Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/f25f3a1906e952343484760e7f45922fcd578f2e.roa
File:                     f25f3a1906e952343484760e7f45922fcd578f2e.roa (raw, json)
Hash identifier:          uhlGlvbxI63vvR/PLxBQ3jnuV1CoFuprnByRCshmmg8=
Subject key identifier:   B6:B1:CB:92:28:EA:FD:11:E4:9C:B0:7F:6A:8D:8A:93:E3:EC:BF:D5
Certificate issuer:       /CN=150f32775997390a892546bcb71f77c91bf1ccc6
Certificate serial:       070313
Authority key identifier: BB:95:00:1D:BD:4C:43:1D:D3:24:CB:3C:3D:EB:E1:A6:42:E1:F5:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/150f32775997390a892546bcb71f77c91bf1ccc6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/f25f3a1906e952343484760e7f45922fcd578f2e.roa
Signing time:             Wed 22 Sep 2021 13:13:38 +0000
ROA not before:           Wed 22 Sep 2021 03:00:00 +0000
ROA not after:            Fri 22 Sep 2023 03:00:00 +0000
asID:                     269968
IP address blocks:        177.37.40.0/22 maxlen: 22
                          2803:d6e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459539 (0x70313)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=150f32775997390a892546bcb71f77c91bf1ccc6
        Validity
            Not Before: Sep 22 03:00:00 2021 GMT
            Not After : Sep 22 03:00:00 2023 GMT
        Subject: CN=f25f3a1906e952343484760e7f45922fcd578f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:44:1b:92:e9:75:cd:f5:50:8e:f4:fd:d0:61:
                    8a:d6:7b:cf:14:e4:77:ce:85:a8:a9:b7:4c:c2:25:
                    4f:b8:ec:0d:e8:9d:89:d1:46:ed:10:c5:2e:08:cf:
                    e2:b7:99:99:da:38:b6:a7:1c:72:fb:dd:ba:c6:65:
                    f2:d0:81:c6:01:5d:89:8d:18:f8:79:3d:35:e7:51:
                    c4:5d:d3:1f:c6:23:67:5a:f0:0f:bf:2b:49:43:f0:
                    5d:02:ee:23:aa:78:69:a6:6c:fb:01:5d:58:82:75:
                    a3:17:80:4b:ea:f6:12:6e:b0:67:a7:82:35:86:ca:
                    9c:6c:20:b3:ed:b0:f5:c1:62:f2:96:9d:94:3c:01:
                    b6:7d:0a:f4:9f:8f:fe:d7:70:81:00:5d:6f:68:cf:
                    02:cc:d5:16:b3:c0:65:cb:09:7c:1c:eb:b6:f5:86:
                    da:cb:af:0d:10:55:5c:fc:52:dc:23:4c:15:a6:3d:
                    35:97:95:09:ce:24:b6:a7:e5:34:98:9d:47:5e:f0:
                    cb:d2:32:a5:ad:60:f0:d6:36:e4:07:ec:ee:3d:5b:
                    1a:25:da:a8:97:ef:01:ac:e3:3f:d0:61:1b:f9:3c:
                    bd:9f:d4:e1:e7:27:28:85:f7:01:ae:6c:b5:0d:5e:
                    05:c9:13:99:fc:10:3d:0f:c4:35:8a:c8:7e:21:ab:
                    04:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B1:CB:92:28:EA:FD:11:E4:9C:B0:7F:6A:8D:8A:93:E3:EC:BF:D5
            X509v3 Authority Key Identifier:
                keyid:BB:95:00:1D:BD:4C:43:1D:D3:24:CB:3C:3D:EB:E1:A6:42:E1:F5:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/150f32775997390a892546bcb71f77c91bf1ccc6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/f25f3a1906e952343484760e7f45922fcd578f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1aa7fd2e-9428-4116-8896-d637b905f9a1/150f32775997390a892546bcb71f77c91bf1ccc6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.40.0/22
                IPv6:
                  2803:d6e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:b4:4b:00:c8:6f:8e:1e:ea:ef:32:de:d1:ef:02:1f:39:56:
         cf:58:4e:1c:3d:96:9c:fb:2f:5d:52:0b:77:ee:7c:2e:e0:86:
         bd:00:9d:a3:ea:46:c6:49:30:7d:89:1e:dc:95:0a:66:ac:bf:
         0d:7b:02:95:ca:66:0a:7c:5b:6b:16:b0:e2:e2:0f:6f:87:cc:
         19:4f:ae:fe:5e:9d:ec:b6:1e:08:16:26:a0:8c:86:a1:86:30:
         63:f5:19:56:4d:8c:c7:1f:7c:af:04:b7:50:ee:32:e0:98:54:
         a6:29:d3:37:06:d4:d7:68:96:13:e6:13:4d:41:da:6f:83:e6:
         a2:a1:12:97:0c:38:db:a8:0e:24:47:b2:35:e2:b2:11:ab:8b:
         de:5d:c9:4b:ac:37:5f:93:74:3b:0a:6d:c1:41:7d:c4:5d:55:
         ae:61:5f:8f:2f:c0:8f:8a:96:f1:ff:0f:17:d4:f8:88:45:1b:
         57:91:39:28:76:7c:18:37:06:b1:9f:35:2f:cb:8c:f3:46:19:
         64:bb:96:33:d2:75:f6:e4:46:aa:4c:bb:8a:38:f8:22:4f:74:
         0a:5c:83:b6:72:36:04:dd:b8:24:4a:b8:0f:94:f2:af:c6:8d:
         d1:6f:3a:fa:7c:1a:b5:18:08:e0:48:a3:91:db:f5:00:37:36:
         31:a0:e6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----