Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/564768e5936755dde56efa6be391a354c4306350.roa
File:                     564768e5936755dde56efa6be391a354c4306350.roa (raw, json)
Hash identifier:          ViYUssHorp2icohMt6PUTiGcJMhHZFKN54tCbCzujxM=
Subject key identifier:   62:45:4E:F4:FB:28:3E:06:87:9E:CF:5D:82:D1:CD:4A:B7:F1:C9:30
Certificate issuer:       /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial:       1A1C17
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/564768e5936755dde56efa6be391a354c4306350.roa
Signing time:             Wed 10 Aug 2022 16:57:58 +0000
ROA not before:           Tue 17 May 2022 03:00:00 +0000
ROA not after:            Fri 17 May 2024 03:00:00 +0000
asID:                     27986
IP address blocks:        152.231.111.0/24 maxlen: 24
                          2800:300::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1711127 (0x1a1c17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
        Validity
            Not Before: May 17 03:00:00 2022 GMT
            Not After : May 17 03:00:00 2024 GMT
        Subject: CN=564768e5936755dde56efa6be391a354c4306350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:89:3c:ff:ac:17:a2:6d:07:5d:66:59:c6:c8:
                    63:ab:f4:f4:16:33:eb:dc:31:54:99:22:ee:78:a9:
                    a7:b9:fd:1a:b7:6a:a4:33:a5:e2:21:35:de:c9:c6:
                    14:81:c4:da:ae:8a:85:52:35:43:36:29:88:66:00:
                    a6:41:03:24:97:09:a0:95:b1:f7:e0:66:ab:45:af:
                    ae:49:3a:50:d7:ae:d7:65:78:15:35:f3:30:16:5f:
                    a9:ff:91:c4:f3:7a:18:8f:59:1f:5c:75:b0:5f:0b:
                    7f:e8:36:c0:03:c8:de:db:61:df:aa:61:ee:83:13:
                    8b:34:65:16:12:1b:21:fb:2c:1a:9b:c6:f1:db:7c:
                    4d:cf:05:90:8b:92:72:71:14:e3:5f:c4:52:6b:32:
                    bc:96:66:3f:87:1e:f6:83:0c:25:13:64:3a:77:e5:
                    28:2b:b7:fc:4c:83:dc:73:2a:93:f9:c8:e3:e8:c7:
                    92:21:20:7a:08:8f:15:e0:42:a3:9c:22:ea:8c:2c:
                    d6:fb:fa:e8:ec:6d:de:4e:f3:0b:22:6d:36:7c:52:
                    40:fd:46:8e:56:fe:6b:89:95:59:76:6f:5e:31:88:
                    10:cc:3e:a7:32:19:57:a4:10:bb:9b:7d:ab:71:d1:
                    13:41:61:9c:5c:87:bc:3a:f1:43:55:84:7f:11:5b:
                    e6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:45:4E:F4:FB:28:3E:06:87:9E:CF:5D:82:D1:CD:4A:B7:F1:C9:30
            X509v3 Authority Key Identifier:
                keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/564768e5936755dde56efa6be391a354c4306350.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.111.0/24
                IPv6:
                  2800:300::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:06:71:da:d1:e6:69:29:07:cb:c9:e4:ef:7a:28:3b:d7:48:
         1a:07:ea:d6:fa:8e:dd:87:e0:90:79:bf:8c:df:96:05:23:dc:
         5d:25:bf:eb:55:38:75:29:2c:f0:c5:97:7f:23:df:4d:b4:97:
         0f:94:1a:82:a8:a5:7b:d7:4b:fe:d6:c2:ec:51:06:7e:7a:fe:
         17:13:6e:8e:80:74:8b:75:94:e7:bd:fe:8d:bb:32:05:d2:11:
         6c:18:7d:38:9c:59:36:40:df:fe:2a:d1:9e:2e:61:9f:01:1e:
         de:39:20:ee:bd:b3:c0:a7:84:31:d3:fe:be:52:38:da:09:66:
         30:10:d0:8f:46:e3:e4:bb:95:3d:46:51:3b:77:9d:35:7e:de:
         64:b3:62:36:1f:e8:21:08:05:51:ca:97:40:dc:aa:f9:be:50:
         63:13:2a:89:77:38:f9:bc:c6:fc:0b:f4:77:c9:cc:3b:6d:a2:
         05:19:7c:c4:11:35:24:ca:d5:f9:c0:5a:ac:57:f9:e2:08:49:
         8a:7c:34:76:68:75:ce:1a:20:3d:7d:11:2f:58:52:ca:d4:d5:
         20:b8:94:82:26:44:00:07:3f:de:2f:39:31:38:41:f1:5e:35:
         e3:5e:f5:eb:12:45:b1:fe:ef:f3:eb:83:54:af:84:ac:da:64:
         86:aa:d7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----