Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/22292587a7a3510bc11e71d03829eb53869ce7c8.roa
File:                     22292587a7a3510bc11e71d03829eb53869ce7c8.roa (raw, json)
Hash identifier:          SxXDi14jqyHB7nepD0ccRtATtKyWAHE1uSR7ILFQ8Vw=
Subject key identifier:   BA:58:57:29:95:3E:23:DE:38:BB:CA:D2:FB:34:73:34:0C:0D:72:E7
Certificate issuer:       /CN=9335683e4b18488db2c2495f3084999892751bfe
Certificate serial:       0F1842
Authority key identifier: F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/22292587a7a3510bc11e71d03829eb53869ce7c8.roa
Signing time:             Thu 26 Aug 2021 13:03:33 +0000
ROA not before:           Thu 26 Aug 2021 03:00:00 +0000
ROA not after:            Sat 26 Aug 2023 03:00:00 +0000
asID:                     263793
IP address blocks:        167.249.53.0/24 maxlen: 24
                          2803:840::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989250 (0xf1842)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9335683e4b18488db2c2495f3084999892751bfe
        Validity
            Not Before: Aug 26 03:00:00 2021 GMT
            Not After : Aug 26 03:00:00 2023 GMT
        Subject: CN=22292587a7a3510bc11e71d03829eb53869ce7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:87:81:94:65:7e:d3:d6:87:bf:b0:4f:fe:28:
                    9e:e9:23:ff:e5:0f:5d:66:9d:ad:43:b3:d0:3b:9c:
                    8b:34:4f:4f:65:bb:e1:34:84:08:e9:b6:17:03:dd:
                    bd:df:f6:b7:0e:ad:94:5b:ab:45:2b:b4:b3:f8:36:
                    2b:08:45:c0:b4:27:15:48:45:18:ea:fa:d7:1b:3a:
                    57:69:64:b0:ea:32:6b:3b:79:6a:a8:a7:87:0a:39:
                    95:d5:7d:4e:64:4e:52:bc:99:eb:74:ae:ef:cd:d5:
                    e6:74:89:ab:82:9d:79:c6:52:b8:8b:9c:ff:81:58:
                    8a:ee:ba:b8:22:ce:3a:fc:a8:1e:9c:2b:bb:32:55:
                    b5:60:fe:11:17:5e:fd:10:29:b7:75:aa:de:4f:9d:
                    eb:ef:79:1d:30:68:d2:c5:33:ae:b3:fe:bf:0f:a5:
                    3a:26:ab:5e:03:1c:0b:98:c0:36:75:f8:65:34:fc:
                    d5:43:71:b5:ae:18:5d:3b:88:7f:e9:ec:d7:9e:83:
                    17:e8:5b:ef:45:0f:ac:68:01:b0:7c:b3:cb:d2:84:
                    c9:b6:23:14:fc:c9:f5:ce:29:a3:a8:f6:3b:88:40:
                    23:85:6e:08:b8:8d:83:28:a2:13:5c:d6:c8:95:22:
                    5a:52:9b:fb:c1:c0:9e:5b:13:fb:a5:6e:d7:91:e0:
                    69:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:58:57:29:95:3E:23:DE:38:BB:CA:D2:FB:34:73:34:0C:0D:72:E7
            X509v3 Authority Key Identifier:
                keyid:F6:70:84:93:7A:11:D9:A6:92:CE:36:2D:A7:8A:AE:3A:9A:4F:12:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9335683e4b18488db2c2495f3084999892751bfe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/22292587a7a3510bc11e71d03829eb53869ce7c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f39b4c3-9753-4ff1-928b-a871b7199d9a/9335683e4b18488db2c2495f3084999892751bfe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.53.0/24
                IPv6:
                  2803:840::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:9f:33:f6:8b:99:26:e5:80:d4:4d:0b:a4:39:ea:2e:35:fa:
         c3:91:f7:cd:74:95:d2:fc:a1:38:a1:d6:0a:9d:71:9a:75:18:
         c2:09:07:a2:08:17:73:66:26:9e:6f:af:9c:e6:30:84:18:9b:
         bb:2a:b4:dc:87:b4:39:19:04:00:19:5a:ce:43:92:96:bf:b8:
         2f:4c:30:01:7f:de:14:a5:d8:fd:06:ce:1e:50:32:7a:6a:03:
         10:93:01:b9:2b:93:0f:4b:0e:ac:63:d2:7a:19:d6:a6:07:72:
         ee:4f:39:85:64:cd:bc:63:e1:20:1f:ed:50:f0:8b:72:38:ab:
         f4:f6:16:d8:a3:56:3a:bf:6f:02:9f:fe:d3:ea:4c:61:65:0a:
         72:64:3a:98:a4:03:28:e5:5d:a8:07:13:c4:96:59:ea:f7:7b:
         d0:41:87:7e:56:86:f0:7c:ed:e3:a3:e6:59:ae:a5:ea:04:5e:
         8d:26:6f:71:62:81:d6:94:ea:4f:5e:58:7e:b1:49:19:88:1c:
         33:3e:42:61:5c:b9:bd:e2:96:f7:6d:36:ea:73:63:fd:8c:d6:
         c7:f5:f6:52:f2:df:3e:73:82:8e:4b:b4:de:a4:97:b1:11:51:
         79:a2:44:b1:6f:92:46:5a:9f:c5:1b:6e:83:c8:d4:95:57:25:
         1f:86:32:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----