Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22a6fa81-dccd-4e1f-afe8-f6287accd26b/d1b0bbff2670ed1e7cc09c7a49710d656d911731.roa
File:                     d1b0bbff2670ed1e7cc09c7a49710d656d911731.roa (raw, json)
Hash identifier:          VTh2mKXzo6jgVnDIMAhoLCDgIYycMyHVp8QHfVbV2mg=
Subject key identifier:   E2:76:F1:61:9B:51:8D:49:49:C1:F1:BE:2F:69:3F:FB:34:FF:24:F9
Certificate issuer:       /CN=a87a10409ce52feb71bbc555b70a9d552dbb8806
Certificate serial:       0524
Authority key identifier: E8:73:AA:E0:F4:90:B0:A6:B6:41:C9:5F:25:9C:DC:45:5C:B9:2B:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a87a10409ce52feb71bbc555b70a9d552dbb8806.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22a6fa81-dccd-4e1f-afe8-f6287accd26b/d1b0bbff2670ed1e7cc09c7a49710d656d911731.roa
Signing time:             Tue 15 Mar 2022 11:43:55 +0000
ROA not before:           Tue 15 Mar 2022 03:00:00 +0000
ROA not after:            Fri 15 Mar 2024 03:00:00 +0000
asID:                     264786
IP address blocks:        168.197.164.0/22 maxlen: 24
                          2803:98c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1316 (0x524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a87a10409ce52feb71bbc555b70a9d552dbb8806
        Validity
            Not Before: Mar 15 03:00:00 2022 GMT
            Not After : Mar 15 03:00:00 2024 GMT
        Subject: CN=d1b0bbff2670ed1e7cc09c7a49710d656d911731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:25:d7:2a:34:0a:08:60:7e:6c:b3:8a:2b:ac:
                    56:92:60:8f:09:3c:bc:34:47:75:61:b2:0a:10:80:
                    89:b9:ca:83:71:0c:fc:81:1e:ef:ad:eb:e5:6b:50:
                    29:67:69:1b:6a:09:0a:e9:53:21:e6:24:b8:ca:83:
                    cb:a1:0f:47:21:cd:b1:35:65:be:ef:c2:51:b9:9f:
                    e5:b5:96:44:66:37:e6:79:be:49:fa:e1:a0:28:80:
                    42:b3:ad:d8:16:93:c0:fc:8a:6e:31:f7:d5:0c:c7:
                    c2:18:d1:1c:b0:7d:ab:2f:08:83:39:6c:7f:3c:84:
                    ed:54:e4:00:0c:35:87:87:20:f0:66:5f:78:94:07:
                    88:b1:6c:e7:d1:ea:90:3e:46:ca:99:14:df:bc:71:
                    f6:87:60:23:a6:ae:da:6a:64:81:8d:d5:9d:76:48:
                    09:a0:de:4c:54:68:f7:70:ff:35:bc:ae:89:88:96:
                    b9:42:a5:ce:67:9c:a3:95:98:dd:7e:5f:6e:05:85:
                    14:08:71:14:b0:26:db:98:6d:d4:c8:c2:55:38:ee:
                    bf:da:c8:e9:82:0a:07:45:77:ac:ca:bd:e2:1e:5b:
                    f4:2f:6c:8b:51:5e:77:3b:40:a1:da:db:e3:63:72:
                    fc:9c:01:78:ca:0f:6a:86:42:19:6c:4d:71:d0:1d:
                    ff:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:76:F1:61:9B:51:8D:49:49:C1:F1:BE:2F:69:3F:FB:34:FF:24:F9
            X509v3 Authority Key Identifier:
                keyid:E8:73:AA:E0:F4:90:B0:A6:B6:41:C9:5F:25:9C:DC:45:5C:B9:2B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a87a10409ce52feb71bbc555b70a9d552dbb8806.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22a6fa81-dccd-4e1f-afe8-f6287accd26b/d1b0bbff2670ed1e7cc09c7a49710d656d911731.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22a6fa81-dccd-4e1f-afe8-f6287accd26b/a87a10409ce52feb71bbc555b70a9d552dbb8806.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.164.0/22
                IPv6:
                  2803:98c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:7f:7f:69:63:28:03:91:95:9d:63:06:bd:7c:1e:48:da:9c:
         9f:ae:13:53:16:1f:b3:92:25:19:6a:60:9a:34:e8:4e:4d:ca:
         3b:78:0a:34:b7:f1:41:c8:7b:e9:b6:ef:fe:f3:42:f3:36:65:
         48:88:67:7e:81:10:f3:55:9a:a7:53:ae:36:63:3b:fb:ba:ec:
         0d:06:62:87:74:46:55:f5:3a:34:2f:5f:1f:21:42:6a:b7:f6:
         db:b2:66:f8:56:d7:9a:f1:b3:48:40:d0:0b:f8:c6:00:92:ba:
         f4:99:5c:ad:1f:44:ac:05:00:35:1b:05:df:61:a0:b6:a7:e5:
         03:51:b0:23:1a:11:75:ac:7b:a0:80:24:39:29:e8:60:db:e6:
         2b:89:6c:5b:61:1d:b3:d0:05:07:23:c1:c5:e3:bf:6b:94:b2:
         86:54:5b:fe:3b:fe:34:93:07:a1:dd:92:f4:4f:51:d8:94:0a:
         21:45:24:a9:77:86:6a:f7:73:d7:02:f2:9b:8e:11:45:cf:18:
         db:13:da:ba:17:1e:69:dc:1a:49:6b:80:7d:47:8d:5c:a4:75:
         81:b7:22:6b:a2:fb:1c:e3:05:9f:cd:c1:5f:bd:94:f1:dd:0e:
         35:26:a0:65:aa:17:f3:41:ec:38:eb:3c:27:ea:ff:7b:55:28:
         86:89:47:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----