Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/d8ed3db6a02e180f37efa83fc40421d597302462.roa
File:                     d8ed3db6a02e180f37efa83fc40421d597302462.roa (raw, json)
Hash identifier:          1MOA8ufIwVuFa+CLcydxQu5vEYUeLigEWTfOt7ZBTAI=
Subject key identifier:   CE:F9:39:51:ED:FD:1A:BD:9A:A5:94:2C:54:48:CB:7D:92:DB:2F:85
Certificate issuer:       /CN=9d0eefbeed1a04984bf835792198e2b00880f6fa
Certificate serial:       0C1138
Authority key identifier: 1B:01:3A:65:56:04:09:45:78:68:41:59:4A:C4:1D:78:42:4D:7C:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/d8ed3db6a02e180f37efa83fc40421d597302462.roa
Signing time:             Wed 01 Jun 2022 20:02:28 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     270072
IP address blocks:        131.0.132.0/22 maxlen: 24
                          2803:13e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790840 (0xc1138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d0eefbeed1a04984bf835792198e2b00880f6fa
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=d8ed3db6a02e180f37efa83fc40421d597302462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:94:76:3b:bd:9e:53:04:27:06:e9:1c:89:3d:
                    a4:c9:4d:ec:f2:dc:cc:60:0c:72:c6:8d:2d:95:fe:
                    e7:3a:5c:55:f4:a8:7c:94:95:cf:26:e8:bd:bd:0d:
                    ba:42:9d:f1:2c:71:14:bf:45:6b:7a:56:26:c5:a0:
                    a5:a6:c2:3e:76:53:70:af:c8:e5:65:d4:91:b1:f3:
                    7d:b7:5b:c6:2f:81:63:ac:51:fc:88:e8:cf:5f:bc:
                    c7:1c:f1:a9:1a:bb:e6:fd:11:eb:53:4f:d7:1c:98:
                    37:22:3c:ed:46:fc:ba:4f:e0:0c:b1:4a:49:8d:db:
                    09:23:90:cd:39:ab:d3:68:40:a5:22:11:f5:67:2c:
                    1e:d5:42:08:6c:c6:9a:18:f4:31:72:38:ad:3b:d2:
                    9c:a3:73:59:36:38:72:8f:db:b4:ce:66:be:72:b8:
                    5f:25:11:c3:40:9a:f0:77:b1:10:c7:ce:2f:21:85:
                    ce:02:44:4b:68:65:10:1d:7a:6c:83:54:5a:a9:04:
                    ef:20:3a:c2:e8:59:6e:32:f4:77:35:3d:f6:42:8d:
                    53:67:75:de:bf:f0:ec:e1:ee:da:5c:d0:53:6e:c4:
                    52:08:a1:e2:77:32:b4:ff:e2:f1:b4:04:0d:b9:a8:
                    34:dd:3d:87:57:89:23:28:15:69:58:7a:f6:11:ce:
                    58:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F9:39:51:ED:FD:1A:BD:9A:A5:94:2C:54:48:CB:7D:92:DB:2F:85
            X509v3 Authority Key Identifier:
                keyid:1B:01:3A:65:56:04:09:45:78:68:41:59:4A:C4:1D:78:42:4D:7C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d0eefbeed1a04984bf835792198e2b00880f6fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/d8ed3db6a02e180f37efa83fc40421d597302462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1c53acc4-1d81-4721-b0ff-0924a0c8e1e5/9d0eefbeed1a04984bf835792198e2b00880f6fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.132.0/22
                IPv6:
                  2803:13e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:4c:70:cb:0d:7a:7c:2b:d6:1d:d1:69:c4:ef:95:e9:2b:6b:
         c4:77:c8:ad:fc:80:c0:c1:0c:fc:2a:66:b9:0a:3f:c6:19:55:
         9f:5c:a6:80:20:c8:5b:48:15:5d:ff:83:66:31:de:38:74:cc:
         70:a7:2a:89:ce:33:57:8f:70:67:b0:95:87:31:52:0a:f4:f0:
         bf:e3:d5:b4:81:05:51:4d:84:05:aa:a7:1a:d3:bf:36:5c:28:
         85:83:15:68:fa:35:e8:fa:db:fc:c3:bc:80:d4:4a:cc:95:a2:
         99:f8:bf:ff:1c:45:32:2b:33:30:be:4a:f2:28:50:02:fd:71:
         89:f1:39:94:84:89:ec:df:14:7d:ac:eb:88:2a:1c:79:08:ce:
         ff:5f:3a:82:6b:4c:a2:b6:1f:ca:86:79:7a:38:d3:dd:cd:68:
         58:af:5d:29:0a:ef:14:84:44:2a:35:22:fd:4c:cd:23:29:ec:
         62:b3:b9:ec:88:9f:e8:3e:c2:cd:72:1b:db:da:2e:64:08:48:
         fb:52:01:cf:1d:b8:12:f8:f4:70:79:b1:71:47:da:95:55:fe:
         87:03:44:37:c5:72:74:78:13:18:61:39:20:f6:4b:ea:82:bc:
         97:8a:78:00:6f:30:29:c3:2b:38:3e:dc:fd:a6:78:7b:6b:bc:
         5f:29:1c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----