Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28f0e3f6-654c-4ced-95b0-f9c013181813/10a4e451f141aba1bc1f5e9c50fb074f354f85f9.roa
File:                     10a4e451f141aba1bc1f5e9c50fb074f354f85f9.roa (raw, json)
Hash identifier:          2FDvy13bEidoBDg9J4zcbR2irRvKCNdzN5/e59rx1s8=
Subject key identifier:   10:BC:D8:25:7A:86:3C:92:8E:1E:5A:C6:B0:A0:48:B2:95:71:DC:EF
Certificate issuer:       /CN=7cc7c9c848edfc8a4b400418499abe1d71cd53af
Certificate serial:       0DA8A3
Authority key identifier: 42:34:65:69:0A:1D:F8:6B:DF:9B:90:43:B9:D6:D8:40:39:D7:78:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cc7c9c848edfc8a4b400418499abe1d71cd53af.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28f0e3f6-654c-4ced-95b0-f9c013181813/10a4e451f141aba1bc1f5e9c50fb074f354f85f9.roa
Signing time:             Wed 24 Mar 2021 14:31:25 +0000
ROA not before:           Wed 24 Mar 2021 14:31:25 +0000
ROA not after:            Tue 24 Mar 2026 14:31:25 +0000
asID:                     265648
IP address blocks:        170.246.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895139 (0xda8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7cc7c9c848edfc8a4b400418499abe1d71cd53af
        Validity
            Not Before: Mar 24 14:31:25 2021 GMT
            Not After : Mar 24 14:31:25 2026 GMT
        Subject: CN=10a4e451f141aba1bc1f5e9c50fb074f354f85f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:78:88:8e:12:73:10:2c:19:46:b7:67:93:
                    e0:c2:f5:88:67:b3:e1:98:4c:c1:63:20:79:18:cd:
                    27:c6:49:6a:48:73:63:a9:da:e8:f2:4b:1d:ba:03:
                    a8:b4:ff:96:8f:c7:6e:b7:3f:8e:30:bf:3b:03:fe:
                    89:72:49:81:94:99:e1:ae:0a:0c:46:7d:bf:64:f8:
                    c4:97:3c:5d:26:68:f5:98:0e:d6:f9:7d:3b:87:c8:
                    8a:89:13:d6:da:6e:15:43:a7:53:e9:ee:2c:c1:7e:
                    80:fc:d0:d6:8d:ee:df:bc:f3:c9:de:e3:9a:20:5b:
                    36:95:f5:8d:b7:a9:49:10:47:4b:69:04:1a:12:1a:
                    5d:2e:24:1a:2a:e1:42:37:6e:8e:c8:c5:f8:73:04:
                    f0:a3:19:45:91:fb:a1:a4:1c:b5:f4:df:6d:0d:09:
                    6a:14:b4:34:a2:90:76:bf:48:b1:c0:ea:4a:83:9f:
                    bb:8c:f5:71:c6:be:cc:d3:4b:1a:0a:bd:9b:cb:ae:
                    4f:76:eb:8c:48:01:37:6c:d7:a7:85:db:5d:c6:83:
                    b2:11:e3:2d:be:37:95:fd:2e:9b:e6:06:72:30:ad:
                    e0:5b:3c:da:1d:97:e8:e3:fa:27:0a:1b:9c:a0:32:
                    b2:ad:f7:44:05:a7:d6:67:53:94:2d:ae:64:6e:ed:
                    b4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BC:D8:25:7A:86:3C:92:8E:1E:5A:C6:B0:A0:48:B2:95:71:DC:EF
            X509v3 Authority Key Identifier:
                keyid:42:34:65:69:0A:1D:F8:6B:DF:9B:90:43:B9:D6:D8:40:39:D7:78:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cc7c9c848edfc8a4b400418499abe1d71cd53af.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28f0e3f6-654c-4ced-95b0-f9c013181813/10a4e451f141aba1bc1f5e9c50fb074f354f85f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28f0e3f6-654c-4ced-95b0-f9c013181813/7cc7c9c848edfc8a4b400418499abe1d71cd53af.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:6e:4f:3b:a2:f1:03:19:53:22:1d:3a:27:04:96:8b:b2:fa:
         e5:e1:8b:16:6a:0a:2f:34:06:99:ac:9b:66:ae:b0:38:e0:87:
         3b:b7:cf:82:a8:e2:38:f4:48:1e:2c:ba:d1:c5:d4:26:c3:64:
         15:c6:c1:e8:24:70:44:ab:a6:8d:45:f8:f1:01:5f:16:d5:12:
         41:44:6e:fa:eb:49:97:d2:60:ff:b6:b1:8b:79:44:f2:c0:22:
         ff:f6:41:64:44:10:0c:d5:b1:8b:0b:66:5b:18:c4:1d:08:95:
         8b:e3:15:8e:99:6c:37:5a:b8:5a:19:87:59:bc:8b:28:bc:c1:
         5c:b2:01:1d:0a:d2:c6:4d:cf:31:5a:d0:46:cb:6c:a5:ed:53:
         8d:96:20:41:c6:b2:fe:06:63:ea:2e:ca:23:c3:ee:95:7a:ad:
         0a:a2:98:d7:ff:4e:60:02:9e:58:28:32:13:e2:98:db:10:f4:
         f7:7b:5f:3d:3e:d8:4d:d6:72:ee:7d:97:e0:38:42:dd:68:b6:
         3a:9d:b0:e8:b7:14:9e:97:9f:8b:7c:02:12:fd:c7:fa:bf:9a:
         28:1f:fc:c8:bd:bb:9e:8b:0d:6d:a1:9c:af:2c:c2:ab:b0:59:
         44:5f:32:30:58:43:6b:46:7f:df:2e:99:c6:e7:19:b0:94:6d:
         71:7d:8f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----