Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/41d9b284-3df5-4e96-8974-f85bb0bdf6fc/ccd1a8b84abcbc56da60f5afbe2676ee966bb673.roa
File:                     ccd1a8b84abcbc56da60f5afbe2676ee966bb673.roa (raw, json)
Hash identifier:          AZfL4+0LyTgXP9pYWM65TxTluURvUZI5ziNoGyz6VYg=
Subject key identifier:   6E:90:82:7F:0F:A4:03:C7:DB:CD:52:87:37:F8:9B:57:F5:C1:89:D5
Certificate issuer:       /CN=5573d48617919e8ddaad351046df3bcd680a5138
Certificate serial:       0D4221
Authority key identifier: C7:BA:26:A6:CD:C8:19:D7:9A:8A:B6:76:1D:A8:82:E7:6E:9F:E9:E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5573d48617919e8ddaad351046df3bcd680a5138.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/41d9b284-3df5-4e96-8974-f85bb0bdf6fc/ccd1a8b84abcbc56da60f5afbe2676ee966bb673.roa
Signing time:             Wed 24 Mar 2021 14:38:24 +0000
ROA not before:           Wed 24 Mar 2021 14:38:24 +0000
ROA not after:            Tue 24 Mar 2026 14:38:24 +0000
asID:                     264750
IP address blocks:        170.79.144.0/22 maxlen: 22
                          2803:f8c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868897 (0xd4221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5573d48617919e8ddaad351046df3bcd680a5138
        Validity
            Not Before: Mar 24 14:38:24 2021 GMT
            Not After : Mar 24 14:38:24 2026 GMT
        Subject: CN=ccd1a8b84abcbc56da60f5afbe2676ee966bb673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:39:a4:88:29:a6:4d:63:71:c5:7c:91:0c:5f:
                    81:48:2f:6b:d8:92:8e:85:13:b7:9e:60:8e:55:9a:
                    d8:66:15:53:f9:14:e2:9f:1b:fc:c6:1a:a7:3d:2b:
                    24:c0:22:2e:8f:14:1e:f9:a8:3d:f8:3a:15:3b:f2:
                    ee:62:88:41:60:bd:94:a4:92:20:f0:91:83:12:28:
                    ff:64:b4:17:60:49:0a:17:1f:a0:4a:25:49:27:4f:
                    d7:6a:a1:b2:1d:ae:ff:c4:ce:a4:43:d1:da:06:4e:
                    da:d3:d1:56:af:f1:dc:89:41:b3:60:0b:93:a6:f2:
                    9b:69:01:a3:d1:2d:bc:a5:82:a2:0a:b8:d4:45:d5:
                    dc:53:fb:16:a9:51:cc:10:78:2a:4f:97:ae:ae:91:
                    5d:01:e3:ae:f4:75:b2:5e:c0:64:73:5c:18:21:4b:
                    2e:75:dc:26:e3:55:bf:15:49:58:27:f6:2f:f3:37:
                    ab:9a:2a:61:65:c8:a0:31:59:78:ce:f4:12:03:4e:
                    80:05:ef:a3:0b:2d:69:37:f2:65:57:97:46:27:f5:
                    34:f8:57:6d:9d:ba:19:f6:85:d7:6b:5b:be:fd:f7:
                    b8:e8:a4:c2:a1:9e:92:17:78:8f:39:98:66:5a:ec:
                    e1:92:46:95:b1:67:f1:02:38:c5:00:84:17:95:89:
                    03:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:90:82:7F:0F:A4:03:C7:DB:CD:52:87:37:F8:9B:57:F5:C1:89:D5
            X509v3 Authority Key Identifier:
                keyid:C7:BA:26:A6:CD:C8:19:D7:9A:8A:B6:76:1D:A8:82:E7:6E:9F:E9:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5573d48617919e8ddaad351046df3bcd680a5138.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/41d9b284-3df5-4e96-8974-f85bb0bdf6fc/ccd1a8b84abcbc56da60f5afbe2676ee966bb673.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/41d9b284-3df5-4e96-8974-f85bb0bdf6fc/5573d48617919e8ddaad351046df3bcd680a5138.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.144.0/22
                IPv6:
                  2803:f8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:8a:ef:3e:4c:76:48:30:36:7a:05:87:fe:fd:c0:54:39:d3:
         1d:d4:42:a4:aa:77:f5:17:83:ac:43:26:e1:cd:f7:7a:41:54:
         88:eb:26:0f:9f:97:b8:76:5c:fa:f7:51:ed:6c:b3:20:90:2a:
         df:55:a8:50:ee:12:85:73:f4:5c:9c:b0:15:0a:d6:e6:66:55:
         1f:ce:06:76:bb:43:20:51:6c:e5:e9:7d:e9:dd:b6:79:0e:fd:
         ff:66:e7:d7:2c:62:84:45:35:f2:7b:fc:aa:d7:9c:66:d9:71:
         c3:0b:8c:f8:03:35:6c:a2:d2:e6:89:dd:52:88:2a:84:83:19:
         16:d6:13:d3:bf:44:8e:7d:1c:89:42:a9:a3:61:88:ff:99:c8:
         61:bc:f9:30:75:6e:4c:c7:74:06:27:f5:0d:7a:ff:7c:a2:89:
         03:f1:78:b8:10:2d:81:af:a6:61:0c:a0:df:4b:a8:91:07:07:
         1a:a9:84:05:f5:55:a6:6f:03:23:23:cc:33:26:2a:a1:b7:c3:
         a2:29:38:6d:e6:09:b4:4b:87:c1:48:d4:6d:da:4c:e2:08:20:
         80:9c:0b:79:c8:70:84:0c:9a:bf:0c:36:fd:72:1c:a9:5f:d8:
         ef:2e:e4:05:c6:33:be:20:73:b6:2c:a7:bf:5a:55:61:70:37:
         7f:19:da:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----