Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1d60ca15-c98a-4a6d-a659-b9b7518da1d4/d73d20a9f38afd6e572d01c9a65c016e944439e6.roa
File:                     d73d20a9f38afd6e572d01c9a65c016e944439e6.roa (raw, json)
Hash identifier:          bzAPVj9ac8o8AeZRePx5uNrCYvJ6Am6tm4Zju6Hy6DQ=
Subject key identifier:   49:71:BB:17:EF:99:B3:40:58:A4:6C:EC:65:73:97:0A:C4:BB:04:E0
Certificate issuer:       /CN=2e6344666672adea74e1ef5f707cf25027a74f0b
Certificate serial:       0C5483
Authority key identifier: 2B:C6:67:BC:43:18:2F:9D:D1:E2:04:CE:E9:05:D0:30:BF:74:6A:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e6344666672adea74e1ef5f707cf25027a74f0b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1d60ca15-c98a-4a6d-a659-b9b7518da1d4/d73d20a9f38afd6e572d01c9a65c016e944439e6.roa
Signing time:             Wed 24 Mar 2021 14:29:33 +0000
ROA not before:           Wed 24 Mar 2021 14:29:33 +0000
ROA not after:            Tue 24 Mar 2026 14:29:33 +0000
asID:                     263699
IP address blocks:        131.255.60.0/22 maxlen: 24
                          138.117.200.0/22 maxlen: 24
                          167.249.196.0/22 maxlen: 24
                          168.194.52.0/22 maxlen: 24
                          2803:5b80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 808067 (0xc5483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e6344666672adea74e1ef5f707cf25027a74f0b
        Validity
            Not Before: Mar 24 14:29:33 2021 GMT
            Not After : Mar 24 14:29:33 2026 GMT
        Subject: CN=d73d20a9f38afd6e572d01c9a65c016e944439e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ad:9f:04:9b:84:4f:73:6b:06:94:5d:69:1f:
                    6f:71:aa:12:3f:f1:5c:0c:a9:f1:09:83:98:2d:f6:
                    45:69:a3:6e:fc:41:0e:e5:8d:16:8e:61:43:6c:9d:
                    c0:17:c0:33:32:30:d2:f6:aa:32:20:7f:ce:03:6d:
                    ee:a2:1a:84:46:1b:9f:e0:65:31:f1:0a:d2:b7:a0:
                    5a:7d:66:f6:32:a2:9c:b5:ba:37:83:da:52:47:7b:
                    9d:b8:2d:0e:08:66:6a:30:26:80:8d:c5:c1:63:f6:
                    ca:ff:ba:34:d5:bc:a5:5b:8f:63:69:21:f5:9a:66:
                    2d:e1:e1:ae:00:99:75:0d:3c:ae:28:cd:ac:8e:36:
                    d0:7f:30:b2:be:f9:34:aa:ae:5f:83:e5:17:cf:cf:
                    6e:cd:5c:37:f7:46:33:4f:65:56:e6:c5:a7:8b:a9:
                    fa:2d:fd:45:d4:1f:8e:2e:9c:1b:90:25:af:ce:c6:
                    8a:6a:b1:3c:e4:81:8c:4c:c6:6d:bf:18:4d:0e:eb:
                    94:32:25:11:2c:3d:bc:39:bf:e5:2e:f7:0c:79:9f:
                    11:32:d9:16:83:ac:56:58:04:e6:86:93:26:fb:92:
                    ad:b0:b0:33:5c:74:48:70:b0:81:60:8e:dc:41:56:
                    28:8d:f6:b9:86:28:b7:35:0b:e0:ef:9d:b1:8d:80:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:71:BB:17:EF:99:B3:40:58:A4:6C:EC:65:73:97:0A:C4:BB:04:E0
            X509v3 Authority Key Identifier:
                keyid:2B:C6:67:BC:43:18:2F:9D:D1:E2:04:CE:E9:05:D0:30:BF:74:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e6344666672adea74e1ef5f707cf25027a74f0b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1d60ca15-c98a-4a6d-a659-b9b7518da1d4/d73d20a9f38afd6e572d01c9a65c016e944439e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1d60ca15-c98a-4a6d-a659-b9b7518da1d4/2e6344666672adea74e1ef5f707cf25027a74f0b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.60.0/22
                  138.117.200.0/22
                  167.249.196.0/22
                  168.194.52.0/22
                IPv6:
                  2803:5b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:06:0f:23:d9:1f:60:c3:39:0c:bf:89:76:a4:22:2e:97:5c:
         e6:f7:b3:2f:1d:cd:13:d5:ea:4d:c2:67:83:2c:e5:58:1b:f7:
         ef:a9:ae:96:90:46:d0:41:a9:e6:c5:84:4a:04:ac:c3:82:96:
         3e:d5:10:c2:2a:e9:ea:86:83:81:75:52:b3:bb:ab:83:30:f0:
         fc:bf:fe:25:95:84:23:76:dd:4a:ad:68:12:03:d4:ef:6f:cf:
         c3:4d:fe:09:50:db:b5:6a:03:21:e2:28:ef:88:59:ae:61:d2:
         00:e6:0a:61:91:e1:44:bd:c8:85:db:4b:69:dd:92:40:f0:e9:
         31:94:eb:28:38:ff:5c:3c:cb:bf:d4:91:ba:9f:7a:92:29:19:
         84:4f:0e:ea:6d:3e:87:a4:85:2e:a4:26:0c:2e:9d:dc:a4:e6:
         aa:7c:75:dd:d9:f4:e1:8f:6f:70:29:58:d2:cd:f7:24:86:fe:
         89:17:a2:c9:d6:b8:8f:b8:4e:95:bd:21:fa:0f:a0:07:47:bf:
         fc:2b:81:af:aa:19:4c:08:8d:e8:91:6f:3f:c7:e1:24:c8:ac:
         61:2e:cf:f0:66:c9:2a:7a:e5:f7:20:4a:09:71:f4:db:7b:61:
         bc:95:5c:c7:84:c1:29:da:10:ef:4c:b1:7a:06:dc:4c:e5:26:
         9b:f2:f7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----