Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2ad8c44e-3fbc-4026-8aa7-2f631e4de5cb/41c0587cdf82cd750eeba4ccb2401f0df87f02d3.roa
File:                     41c0587cdf82cd750eeba4ccb2401f0df87f02d3.roa (raw, json)
Hash identifier:          UpG6jLS5SCnPcEDkQ1EjJPlOVbQnnUl3FcfSRNG7plY=
Subject key identifier:   32:F9:56:5B:1D:E1:69:71:C6:96:D5:86:BD:FA:42:1E:86:30:53:14
Certificate issuer:       /CN=41145cf73cb5131f722225203b5434540f5f373f
Certificate serial:       03053F
Authority key identifier: CB:5A:97:57:85:81:0B:73:F6:99:67:01:A9:CB:B1:85:3D:D8:7A:33
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41145cf73cb5131f722225203b5434540f5f373f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2ad8c44e-3fbc-4026-8aa7-2f631e4de5cb/41c0587cdf82cd750eeba4ccb2401f0df87f02d3.roa
Signing time:             Wed 24 Mar 2021 14:32:31 +0000
ROA not before:           Wed 24 Mar 2021 14:32:31 +0000
ROA not after:            Tue 24 Mar 2026 14:32:31 +0000
asID:                     61496
IP address blocks:        131.221.0.0/22 maxlen: 22
                          2801:18:6000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197951 (0x3053f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41145cf73cb5131f722225203b5434540f5f373f
        Validity
            Not Before: Mar 24 14:32:31 2021 GMT
            Not After : Mar 24 14:32:31 2026 GMT
        Subject: CN=41c0587cdf82cd750eeba4ccb2401f0df87f02d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:87:ae:65:a9:d3:62:27:e9:0b:cd:b5:6a:1f:
                    81:25:a1:fe:ba:0b:14:02:73:0a:af:43:35:3a:a6:
                    e0:42:8f:61:2e:9d:81:99:89:e6:3c:49:60:cd:50:
                    23:f8:12:01:ea:83:2f:9e:32:06:c7:7f:5d:cf:35:
                    05:74:f0:c3:67:6f:b4:f2:80:23:81:47:32:f9:fc:
                    00:01:54:75:34:c1:07:ce:17:14:2c:7a:8b:a3:ca:
                    7e:3b:d1:a8:cf:5b:be:90:ec:86:2c:33:f8:ab:55:
                    5a:44:bc:dd:5a:b1:d3:11:9a:d4:8a:a4:06:64:68:
                    12:78:f0:98:93:33:24:c5:eb:62:6b:95:3e:35:34:
                    d1:3a:d9:9c:2f:f2:a6:a2:6b:a6:11:a7:87:92:7c:
                    ac:75:fd:b7:f8:84:a4:da:ce:fa:f9:3e:2e:b7:c1:
                    3b:5a:08:15:8e:1e:ae:d4:1a:f9:55:16:a4:b9:ee:
                    96:b3:1e:d9:b6:52:4c:d6:97:e2:54:ae:42:6e:f2:
                    ba:11:4e:3b:db:e8:9f:00:50:2f:97:69:d4:ae:8d:
                    67:b5:c6:75:fd:0b:c3:80:8c:83:a8:c2:37:68:66:
                    f5:d2:ab:27:3a:5c:94:f8:da:9e:44:63:71:0b:10:
                    1d:35:04:72:64:83:1c:c4:78:0c:35:df:ec:ed:5b:
                    4b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F9:56:5B:1D:E1:69:71:C6:96:D5:86:BD:FA:42:1E:86:30:53:14
            X509v3 Authority Key Identifier:
                keyid:CB:5A:97:57:85:81:0B:73:F6:99:67:01:A9:CB:B1:85:3D:D8:7A:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41145cf73cb5131f722225203b5434540f5f373f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2ad8c44e-3fbc-4026-8aa7-2f631e4de5cb/41c0587cdf82cd750eeba4ccb2401f0df87f02d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2ad8c44e-3fbc-4026-8aa7-2f631e4de5cb/41145cf73cb5131f722225203b5434540f5f373f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.0.0/22
                IPv6:
                  2801:18:6000::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:1f:48:59:13:e4:22:9a:03:e7:60:5e:29:54:f2:ce:db:57:
         29:51:09:e6:3e:e1:fd:c9:d4:bb:5e:cd:d9:c2:49:f5:1f:36:
         02:89:41:64:11:42:6e:15:34:fa:e6:83:df:dc:0e:e8:f3:64:
         4e:9d:bc:26:86:39:fa:8d:54:43:ae:0d:59:94:8f:7c:0a:f4:
         70:21:3b:b9:00:92:8b:71:46:00:2e:ce:bc:e5:d3:ca:95:40:
         0f:b5:c8:86:9a:1b:a5:d2:15:f3:f3:5e:32:7f:ae:0e:97:9d:
         9b:03:4c:b5:e6:cb:0b:62:51:58:e1:31:12:67:34:dc:88:7d:
         f6:c8:8b:5e:cf:e6:9f:ee:8c:2a:b9:28:7e:5e:17:ea:34:78:
         8a:11:77:31:52:b8:57:87:9f:68:e2:fa:88:1a:b0:b8:a0:cc:
         6c:50:1f:b5:e7:1b:7f:03:47:3a:d8:cf:fb:41:ff:d1:6f:34:
         a3:03:54:94:3f:b7:e9:d8:73:03:7c:9e:36:8a:67:e0:a8:91:
         e4:fb:b7:c8:ba:27:0f:a4:ff:58:f5:48:c2:aa:ee:41:4e:67:
         06:10:f5:d7:3e:db:54:78:03:48:95:c3:69:fe:2d:c2:b9:6a:
         9b:3a:46:28:bc:d9:46:56:e3:1e:e2:52:58:58:a1:74:af:23:
         89:8a:c2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----