Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/705622bc86172cab50e648ba7a6b85faefdb5dae.roa
File:                     705622bc86172cab50e648ba7a6b85faefdb5dae.roa (raw, json)
Hash identifier:          gsJM0MdYh3naVcgu4h4nn+M1OEr2oOz+NrO0mBootpg=
Subject key identifier:   F1:FB:27:50:49:B9:B1:14:5D:DD:6B:41:4F:98:91:1D:9F:2F:5F:4E
Certificate issuer:       /CN=ef50a919c38d29bb33866e24d668a0b386609323
Certificate serial:       0EA91B
Authority key identifier: A2:7E:F9:12:D9:A3:A0:AE:2C:D2:E1:59:04:73:E0:80:98:E6:0D:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef50a919c38d29bb33866e24d668a0b386609323.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/705622bc86172cab50e648ba7a6b85faefdb5dae.roa
Signing time:             Wed 24 Mar 2021 14:47:57 +0000
ROA not before:           Wed 24 Mar 2021 14:47:57 +0000
ROA not after:            Tue 24 Mar 2026 14:47:57 +0000
asID:                     263703
IP address blocks:        143.255.84.0/22 maxlen: 24
                          190.97.224.0/19 maxlen: 24
                          2803:7800::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960795 (0xea91b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef50a919c38d29bb33866e24d668a0b386609323
        Validity
            Not Before: Mar 24 14:47:57 2021 GMT
            Not After : Mar 24 14:47:57 2026 GMT
        Subject: CN=705622bc86172cab50e648ba7a6b85faefdb5dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6a:7a:d5:34:85:97:02:67:a0:f2:4d:5f:8e:
                    ca:76:55:1c:95:2b:b8:13:83:7f:5f:07:55:6c:13:
                    09:b0:2f:0b:78:33:e9:37:b2:ba:1e:07:3d:28:2f:
                    ad:16:61:82:2a:b9:74:c1:a6:de:a7:d6:b4:a4:eb:
                    ed:20:58:92:dd:7c:fd:38:a2:2c:9e:46:a4:80:ac:
                    ca:af:8b:bf:4d:22:9a:4d:e6:8a:b4:0e:dc:09:30:
                    15:a0:de:80:5e:d9:d4:22:86:f8:30:1e:02:89:51:
                    03:f9:c2:b7:98:a8:06:f7:e9:b2:02:87:72:ea:ac:
                    59:9a:f3:4d:f9:13:28:3d:13:20:80:25:b8:a4:05:
                    5c:96:18:e6:42:d7:2e:03:c6:10:cd:83:b0:e8:81:
                    ce:43:4a:b6:3d:a2:24:01:28:9d:6e:48:ef:e1:e1:
                    21:33:01:df:23:1b:d4:00:b5:89:f1:dc:6c:15:da:
                    bf:a8:f7:12:c7:3f:f9:45:a9:5a:66:c7:7e:64:2c:
                    78:a3:91:e9:37:83:a9:d8:1f:05:5f:33:4c:32:03:
                    0f:03:ad:95:78:38:fa:98:92:94:d4:65:11:9a:c8:
                    b3:28:94:df:e9:20:da:64:83:0a:27:0b:b5:34:a5:
                    27:0e:ab:bb:10:d0:5a:41:5c:7a:49:dc:52:37:51:
                    02:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FB:27:50:49:B9:B1:14:5D:DD:6B:41:4F:98:91:1D:9F:2F:5F:4E
            X509v3 Authority Key Identifier:
                keyid:A2:7E:F9:12:D9:A3:A0:AE:2C:D2:E1:59:04:73:E0:80:98:E6:0D:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef50a919c38d29bb33866e24d668a0b386609323.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/705622bc86172cab50e648ba7a6b85faefdb5dae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ed24b57-5637-4d04-a1a2-b55f1b7d07a7/ef50a919c38d29bb33866e24d668a0b386609323.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.84.0/22
                  190.97.224.0/19
                IPv6:
                  2803:7800::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:1d:d8:08:52:fe:58:da:11:36:dc:ec:63:c5:0f:cd:2e:7a:
         7e:7c:31:5d:24:71:16:4f:20:70:ec:d2:41:eb:2b:df:d4:c6:
         26:6c:bc:b0:f5:4f:dd:6e:22:5b:ea:14:32:e8:ab:fe:b5:47:
         b0:47:a0:0d:ce:9b:37:77:e1:b1:2d:1a:aa:99:0f:84:e4:f6:
         c5:09:6e:ef:0e:11:9e:55:a4:19:55:6f:a3:83:8e:2f:b7:44:
         63:8f:17:40:8b:2c:0a:2e:0c:26:dc:cb:e1:3e:d9:9d:79:28:
         58:7e:dd:60:5c:e5:9c:78:45:70:76:3a:97:6c:35:e6:bc:63:
         02:a2:22:96:9b:70:3b:d0:dc:13:60:f3:e6:b8:2a:f3:e6:b4:
         4a:e1:92:5b:35:38:b0:c0:47:dd:d5:29:4c:d9:96:7c:f3:66:
         7e:82:bb:4e:19:52:05:c1:4c:d4:65:b6:e4:ac:29:af:e2:6d:
         0d:34:6d:fa:c9:bf:99:3b:d2:4d:5d:00:bc:e1:9c:d5:4a:8a:
         09:73:c4:e5:d8:09:16:07:1a:8f:1f:e8:bf:75:5e:22:de:f2:
         7c:5d:ba:ae:67:1a:92:79:d0:35:05:78:15:2d:86:34:94:89:
         f4:2b:20:4d:85:73:c2:58:44:ea:2e:78:af:ab:e5:ca:35:5e:
         fd:46:90:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----