D0:F1:DD
Certificate issuer:       /CN=7047f702e4b88509342b465e0313aa10a406121c
Certificate serial:       03B206
Authority key identifier: FA:A0:86:28:B6:67:0A:83:D6:15:73:60:F2:2A:C8:8B:01:A6:51:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7047f702e4b88509342b465e0313aa10a406121c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0e54a05e-e8de-45ad-a23f-9a593a838eaf/b9842d70887aa1246adf445437de4b46c5b3876e.roa
Signing time:             Wed 24 Mar 2021 14:43:29 +0000
ROA not before:           Wed 24 Mar 2021 14:43:29 +0000
ROA not after:            Tue 24 Mar 2026 14:43:29 +0000
asID:                     28477
IP address blocks:        148.218.0.0/16 maxlen: 16
                          2801:c4:12::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242182 (0x3b206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7047f702e4b88509342b465e0313aa10a406121c
        Validity
            Not Before: Mar 24 14:43:29 2021 GMT
            Not After : Mar 24 14:43:29 2026 GMT
        Subject: CN=b9842d70887aa1246adf445437de4b46c5b3876e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7b:fe:97:8e:0f:cb:ad:31:35:71:55:6f:bc:
                    8c:4e:af:88:74:ea:e9:50:37:78:d1:51:55:3e:4e:
                    c3:cc:06:4b:07:06:35:12:8d:c8:83:ca:00:e3:50:
                    67:e8:68:26:9a:cb:fb:2a:d2:fc:7e:cc:8d:75:ed:
                    dd:d1:a1:54:8e:85:fb:c2:82:0d:bc:ac:f9:2c:8f:
                    3f:e6:4b:cf:31:ef:df:4b:8f:4c:74:8f:c7:e8:6f:
                    a8:2d:e3:4e:cb:e6:8a:ac:53:a7:67:3f:67:83:b7:
                    ef:51:ea:c6:3b:7e:37:a5:37:c4:5f:6f:33:5e:d3:
                    4d:f1:11:9f:32:d2:cd:9d:a6:d1:a9:59:2f:1c:45:
                    42:fe:76:e8:92:83:01:9a:08:1e:fd:bb:ca:a5:e8:
                    d1:b2:12:25:a7:38:7d:a4:ca:e6:dc:d3:dc:20:82:
                    d9:d9:bc:e9:a2:f4:82:35:b8:c9:a5:3a:ce:42:0d:
                    06:9e:af:d4:f2:3c:e1:a4:17:30:0a:a3:1b:62:ba:
                    fc:92:a9:98:ae:15:10:45:26:c5:20:14:b1:6f:5b:
                    06:68:66:20:f7:3d:56:aa:14:76:b8:0b:5a:22:51:
                    d1:6b:da:92:d9:a4:36:7b:2c:61:e8:60:02:c6:6a:
                    0b:28:75:09:11:75:0d:f2:1e:41:5f:3c:8b:8f:b0:
                    a9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3A:71:0B:AC:FD:57:93:37:72:25:EE:58:D8:5C:AD:7D:D0:F1:DD
            X509v3 Authority Key Identifier:
                keyid:FA:A0:86:28:B6:67:0A:83:D6:15:73:60:F2:2A:C8:8B:01:A6:51:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7047f702e4b88509342b465e0313aa10a406121c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0e54a05e-e8de-45ad-a23f-9a593a838eaf/b9842d70887aa1246adf445437de4b46c5b3876e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0e54a05e-e8de-45ad-a23f-9a593a838eaf/7047f702e4b88509342b465e0313aa10a406121c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.218.0.0/16
                IPv6:
                  2801:c4:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:4f:6a:3f:0f:7b:f4:63:64:cd:25:f7:13:df:f1:13:8f:4a:
         8d:24:46:66:c4:52:1e:b1:9f:aa:2c:d9:78:cf:ee:87:53:58:
         bd:66:0f:98:a0:99:2a:65:f3:f5:88:5f:5f:58:17:5a:94:b9:
         93:b7:94:46:2f:32:37:55:29:64:bd:c8:36:a6:45:69:24:57:
         21:4f:9f:ef:82:02:29:a0:4a:83:c4:24:4e:b5:34:56:25:56:
         d7:09:20:e6:bd:3d:f0:9e:59:91:da:0b:b3:d1:34:a8:ad:e8:
         62:76:c2:ce:24:ba:4b:f3:aa:4f:6a:09:ed:24:b8:82:18:6e:
         d3:c6:5a:94:87:eb:3f:2f:4f:44:ce:bf:dc:e9:fd:28:2c:82:
         12:f7:7d:9a:cb:77:82:95:0b:2a:56:c9:fa:b4:b3:bf:3d:81:
         1c:77:b4:dc:a1:51:5c:ad:fa:61:1d:40:a4:03:8a:48:3d:19:
         c5:2d:ee:6b:60:81:34:69:d2:36:6d:69:e6:f3:b8:d7:95:c1:
         64:54:c8:ea:3e:dd:f6:a4:96:d4:5e:94:13:1b:68:68:4e:6d:
         ad:35:38:24:6f:af:e8:ae:de:53:37:b9:02:95:f1:5d:7b:e5:
         93:ab:fe:5e:50:6c:0f:ef:07:99:6e:34:2b:a5:e4:6f:f1:40:
         1c:24:03:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----