Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1efd4a7a-12a6-4a5d-8651-1a75607299a0/8fe088e8e27d2a83b150de338d5e4823f06305dc.roa
File:                     8fe088e8e27d2a83b150de338d5e4823f06305dc.roa (raw, json)
Hash identifier:          CchHvJQXMjJlBHTYhuOG4J8H+6c2m+Q6JU6SP/8j0z0=
Subject key identifier:   54:07:D5:46:52:09:85:4B:39:37:C5:DB:97:A7:D2:53:49:30:35:F2
Certificate issuer:       /CN=eb68f6320e26be559e91eff6ec319fec41f44266
Certificate serial:       0D389D
Authority key identifier: B0:1F:0B:20:65:0C:4C:88:DE:3E:01:7E:7F:16:82:46:F4:72:2B:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb68f6320e26be559e91eff6ec319fec41f44266.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1efd4a7a-12a6-4a5d-8651-1a75607299a0/8fe088e8e27d2a83b150de338d5e4823f06305dc.roa
Signing time:             Wed 24 Mar 2021 14:40:08 +0000
ROA not before:           Wed 24 Mar 2021 14:40:08 +0000
ROA not after:            Tue 24 Mar 2026 14:40:08 +0000
asID:                     265711
IP address blocks:        192.140.92.0/22 maxlen: 24
                          2803:c5c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866461 (0xd389d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb68f6320e26be559e91eff6ec319fec41f44266
        Validity
            Not Before: Mar 24 14:40:08 2021 GMT
            Not After : Mar 24 14:40:08 2026 GMT
        Subject: CN=8fe088e8e27d2a83b150de338d5e4823f06305dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:10:d5:3e:03:f4:7e:76:c0:73:30:e6:66:
                    40:67:58:b9:bb:6e:41:66:d2:60:a9:ec:07:75:21:
                    b3:1c:97:d0:6c:f5:71:e4:ce:42:27:5f:df:15:92:
                    cf:0b:88:ac:e6:18:b4:a2:13:ba:52:cd:9d:91:d5:
                    cd:d3:a4:52:79:8f:34:d9:48:de:bd:ba:2b:cf:71:
                    c6:f5:b7:6c:02:48:ac:01:b7:c3:3b:aa:67:82:c3:
                    61:5a:43:21:4e:02:24:66:db:d9:f7:00:8c:1d:cb:
                    ec:4d:12:aa:bf:df:c2:fd:8c:fd:b6:18:ea:69:10:
                    2c:ad:6a:e3:6e:08:42:18:e1:31:90:4c:42:ec:76:
                    81:05:89:d2:54:79:fb:57:97:7c:b2:17:ed:a3:64:
                    e5:ff:9a:50:82:7b:f6:f7:1c:99:d1:2d:ad:d1:e3:
                    38:5a:ed:2c:9e:18:87:ac:fd:bd:72:8b:e3:56:73:
                    c7:65:3b:75:07:37:48:cb:0b:10:9f:14:6e:d5:50:
                    8f:9a:a4:77:3f:79:cd:72:e8:62:9c:96:85:11:64:
                    3f:57:14:27:c0:ee:6c:03:10:1e:6c:b8:ff:1e:9a:
                    4f:5f:e7:e4:a3:b3:97:bf:0e:55:6b:c0:7f:85:4c:
                    9d:d1:4b:9b:7e:fe:47:4e:b9:2f:05:9c:58:e3:e7:
                    d0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:07:D5:46:52:09:85:4B:39:37:C5:DB:97:A7:D2:53:49:30:35:F2
            X509v3 Authority Key Identifier:
                keyid:B0:1F:0B:20:65:0C:4C:88:DE:3E:01:7E:7F:16:82:46:F4:72:2B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb68f6320e26be559e91eff6ec319fec41f44266.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1efd4a7a-12a6-4a5d-8651-1a75607299a0/8fe088e8e27d2a83b150de338d5e4823f06305dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1efd4a7a-12a6-4a5d-8651-1a75607299a0/eb68f6320e26be559e91eff6ec319fec41f44266.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.92.0/22
                IPv6:
                  2803:c5c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:57:16:57:78:95:04:3c:f6:f8:8f:d0:a0:44:11:13:92:6f:
         58:d8:29:36:3f:65:6a:8a:59:27:2c:fb:e1:50:a2:8e:e4:42:
         66:e6:8c:07:0f:d6:ef:7f:2d:ff:ee:18:03:49:f9:ee:c4:67:
         b0:e7:e2:5e:08:38:8e:19:38:90:aa:50:2f:79:53:48:8a:72:
         6e:ed:66:7d:48:d7:b3:ec:2f:1b:ef:e7:52:f1:b5:d7:13:3d:
         f4:93:bd:bf:e6:f4:8b:bf:2f:3a:29:95:88:a7:6e:79:71:9c:
         35:7b:56:57:7c:43:38:cf:c6:de:b7:40:fe:41:2c:56:ec:c3:
         7b:fd:ee:d7:a4:bb:b4:08:56:ab:29:f3:07:ec:83:2e:46:36:
         ff:d7:12:f7:7d:0e:c1:18:33:5a:16:ac:a7:b8:01:c0:50:cc:
         50:5b:6b:b4:9a:4e:39:cb:6a:f7:6c:a9:c8:fb:3b:5f:e4:4e:
         75:d4:d7:bc:73:ea:ec:7d:37:3b:6c:11:88:8a:6e:7d:c1:23:
         99:0a:ca:c1:b4:8b:cf:f7:b4:05:36:99:f7:6b:8e:e8:e7:02:
         e9:3a:89:6d:90:11:36:c4:0c:eb:5c:96:0d:b7:78:1e:b8:c8:
         ab:df:d1:4e:fd:ce:bf:77:ac:3e:04:2a:99:40:c0:40:d9:4f:
         0e:76:1e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----