Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/146f05adeed68dc9def8a015bc2c7876ce7f6d42.roa
File:                     146f05adeed68dc9def8a015bc2c7876ce7f6d42.roa (raw, json)
Hash identifier:          rTXOgFnvRrmrRc6oMTvX7vajkallFpyAe2cCxzGwAt8=
Subject key identifier:   FF:67:29:9B:44:3B:83:98:66:EE:16:B8:5D:A7:8C:B7:DE:29:3B:F3
Certificate issuer:       /CN=e44b350d3b38d42846292aa361e5c48e7d3371c5
Certificate serial:       07D7CA
Authority key identifier: 4C:72:F4:65:BC:6A:96:0B:3A:52:A6:D1:89:D0:87:E3:A1:63:53:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e44b350d3b38d42846292aa361e5c48e7d3371c5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/146f05adeed68dc9def8a015bc2c7876ce7f6d42.roa
Signing time:             Wed 24 Mar 2021 14:45:06 +0000
ROA not before:           Wed 24 Mar 2021 14:45:06 +0000
ROA not after:            Tue 24 Mar 2026 14:45:06 +0000
asID:                     42473
IP address blocks:        131.100.0.0/22 maxlen: 24
                          2803:ad80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513994 (0x7d7ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e44b350d3b38d42846292aa361e5c48e7d3371c5
        Validity
            Not Before: Mar 24 14:45:06 2021 GMT
            Not After : Mar 24 14:45:06 2026 GMT
        Subject: CN=146f05adeed68dc9def8a015bc2c7876ce7f6d42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fa:5e:21:45:7f:38:16:68:c4:82:f4:37:2d:
                    8a:95:3b:3b:31:bf:84:84:46:cc:ff:84:49:12:65:
                    86:6f:74:5f:9d:e3:e8:b6:5a:e9:29:0e:a8:8b:6e:
                    5f:44:29:8a:1d:1c:fd:1b:64:ef:6a:d5:f4:25:13:
                    cb:5b:cd:c7:cb:db:bc:cf:b0:f1:52:89:b6:a5:93:
                    e8:55:7d:ab:7c:4c:d1:cb:3d:df:6a:0b:6e:be:3c:
                    cd:52:27:30:9f:ba:ec:fb:1d:5b:6a:0e:78:a0:fc:
                    11:c7:fa:b8:f8:ab:81:0b:d5:3b:df:7d:9c:21:21:
                    3f:05:9c:fc:94:7d:01:61:0f:12:d6:69:e3:34:86:
                    8d:06:27:a6:2d:6a:ec:e8:8f:c6:d6:cc:cf:77:12:
                    04:4b:66:d8:ae:bd:57:f5:2f:1d:3d:d5:d8:01:d5:
                    59:a9:75:b0:f6:88:a5:c4:42:5d:49:e4:b6:cf:03:
                    8f:88:f1:97:32:73:8a:6b:15:a5:6b:a7:37:92:a0:
                    eb:d0:6d:4e:bc:af:18:e3:82:f2:aa:17:2c:e9:22:
                    d9:ed:a9:ee:14:96:ed:03:82:2a:7f:70:62:72:4c:
                    bc:65:f3:d7:5c:e6:53:99:09:a4:98:1c:18:2c:32:
                    fc:94:c9:bf:25:e9:8e:b6:dc:91:f8:84:a6:0e:2d:
                    b7:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:67:29:9B:44:3B:83:98:66:EE:16:B8:5D:A7:8C:B7:DE:29:3B:F3
            X509v3 Authority Key Identifier:
                keyid:4C:72:F4:65:BC:6A:96:0B:3A:52:A6:D1:89:D0:87:E3:A1:63:53:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e44b350d3b38d42846292aa361e5c48e7d3371c5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/146f05adeed68dc9def8a015bc2c7876ce7f6d42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/13a58d33-d00f-45bd-b08e-84eb48dbaaac/e44b350d3b38d42846292aa361e5c48e7d3371c5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.0.0/22
                IPv6:
                  2803:ad80::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:ff:d5:5d:2e:da:f6:c7:ff:9f:5a:84:00:af:36:c5:54:69:
         66:1c:28:ad:9a:6a:b5:dd:6f:10:ed:de:2a:a0:5b:fd:2a:23:
         0f:ad:16:81:0e:2d:3c:53:a9:74:56:fb:a3:b1:07:56:5f:88:
         95:36:b6:93:2d:d4:10:e4:69:f2:d0:4b:de:45:b1:3e:83:d4:
         4f:c2:68:7d:bd:04:37:de:71:6a:28:76:f7:76:a7:f2:cb:07:
         80:24:f5:53:96:ea:e8:a1:17:b9:ce:f1:c4:de:59:6d:17:ce:
         42:50:72:c2:51:a4:70:16:86:24:8c:20:7a:90:a0:0d:29:8c:
         d1:ed:ff:2b:7e:c4:83:ac:de:b3:7b:36:0d:df:36:bc:dd:a4:
         df:04:3c:14:a9:46:19:2d:64:10:f5:54:3f:81:00:de:98:ac:
         0d:0b:5c:aa:c4:94:d6:80:fd:25:aa:5f:54:00:5b:e4:40:d9:
         f0:55:75:9f:6d:67:53:9f:31:59:dc:3c:56:67:c4:88:51:c8:
         e5:59:6b:e7:44:82:b9:bf:e3:f2:4e:00:a5:fa:68:7e:bd:49:
         c5:35:fc:61:a2:b7:80:9b:8d:db:21:b9:23:e3:43:ec:6c:08:
         8b:65:f5:49:de:6e:61:c1:94:26:67:6d:8f:e2:9d:ab:bf:d3:
         3c:a3:39:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----