Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d4f2025-f34c-4483-b679-09844f122a54/e53f0a5dc152ddfc62b3eefdb2f45cb37dd4381d.roa
File:                     e53f0a5dc152ddfc62b3eefdb2f45cb37dd4381d.roa (raw, json)
Hash identifier:          Mz0UALANCwQOsTx1MKPb3PTm48KFpzSfHYsUMhW+wY0=
Subject key identifier:   C3:48:05:54:AC:17:97:76:EC:51:2D:9A:97:99:15:EF:CF:4E:CA:E9
Certificate issuer:       /CN=b16d3c6d8a5f9edb19cd942123042b1c20ae53f5
Certificate serial:       0D97EF
Authority key identifier: 17:36:A6:7B:E0:AC:16:FA:79:A3:49:C6:56:7B:DE:60:D6:40:2F:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b16d3c6d8a5f9edb19cd942123042b1c20ae53f5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d4f2025-f34c-4483-b679-09844f122a54/e53f0a5dc152ddfc62b3eefdb2f45cb37dd4381d.roa
Signing time:             Wed 24 Mar 2021 14:38:25 +0000
ROA not before:           Wed 24 Mar 2021 14:38:25 +0000
ROA not after:            Tue 24 Mar 2026 14:38:25 +0000
asID:                     263216
IP address blocks:        191.98.208.0/21 maxlen: 22
                          2803:f280::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890863 (0xd97ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16d3c6d8a5f9edb19cd942123042b1c20ae53f5
        Validity
            Not Before: Mar 24 14:38:25 2021 GMT
            Not After : Mar 24 14:38:25 2026 GMT
        Subject: CN=e53f0a5dc152ddfc62b3eefdb2f45cb37dd4381d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fb:b9:cf:42:bb:a1:2f:a3:f9:f0:80:11:db:
                    c5:65:4e:4c:f9:25:ba:2c:2a:f1:31:33:e4:e9:6b:
                    14:6a:0e:2c:71:85:63:63:85:3f:94:79:a1:b9:ae:
                    43:b2:7c:d3:b3:1e:55:7a:b2:6d:15:97:ab:e6:8b:
                    01:86:58:a3:9c:47:8b:e0:5f:62:8f:0a:4c:d0:87:
                    92:7f:34:57:1b:73:c6:62:26:4c:c4:2a:b3:d4:1d:
                    a8:0d:bc:d9:68:f7:da:db:ef:71:e3:0b:4a:8c:69:
                    f4:b4:f2:83:2a:b0:21:91:42:76:60:c0:60:7b:4b:
                    94:7e:e7:6d:cb:b4:18:ca:b7:21:e2:8f:27:f8:79:
                    92:e8:95:6a:4b:67:c3:a7:92:63:4c:ee:92:f6:cc:
                    35:01:94:84:88:75:99:65:7d:ca:d5:b6:c4:13:a8:
                    b7:93:3e:b1:45:5c:0b:22:80:69:5b:a0:62:20:dc:
                    d8:79:17:aa:74:db:11:18:ec:06:ff:f1:50:0e:6f:
                    ae:45:c8:01:27:dc:a7:1e:03:23:1c:63:c1:95:72:
                    ea:80:8f:50:06:43:21:74:b4:3d:f3:89:a8:1d:7c:
                    ef:a9:cc:88:f2:93:7f:b0:68:a2:e3:79:04:19:f1:
                    1f:61:74:cb:4c:30:62:d4:ed:db:eb:4a:75:1a:81:
                    9f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:05:54:AC:17:97:76:EC:51:2D:9A:97:99:15:EF:CF:4E:CA:E9
            X509v3 Authority Key Identifier:
                keyid:17:36:A6:7B:E0:AC:16:FA:79:A3:49:C6:56:7B:DE:60:D6:40:2F:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b16d3c6d8a5f9edb19cd942123042b1c20ae53f5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d4f2025-f34c-4483-b679-09844f122a54/e53f0a5dc152ddfc62b3eefdb2f45cb37dd4381d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d4f2025-f34c-4483-b679-09844f122a54/b16d3c6d8a5f9edb19cd942123042b1c20ae53f5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.208.0/21
                IPv6:
                  2803:f280::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:b4:0f:b0:e3:dd:48:9a:49:e1:7f:01:93:3f:84:2f:5f:03:
         ba:3d:01:c9:7a:f6:85:66:bd:51:21:62:b8:e4:a6:cc:9b:62:
         41:e0:c1:d2:a1:df:d9:f1:85:5d:b2:bd:70:6c:33:92:9c:03:
         0f:ed:ff:4f:71:ac:a8:b3:de:05:59:83:63:9a:b7:a1:5a:12:
         7c:ec:82:37:42:46:da:fc:61:08:76:51:6e:8b:4a:3e:1d:e8:
         3e:ff:d3:e5:71:19:60:da:5f:de:7e:10:e7:12:12:b1:e4:04:
         e4:83:3f:a9:6c:af:05:be:0e:22:18:08:96:fd:00:24:78:02:
         58:0c:87:29:bf:72:1d:ab:7a:24:02:93:f1:c1:96:1e:ae:af:
         51:b3:0e:11:f0:05:7a:3c:d0:24:e6:73:9b:10:cb:72:e0:3d:
         bc:b3:2d:fd:b5:1e:d2:07:3b:f2:e6:a3:b6:02:6d:29:26:66:
         da:31:7a:2b:bc:5c:33:80:ab:cd:8f:55:da:db:c6:dc:8a:ae:
         58:6a:f4:45:91:31:f0:9a:8f:7f:57:87:1c:a2:50:2e:44:b6:
         8d:b0:22:b3:b9:4b:40:80:fe:69:02:19:1b:ba:32:c5:7d:3a:
         ba:b4:bf:f1:41:2a:ab:10:af:be:05:9e:ea:25:cb:cc:11:99:
         3b:cd:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----