Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/be1cafced06c47c7fb05e13fb0f59660d9336dab.roa
File:                     be1cafced06c47c7fb05e13fb0f59660d9336dab.roa (raw, json)
Hash identifier:          KdXNOO6xxTC4YcWRh1qeCWD+DbqxDVRzMVvHaWB5L9g=
Subject key identifier:   FE:BD:79:94:DD:9F:18:6D:6C:1B:D2:63:C1:1F:4E:7C:37:30:21:0C
Certificate issuer:       /CN=d5923739f0d7ae9a00e78bf2f88f635b59afa3c9
Certificate serial:       139F9E
Authority key identifier: C9:39:F0:6A:8E:DC:66:8C:6B:DA:75:FF:F2:30:BC:DE:8A:94:53:72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5923739f0d7ae9a00e78bf2f88f635b59afa3c9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/be1cafced06c47c7fb05e13fb0f59660d9336dab.roa
Signing time:             Tue 30 Nov 2021 02:36:06 +0000
ROA not before:           Mon 29 Nov 2021 03:00:00 +0000
ROA not after:            Wed 29 Nov 2023 03:00:00 +0000
asID:                     6471
IP address blocks:        186.67.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1286046 (0x139f9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5923739f0d7ae9a00e78bf2f88f635b59afa3c9
        Validity
            Not Before: Nov 29 03:00:00 2021 GMT
            Not After : Nov 29 03:00:00 2023 GMT
        Subject: CN=be1cafced06c47c7fb05e13fb0f59660d9336dab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:96:64:40:1b:11:03:be:57:f5:02:d6:80:9b:
                    75:16:6c:ad:dc:82:ee:b5:52:d9:69:87:f3:8e:a7:
                    f8:d6:9a:99:60:6a:9a:95:61:43:0c:50:6a:27:b1:
                    17:2a:22:30:8b:85:bc:4e:b2:26:1b:70:e7:1f:e4:
                    19:d8:4f:1b:cc:24:0d:ac:22:79:cb:83:06:ba:78:
                    0e:ba:1a:53:35:71:11:84:8d:94:69:be:34:46:e7:
                    6f:85:15:c3:ce:25:df:93:1e:3e:7f:e4:93:76:eb:
                    6e:35:8d:76:e3:45:61:46:92:00:3c:ef:b1:9b:a0:
                    93:32:0c:8a:fb:59:57:cf:d3:94:58:b1:a4:f7:9d:
                    7c:84:1e:df:cb:fd:c3:73:e6:ca:a7:88:e6:74:be:
                    db:19:ac:34:21:89:ca:43:cd:bc:b7:0f:d0:35:72:
                    ee:05:30:6d:cf:83:31:89:a5:3a:e1:e5:e2:f7:39:
                    b7:1b:68:03:a6:41:95:80:48:e2:61:5b:20:16:0d:
                    78:09:02:06:24:6b:01:00:ef:71:2c:21:7c:08:dd:
                    02:3a:83:2e:df:ea:99:87:08:94:f5:fd:3e:d6:5b:
                    88:da:de:e6:b3:c4:b8:74:0d:15:b1:47:60:fc:8a:
                    58:c5:7d:1f:b1:79:f9:ff:f6:35:3a:dc:6a:13:cc:
                    f5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BD:79:94:DD:9F:18:6D:6C:1B:D2:63:C1:1F:4E:7C:37:30:21:0C
            X509v3 Authority Key Identifier:
                keyid:C9:39:F0:6A:8E:DC:66:8C:6B:DA:75:FF:F2:30:BC:DE:8A:94:53:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5923739f0d7ae9a00e78bf2f88f635b59afa3c9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/be1cafced06c47c7fb05e13fb0f59660d9336dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/d5923739f0d7ae9a00e78bf2f88f635b59afa3c9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.67.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:95:c8:64:5a:c1:62:7f:ff:c2:ee:78:5c:39:6d:14:c9:81:
         2c:b7:2f:47:ac:b6:48:16:d0:55:b9:6e:89:74:74:b6:0a:93:
         64:15:95:ab:6b:47:8b:2e:c9:a3:78:48:a9:41:4f:7f:4b:f7:
         05:7d:65:ea:88:fc:12:f3:62:59:c1:61:78:c5:6f:78:90:cd:
         60:f1:20:b8:ab:fe:1f:16:71:f9:62:19:69:3f:b4:a1:50:9f:
         a3:59:df:48:c2:c3:fe:9e:ac:2b:d6:8b:86:8f:9c:e4:7c:25:
         e7:57:be:62:63:f6:e3:f0:6d:6d:31:53:73:54:60:9e:67:35:
         a7:93:a1:08:9c:38:ed:da:45:ba:ce:07:94:f0:ee:b6:3c:59:
         9a:74:1e:9b:59:65:73:63:6b:de:89:66:91:07:9a:9f:10:c9:
         6f:dc:21:f3:cd:df:b7:94:be:b9:b7:4e:fb:9e:3c:8a:97:e0:
         82:1b:05:b4:24:59:8b:36:b8:0d:7f:ab:2e:95:b4:74:5b:83:
         ae:85:91:43:90:30:ce:d3:13:0b:27:34:3f:ac:76:b4:8e:98:
         36:db:8f:ee:e3:37:9a:7b:e7:a0:63:60:b3:be:91:07:eb:37:
         7e:90:47:78:da:ce:c6:fa:72:7a:1f:09:aa:38:04:dd:4a:fb:
         36:8a:94:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----