Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/abd52afb901dadc9795567473a7a4c7a3ad85209.roa
File:                     abd52afb901dadc9795567473a7a4c7a3ad85209.roa (raw, json)
Hash identifier:          oev0p+5XxZun66IjC6QsDHJwEKiVSK53rHdyxj3z2A8=
Subject key identifier:   6E:10:CC:C1:08:24:9A:01:E6:DF:0A:31:13:43:62:F9:E6:E4:9B:8D
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       0FE85C
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/abd52afb901dadc9795567473a7a4c7a3ad85209.roa
Signing time:             Wed 20 Oct 2021 15:23:27 +0000
ROA not before:           Wed 20 Oct 2021 03:00:00 +0000
ROA not after:            Fri 20 Oct 2023 03:00:00 +0000
asID:                     211113
IP address blocks:        191.96.108.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042524 (0xfe85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Oct 20 03:00:00 2021 GMT
            Not After : Oct 20 03:00:00 2023 GMT
        Subject: CN=abd52afb901dadc9795567473a7a4c7a3ad85209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a1:54:63:ee:6d:22:c7:2b:c4:f8:5a:f2:c6:
                    09:91:96:84:a3:00:24:de:88:67:26:20:75:1c:3c:
                    9a:9f:66:25:59:02:0d:0f:eb:a7:f7:b8:93:ec:0c:
                    5d:a6:13:3a:e1:50:c0:1d:fd:a4:51:e0:ec:6b:6b:
                    65:72:52:c1:80:3c:df:19:41:61:74:a5:07:98:92:
                    00:a4:16:5a:a1:d9:aa:6a:d0:58:f0:4d:27:90:db:
                    d3:08:1e:1a:07:6f:e6:4c:34:1d:81:d7:cf:88:b1:
                    7c:d9:b7:54:1a:63:95:f1:80:ad:43:d1:b8:37:af:
                    1c:f8:ea:24:79:e6:0c:15:8b:a8:6f:8f:1a:59:b0:
                    17:91:06:d5:e5:e5:95:e1:9f:1c:7a:95:3a:43:a0:
                    ac:cd:0a:a9:03:11:8c:da:28:9c:ec:3b:bc:a3:37:
                    87:1f:4d:47:15:65:1c:4a:91:39:62:d0:7d:17:18:
                    12:e3:22:90:74:94:7b:23:31:d7:67:9e:68:62:76:
                    30:28:d6:a9:73:7d:dd:80:90:4e:37:fd:a0:d9:e6:
                    13:e0:48:c7:32:6a:f0:79:72:c5:1a:9e:dd:d0:07:
                    70:6d:27:5c:6c:bf:49:7d:61:0f:49:87:91:c7:79:
                    f0:78:5c:bd:5a:f6:f2:3c:2a:91:d6:b2:da:e2:ab:
                    2b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:10:CC:C1:08:24:9A:01:E6:DF:0A:31:13:43:62:F9:E6:E4:9B:8D
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/abd52afb901dadc9795567473a7a4c7a3ad85209.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.96.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:de:7a:c4:01:ca:91:f4:ad:69:fa:da:41:a4:76:8c:b2:f0:
         39:df:39:8c:0e:7b:36:1c:e6:6e:73:2a:68:3a:96:6d:b9:ac:
         5d:57:58:b1:98:ec:c6:c0:1d:40:48:39:67:58:7b:be:c6:77:
         ac:c7:96:6e:11:ab:5b:27:54:bc:ee:a9:e6:4c:22:b1:87:e3:
         97:fd:69:f7:a9:60:03:1f:7b:54:1e:6a:82:56:b4:64:10:a0:
         f3:b2:c2:f0:68:77:68:ea:40:a4:29:61:b4:4a:54:b3:a7:49:
         a8:81:d1:f6:19:6a:f3:a4:d3:f4:d9:37:7b:5e:14:bb:6c:d0:
         5a:f9:35:87:06:09:52:dd:e7:b8:cf:20:cd:29:ae:8d:7f:26:
         a9:77:9d:3e:53:7e:7f:70:8b:fe:6f:25:d4:b7:4f:e3:36:da:
         c2:18:51:c8:85:77:a1:ad:ea:ea:ce:69:7c:99:99:18:96:87:
         cb:04:3e:95:0d:92:97:00:c9:df:52:81:3b:b7:06:80:83:b9:
         02:26:04:85:b3:59:e8:4b:df:b9:51:de:b8:f8:65:5a:ae:a0:
         a3:49:76:c5:d3:9e:01:fa:14:dd:72:b3:56:36:3e:71:4e:b1:
         6f:9d:95:3b:09:25:24:48:04:54:e9:0a:78:67:5a:7f:94:89:
         69:16:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----