Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1eb9e189-dc75-4b3d-b5b0-09c17089af00/5b2f4c356cae7fde077676d0d4867e690fa35156.roa
File:                     5b2f4c356cae7fde077676d0d4867e690fa35156.roa (raw, json)
Hash identifier:          E2eXg5xATqVgQdPGbLpkSq8Iz+8RmwKDRchKcp//VGM=
Subject key identifier:   6D:3E:1B:D5:15:A0:52:30:FC:30:88:00:5A:86:9A:38:A4:D6:90:71
Certificate issuer:       /CN=f85a010f5e6f009917c8e2019f5f208cfeb5f75e
Certificate serial:       0D8586
Authority key identifier: BF:78:75:62:F9:EB:8F:C9:8B:B6:0E:D4:74:95:67:5F:4E:E2:72:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85a010f5e6f009917c8e2019f5f208cfeb5f75e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1eb9e189-dc75-4b3d-b5b0-09c17089af00/5b2f4c356cae7fde077676d0d4867e690fa35156.roa
Signing time:             Wed 24 Mar 2021 14:32:11 +0000
ROA not before:           Wed 24 Mar 2021 14:32:11 +0000
ROA not after:            Tue 24 Mar 2026 14:32:11 +0000
asID:                     264797
IP address blocks:        206.221.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886150 (0xd8586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85a010f5e6f009917c8e2019f5f208cfeb5f75e
        Validity
            Not Before: Mar 24 14:32:11 2021 GMT
            Not After : Mar 24 14:32:11 2026 GMT
        Subject: CN=5b2f4c356cae7fde077676d0d4867e690fa35156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e3:08:08:54:51:23:a3:48:a5:65:23:5c:5f:
                    d8:33:cd:70:b5:b0:a2:35:2b:1d:0c:f7:45:e6:01:
                    e8:9b:43:d8:97:2d:20:e3:ae:97:3b:f6:80:67:10:
                    7c:48:67:85:13:03:42:ef:af:97:10:69:fb:53:62:
                    2a:47:dc:a2:c9:1b:d1:a6:5b:8d:a0:ca:67:04:8e:
                    9c:d4:e7:d2:ab:0a:4a:6b:b1:16:e8:b7:6a:cd:e2:
                    cc:e6:39:73:c4:64:a3:83:ec:58:79:b2:0c:52:78:
                    9f:2a:73:1e:e9:1e:99:92:04:4b:54:10:74:14:df:
                    1a:60:1a:89:99:0b:1c:d8:33:08:89:00:d7:b7:81:
                    0c:00:8e:6c:be:60:c2:8c:0c:6a:1c:24:fb:50:e8:
                    6b:e6:4a:c2:1e:53:8a:fd:21:bf:55:16:3c:d0:e3:
                    cf:73:25:33:23:45:f9:eb:b1:20:f5:2e:1d:b2:ce:
                    de:70:66:ab:34:b0:98:79:a4:ac:5c:71:14:c8:43:
                    98:e6:d0:3f:72:1f:c5:4b:db:f6:9c:a0:a6:44:82:
                    2c:e9:13:6a:bc:ac:d8:67:b3:38:67:8d:30:20:b6:
                    2f:a9:c2:48:44:d6:e0:e3:44:e0:d3:d0:14:ee:1e:
                    ad:f1:2a:d7:5a:34:19:cb:c2:d1:5b:93:e6:ae:a0:
                    67:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3E:1B:D5:15:A0:52:30:FC:30:88:00:5A:86:9A:38:A4:D6:90:71
            X509v3 Authority Key Identifier:
                keyid:BF:78:75:62:F9:EB:8F:C9:8B:B6:0E:D4:74:95:67:5F:4E:E2:72:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f85a010f5e6f009917c8e2019f5f208cfeb5f75e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1eb9e189-dc75-4b3d-b5b0-09c17089af00/5b2f4c356cae7fde077676d0d4867e690fa35156.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1eb9e189-dc75-4b3d-b5b0-09c17089af00/f85a010f5e6f009917c8e2019f5f208cfeb5f75e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.221.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3a:4c:81:1e:0c:5d:80:85:1d:71:9b:72:1c:39:65:ba:65:00:
         47:d6:20:39:c3:60:72:20:73:53:a2:36:4d:be:3a:02:57:39:
         33:6d:a5:7d:59:1a:93:bd:d4:92:53:4d:6b:1e:0d:ad:e4:2a:
         58:84:ee:9e:c8:88:64:c9:59:9f:c6:97:d6:b3:37:10:49:b5:
         65:77:c0:5b:53:22:17:93:3b:a6:15:91:ea:2c:ad:62:1b:d0:
         72:7a:82:c8:f3:71:3e:67:03:b0:dc:6b:58:13:cc:68:db:8c:
         af:2d:f4:a9:21:29:03:c9:5d:a1:61:96:29:f0:bf:64:99:5a:
         0b:99:f1:77:dd:df:2e:83:de:bd:27:04:b5:cf:b4:85:15:a8:
         9d:ea:77:54:d8:5b:6b:a0:ed:c4:80:83:f0:41:53:67:d5:42:
         f3:14:2e:76:0c:e0:8f:69:37:71:1b:aa:82:43:25:68:bb:ca:
         1d:e8:50:3d:6a:08:d1:2e:bd:32:16:bb:39:7e:24:0d:a9:41:
         e3:f2:8c:f1:f6:e7:ca:86:2b:c9:7f:f4:52:c9:58:8e:10:e6:
         4e:bf:05:40:b4:e7:e3:fc:3e:70:ee:5e:79:90:7c:72:ed:4b:
         18:68:4f:b5:30:ef:73:be:9e:60:15:de:bb:14:09:93:e8:64:
         71:56:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----