Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/143c84bb-d75b-475a-a55a-a3984daf0e41/b515410d7dad5e75b9fca474e5abaa12b8470eae.roa
File:                     b515410d7dad5e75b9fca474e5abaa12b8470eae.roa (raw, json)
Hash identifier:          ujB3aRD/eC+DUyE3Ty7NFNfV56v0tzJT0cQpJTKkQ9M=
Subject key identifier:   6A:33:28:80:61:22:8F:66:1D:48:40:FE:A1:3E:E8:51:6B:D5:87:6B
Certificate issuer:       /CN=de6eebe43f541e18ccd7422937906e6c71168d41
Certificate serial:       0597
Authority key identifier: DA:FB:93:8E:21:0F:B3:E9:9A:50:1B:81:AB:5F:CB:07:02:D4:66:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de6eebe43f541e18ccd7422937906e6c71168d41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/143c84bb-d75b-475a-a55a-a3984daf0e41/b515410d7dad5e75b9fca474e5abaa12b8470eae.roa
Signing time:             Mon 04 Oct 2021 22:44:16 +0000
ROA not before:           Mon 04 Oct 2021 03:00:00 +0000
ROA not after:            Wed 04 Oct 2023 03:00:00 +0000
asID:                     265753
IP address blocks:        131.196.52.0/22 maxlen: 22
                          2803:ebc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6eebe43f541e18ccd7422937906e6c71168d41
        Validity
            Not Before: Oct  4 03:00:00 2021 GMT
            Not After : Oct  4 03:00:00 2023 GMT
        Subject: CN=b515410d7dad5e75b9fca474e5abaa12b8470eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b4:15:10:1a:a8:e4:36:40:1e:cb:f8:a1:03:
                    d7:4d:1f:f5:d9:76:fc:29:e1:1a:83:a1:72:04:1f:
                    23:46:74:47:db:2f:52:a3:34:af:78:af:72:ca:b1:
                    0c:f6:ed:fd:72:28:ef:61:67:fb:e3:28:e0:ad:07:
                    e7:2f:49:41:0d:15:cf:e8:94:0d:d8:6e:74:53:7a:
                    db:ea:ec:c3:89:02:a6:ff:70:89:bc:ef:59:27:be:
                    99:b8:a8:42:e0:59:cc:43:a2:d8:27:be:0c:f5:3e:
                    3a:06:6f:3d:5f:7a:4c:e3:1c:ae:4c:8a:7d:78:35:
                    fb:6f:d1:0a:3f:1a:e7:80:15:6c:b1:88:9b:ec:92:
                    69:c5:c7:45:e7:ff:ea:12:6e:f4:81:51:98:68:35:
                    f4:bc:5b:04:03:65:f6:01:3e:02:bb:03:7f:81:b3:
                    05:00:a9:59:14:ca:8e:e6:f6:6b:21:05:72:39:f4:
                    85:88:ba:49:82:93:c7:7e:4f:bd:8a:c0:2b:2d:46:
                    ff:5a:74:d7:dc:de:38:d1:36:9f:45:bf:15:32:da:
                    f2:6d:32:be:7a:09:c2:c2:b3:63:0e:b3:9a:1d:6e:
                    11:9e:9d:2f:e6:1c:18:9d:0c:8b:e9:e3:fc:25:af:
                    94:b9:5b:f8:73:df:b5:ba:d7:5f:d4:93:98:78:45:
                    90:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:33:28:80:61:22:8F:66:1D:48:40:FE:A1:3E:E8:51:6B:D5:87:6B
            X509v3 Authority Key Identifier:
                keyid:DA:FB:93:8E:21:0F:B3:E9:9A:50:1B:81:AB:5F:CB:07:02:D4:66:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de6eebe43f541e18ccd7422937906e6c71168d41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/143c84bb-d75b-475a-a55a-a3984daf0e41/b515410d7dad5e75b9fca474e5abaa12b8470eae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/143c84bb-d75b-475a-a55a-a3984daf0e41/de6eebe43f541e18ccd7422937906e6c71168d41.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.52.0/22
                IPv6:
                  2803:ebc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:e2:e3:28:b6:5d:93:53:f5:43:1a:2f:10:2c:b3:2a:6e:dd:
         ce:fd:8f:ca:f3:9a:ee:fc:47:04:66:1c:7b:06:cd:a6:95:37:
         53:99:25:e5:63:bd:a4:cd:fe:3f:74:77:01:c7:88:9d:60:a9:
         3a:b8:fc:03:05:9f:f5:b2:6e:89:7f:5e:9b:27:80:04:9f:70:
         7b:65:a7:71:c3:ce:0b:aa:c4:9e:d6:4d:c9:2d:79:1b:c7:38:
         2d:a8:6a:dd:93:f9:9f:fb:b7:0b:99:d0:25:4d:75:3a:83:cc:
         eb:97:43:9e:7a:52:d9:fe:e5:62:f9:c7:1d:a9:56:c3:84:31:
         49:f9:8d:56:b8:27:04:19:89:c0:f0:f4:f8:ae:23:b4:54:69:
         b2:48:03:7a:2f:eb:7f:c2:7f:65:38:28:35:5a:35:a6:35:1d:
         e3:9d:fd:d9:1d:f9:d6:ce:65:a6:e7:88:5c:91:4f:27:9d:24:
         77:ef:d4:3c:8c:35:4b:4f:a8:6a:38:58:3d:b9:2a:42:67:40:
         de:0d:8d:50:c5:b9:b0:d4:b8:68:10:99:8e:5b:16:44:bc:71:
         32:74:7c:5f:9c:26:74:86:51:14:85:ae:36:3f:5b:5f:77:51:
         89:17:1b:40:aa:8a:89:e2:be:ce:46:65:38:04:21:24:fd:47:
         4f:db:62:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----