Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/2b6ad5d6fc7b31a72e5e9a6e9a324e4985c49c07.roa
File:                     2b6ad5d6fc7b31a72e5e9a6e9a324e4985c49c07.roa (raw, json)
Hash identifier:          0RDAevv/PtptApjorPoVvF1/k8faZiOb4Dfll7ZUcfI=
Subject key identifier:   4D:A3:32:1D:55:E2:61:EC:44:63:65:1A:83:D6:A0:7D:32:46:05:59
Certificate issuer:       /CN=9d5f7256141d4f6ae5e5a02600389ee713736db9
Certificate serial:       0264
Authority key identifier: 1F:B5:82:5A:DC:1F:5F:84:8A:35:B2:21:8A:D9:EC:94:5C:8E:B6:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d5f7256141d4f6ae5e5a02600389ee713736db9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/2b6ad5d6fc7b31a72e5e9a6e9a324e4985c49c07.roa
Signing time:             Thu 11 Nov 2021 15:43:49 +0000
ROA not before:           Thu 11 Nov 2021 03:00:00 +0000
ROA not after:            Sat 11 Nov 2023 03:00:00 +0000
asID:                     28007
IP address blocks:        131.108.4.0/22 maxlen: 24
                          2803:bd80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5f7256141d4f6ae5e5a02600389ee713736db9
        Validity
            Not Before: Nov 11 03:00:00 2021 GMT
            Not After : Nov 11 03:00:00 2023 GMT
        Subject: CN=2b6ad5d6fc7b31a72e5e9a6e9a324e4985c49c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:57:3e:60:bb:56:d7:5c:10:1f:4c:b2:40:61:
                    2a:65:2c:b2:80:ac:d5:0c:71:f5:b8:72:c0:92:d8:
                    72:88:f0:25:b0:12:b7:49:e5:4b:5e:31:2a:8d:f3:
                    d4:3e:47:19:13:cd:17:e1:6c:e7:06:15:17:37:f5:
                    94:ac:90:f4:44:1a:b2:92:9c:a9:ab:6b:bf:81:86:
                    d4:89:0d:d7:c8:de:3d:cb:5a:d1:4f:30:24:07:31:
                    e8:53:78:4b:dc:fa:2b:73:aa:2a:4d:d1:57:4f:a0:
                    bb:47:26:1a:cf:59:8a:39:6e:d1:9b:a1:94:91:a9:
                    b7:fd:07:a1:0a:4f:ef:ea:1a:9e:64:5a:cb:13:37:
                    53:00:b2:92:ba:f2:e2:7a:d9:bb:f2:a4:3d:8c:06:
                    1f:48:8e:3a:b0:59:08:a7:2c:4c:72:e8:c0:36:10:
                    3d:95:e3:47:3b:29:6a:1f:39:d6:2e:f5:4d:4c:f7:
                    99:bd:16:e3:da:bb:6e:4d:ba:64:2b:d4:fa:b7:00:
                    57:33:37:00:d7:49:20:92:1a:b0:e7:a7:29:80:dd:
                    f4:4e:f4:7c:ff:c8:f5:6e:cd:20:06:e2:0c:db:e7:
                    ee:5f:06:ed:eb:23:e1:98:61:db:e3:eb:49:56:68:
                    27:70:42:ca:01:80:dc:29:a0:f4:69:4a:e8:fa:21:
                    c5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A3:32:1D:55:E2:61:EC:44:63:65:1A:83:D6:A0:7D:32:46:05:59
            X509v3 Authority Key Identifier:
                keyid:1F:B5:82:5A:DC:1F:5F:84:8A:35:B2:21:8A:D9:EC:94:5C:8E:B6:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d5f7256141d4f6ae5e5a02600389ee713736db9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/2b6ad5d6fc7b31a72e5e9a6e9a324e4985c49c07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/134ab107-0981-4aa7-b1eb-c934f5fcf10e/9d5f7256141d4f6ae5e5a02600389ee713736db9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.4.0/22
                IPv6:
                  2803:bd80::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:90:bf:7f:58:be:f7:2a:72:7b:a6:70:8c:bb:3c:38:8e:f4:
         e7:d8:ee:5f:b9:1c:e3:af:d5:08:ef:fa:c5:6a:94:f7:b3:f2:
         e5:d7:71:22:1a:1f:86:a3:33:67:4c:63:3b:b4:17:e2:77:95:
         a3:d5:27:34:b2:e1:c0:33:6c:34:0d:38:17:11:24:ec:e9:5b:
         df:35:1f:fd:1f:d9:3c:ca:2e:53:c7:4c:05:3a:95:04:be:20:
         cd:1d:76:b1:4c:67:df:39:63:99:ac:10:ff:5b:29:2f:b9:30:
         75:fe:90:dd:62:4e:59:80:4f:ad:c3:3e:35:ee:85:56:5b:0e:
         74:92:9a:82:81:80:8e:25:e3:ee:c9:27:ef:32:28:93:5d:8f:
         9b:35:9f:24:aa:10:85:c4:11:aa:3b:18:7a:02:82:2a:7b:0d:
         92:60:92:e9:f4:e1:e0:76:ca:85:68:8d:b5:e1:85:ee:33:a9:
         12:2e:66:7e:82:a6:71:cd:fb:81:e3:92:2e:1f:d2:96:d9:68:
         92:0b:e9:a0:b8:e2:22:cc:ab:55:59:b4:a3:cc:5e:db:09:98:
         15:b7:33:6c:62:94:93:3e:f0:9b:19:9c:4e:75:6b:28:af:39:
         1a:66:f3:df:3f:9f:b1:4f:2d:ae:fd:36:a7:64:0b:7b:fe:b6:
         b3:6d:3a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----