Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/305a0e5e-4150-4b7f-9b1b-ec4c9f91044d/7d1cc4602770c017247f7d67a44a6a5a5d05d03e.roa
File:                     7d1cc4602770c017247f7d67a44a6a5a5d05d03e.roa (raw, json)
Hash identifier:          f90fN7hOnfMQk8sJrroYMJJkmCDex1B66yxxR5TUUCE=
Subject key identifier:   A0:1C:DB:42:06:3A:64:7E:67:CB:6F:9A:9F:D3:89:7B:D9:9B:5E:0A
Certificate issuer:       /CN=d35667f119be50e7c8247352710f35b1468508d8
Certificate serial:       095BEA
Authority key identifier: E2:58:BA:2D:16:D8:FC:7D:5D:CC:5F:2C:06:56:D9:CD:D6:B9:58:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d35667f119be50e7c8247352710f35b1468508d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/305a0e5e-4150-4b7f-9b1b-ec4c9f91044d/7d1cc4602770c017247f7d67a44a6a5a5d05d03e.roa
Signing time:             Thu 21 Jul 2022 21:07:18 +0000
ROA not before:           Thu 21 Jul 2022 03:00:00 +0000
ROA not after:            Sun 21 Jul 2024 03:00:00 +0000
asID:                     269897
IP address blocks:        190.112.136.0/22 maxlen: 24
                          2803:ce0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613354 (0x95bea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d35667f119be50e7c8247352710f35b1468508d8
        Validity
            Not Before: Jul 21 03:00:00 2022 GMT
            Not After : Jul 21 03:00:00 2024 GMT
        Subject: CN=7d1cc4602770c017247f7d67a44a6a5a5d05d03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:54:37:f0:00:b0:d5:74:81:25:87:6e:9d:92:
                    39:6f:25:f7:99:8b:0d:ac:76:b7:62:93:9f:04:28:
                    71:6f:6e:cd:e5:41:f5:59:73:dd:b0:74:3a:fb:ee:
                    21:34:3a:5a:75:6d:eb:43:14:d2:ed:f9:9c:0e:fc:
                    0b:c1:b2:99:2f:ae:ff:75:8f:62:e8:dc:d7:3a:11:
                    d6:67:04:54:c3:72:da:61:13:c5:6e:bc:60:49:e0:
                    b1:05:fd:86:eb:f2:7c:b5:6d:f6:24:fe:1e:40:48:
                    0b:db:4e:80:ec:ad:ee:1d:d5:11:4f:dc:df:8a:e5:
                    6f:7a:aa:f1:5f:40:5b:8c:34:6f:f3:82:72:c2:3d:
                    77:9e:41:ed:13:a7:6a:ba:99:96:14:ca:38:d6:84:
                    08:cd:c3:3f:67:50:a8:56:04:d1:85:5b:58:93:87:
                    0a:6c:11:e7:6b:71:62:ec:35:60:ac:c0:7d:44:52:
                    75:12:48:e5:1c:6d:b9:0c:88:e5:c0:37:f9:44:99:
                    c0:fe:9f:c0:6c:ef:83:db:e3:3d:27:88:40:be:67:
                    76:99:38:e9:ca:a1:07:aa:a9:c8:28:fe:17:04:79:
                    96:93:5d:31:3c:3f:0c:de:10:42:50:59:39:b6:7d:
                    0a:fa:a1:ff:f6:f2:ba:e2:74:4e:20:fb:f4:11:bf:
                    f8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1C:DB:42:06:3A:64:7E:67:CB:6F:9A:9F:D3:89:7B:D9:9B:5E:0A
            X509v3 Authority Key Identifier:
                keyid:E2:58:BA:2D:16:D8:FC:7D:5D:CC:5F:2C:06:56:D9:CD:D6:B9:58:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d35667f119be50e7c8247352710f35b1468508d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/305a0e5e-4150-4b7f-9b1b-ec4c9f91044d/7d1cc4602770c017247f7d67a44a6a5a5d05d03e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/305a0e5e-4150-4b7f-9b1b-ec4c9f91044d/d35667f119be50e7c8247352710f35b1468508d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.136.0/22
                IPv6:
                  2803:ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:9c:dc:7e:4f:af:7b:45:8d:b8:1b:ba:6e:81:72:0d:ab:e6:
         fc:be:0a:40:1c:ed:25:77:3a:ae:f5:76:d5:85:7e:d1:f0:dc:
         e7:af:4f:1b:2f:0b:07:cb:51:47:7b:bb:e3:54:dd:4d:13:f5:
         33:b2:7c:c0:91:1b:e1:5b:52:e1:8d:c2:cf:51:13:f9:ea:21:
         6a:f7:b2:42:34:e6:a1:0a:32:54:8a:b6:e3:2f:76:9e:fd:8e:
         80:c6:d6:9c:36:a1:08:88:71:91:cf:69:1b:12:b2:e9:73:36:
         7d:c0:a0:7e:a9:2d:8c:64:59:35:2d:d3:65:fc:4c:67:9c:df:
         7c:97:f9:bf:d7:a0:e2:5d:d3:bc:2a:78:b0:28:47:59:0c:bc:
         21:67:50:34:ab:16:07:cb:d2:63:e5:8b:2e:a3:f9:f0:ef:55:
         8d:57:06:62:05:aa:e7:fa:16:55:fb:99:b1:86:3e:c8:55:52:
         ac:f5:b3:90:50:a5:0d:53:6f:1a:0e:00:45:89:a2:b4:a2:a9:
         d6:c1:f0:cc:87:b3:0d:bf:08:71:cb:c4:68:4b:fd:2a:62:1f:
         1b:2d:c9:8b:5d:05:4d:03:ff:a2:fd:94:1e:aa:a3:1f:1a:97:
         ba:6e:08:0f:2b:bc:12:db:98:bf:b6:e7:96:47:b6:eb:03:a9:
         47:a8:8c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----