Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/256e10e8-84e3-4296-a58d-7507a34031dc/b38ec88dfe47e806d7dafa3120129094dda731a1.roa
File:                     b38ec88dfe47e806d7dafa3120129094dda731a1.roa (raw, json)
Hash identifier:          7FU6OBf+JXxsvgGOp5acRoxeByJMtMkboZVBz1v/eoY=
Subject key identifier:   08:12:3E:40:72:EA:3D:4D:F4:5B:17:C2:DD:6C:23:C2:30:B6:0D:3E
Certificate issuer:       /CN=286e94bbacb959d0de2a27539e8124836c0ca6f4
Certificate serial:       01486F
Authority key identifier: E3:FA:FE:2B:C5:2D:D3:95:6B:1B:C3:E4:3E:78:33:25:95:56:C7:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/286e94bbacb959d0de2a27539e8124836c0ca6f4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/256e10e8-84e3-4296-a58d-7507a34031dc/b38ec88dfe47e806d7dafa3120129094dda731a1.roa
Signing time:             Wed 24 Mar 2021 14:30:09 +0000
ROA not before:           Wed 24 Mar 2021 14:30:09 +0000
ROA not after:            Tue 24 Mar 2026 14:30:09 +0000
asID:                     264736
IP address blocks:        170.233.92.0/22 maxlen: 24
                          2803:d740::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84079 (0x1486f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=286e94bbacb959d0de2a27539e8124836c0ca6f4
        Validity
            Not Before: Mar 24 14:30:09 2021 GMT
            Not After : Mar 24 14:30:09 2026 GMT
        Subject: CN=b38ec88dfe47e806d7dafa3120129094dda731a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:17:7a:20:1b:a7:0c:1e:e0:27:85:b9:5f:
                    d6:e1:c5:33:1d:e4:91:ac:47:a1:2d:ac:b5:11:9b:
                    72:69:48:29:16:1f:50:ec:33:a8:05:7f:f9:91:96:
                    dd:e8:41:0f:96:c9:2c:06:c5:c5:68:fc:b9:4f:18:
                    76:43:20:46:c5:d4:a0:1d:be:dc:43:cd:f7:f6:10:
                    7c:63:e1:a9:18:6c:f1:8f:05:de:f3:d2:8d:c2:6e:
                    00:4d:67:cb:6e:36:c4:00:6f:5d:53:d2:4d:b2:a5:
                    60:4a:c6:ea:54:40:2b:7c:3f:51:34:c5:48:fb:2a:
                    77:b0:8f:9e:fd:54:6c:49:d4:1b:88:8d:5a:4b:59:
                    ca:e1:33:70:c3:1a:1d:71:fe:91:30:49:f5:0c:79:
                    73:76:bf:3b:a8:e9:fd:93:d4:40:c9:dc:83:23:e4:
                    28:72:fb:1a:cf:0f:2e:c4:4f:3d:cc:8c:a4:37:02:
                    d8:1d:bb:db:79:ea:c5:de:54:9a:16:87:b2:53:ab:
                    49:07:32:4c:d3:0d:f1:2a:88:57:88:f9:97:27:44:
                    95:26:36:14:8a:a7:b2:ea:d5:e1:11:b4:eb:24:e5:
                    f3:9a:b8:fb:2e:1d:ec:cb:73:ac:ec:2d:26:08:a1:
                    84:2c:e7:70:77:e5:d9:45:dd:93:94:51:4b:c4:cf:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:12:3E:40:72:EA:3D:4D:F4:5B:17:C2:DD:6C:23:C2:30:B6:0D:3E
            X509v3 Authority Key Identifier:
                keyid:E3:FA:FE:2B:C5:2D:D3:95:6B:1B:C3:E4:3E:78:33:25:95:56:C7:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/286e94bbacb959d0de2a27539e8124836c0ca6f4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/256e10e8-84e3-4296-a58d-7507a34031dc/b38ec88dfe47e806d7dafa3120129094dda731a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/256e10e8-84e3-4296-a58d-7507a34031dc/286e94bbacb959d0de2a27539e8124836c0ca6f4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.92.0/22
                IPv6:
                  2803:d740::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:ba:ed:31:ae:97:8f:0a:4a:50:3d:0a:9a:ef:e6:54:ee:c4:
         20:b2:3f:56:0a:e0:96:8e:91:23:2f:af:12:f1:96:24:da:90:
         38:4d:15:55:49:8b:c7:ff:70:72:37:49:78:6c:cb:43:59:bf:
         70:77:c0:f1:8e:15:8e:60:3f:27:40:bd:47:78:d1:17:04:35:
         42:3b:80:8c:05:5b:6c:3c:f3:96:5b:81:27:d1:f9:02:76:20:
         a0:c3:d2:ae:eb:da:85:96:eb:fa:56:ca:bf:40:b9:5e:c7:9e:
         1b:89:df:80:69:3a:4a:d4:8e:a2:52:f1:63:17:7b:28:d6:d0:
         7e:24:2a:26:93:7d:04:d3:e9:e6:5e:32:50:02:56:c5:46:d5:
         26:b8:c4:16:aa:e7:38:aa:da:c4:db:e2:39:db:5c:ee:5b:d5:
         71:fd:e3:59:11:24:fd:30:ca:33:3d:6f:e9:e8:81:08:b6:3c:
         26:72:05:c2:ad:65:66:6a:8c:2d:a9:1d:44:5a:3a:0c:3c:32:
         d2:6d:d5:4a:08:3d:51:d7:9d:e2:b3:51:d0:ba:79:d9:6c:62:
         99:9e:76:de:43:9a:57:8e:7a:ec:5b:9a:e5:af:d3:d2:b3:58:
         4e:00:93:dc:47:6b:b7:d1:d4:c3:16:33:bb:bf:43:06:7b:c8:
         91:e7:b7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----