Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/1be0effcf6e5afbd466bc76b81053a5d7a4a8f7c.roa
File:                     1be0effcf6e5afbd466bc76b81053a5d7a4a8f7c.roa (raw, json)
Hash identifier:          LjQ1PcfoWARQ1qBqz4NfW9Y+CiVmFMLWyT45+qSZz8w=
Subject key identifier:   2D:F4:9F:14:8D:59:6C:8A:30:8D:13:45:68:AE:D9:92:0C:01:1F:95
Certificate issuer:       /CN=6a87731fd0e709e012a794d3f86ae26c7c73db79
Certificate serial:       1793B4
Authority key identifier: D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a87731fd0e709e012a794d3f86ae26c7c73db79.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/1be0effcf6e5afbd466bc76b81053a5d7a4a8f7c.roa
Signing time:             Sun 02 Apr 2023 21:49:19 +0000
ROA not before:           Thu 31 Mar 2022 03:00:00 +0000
ROA not after:            Sun 02 Apr 2034 03:00:00 +0000
asID:                     52505
IP address blocks:        152.231.16.0/21 maxlen: 24
                          2803:ee80::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1545140 (0x1793b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a87731fd0e709e012a794d3f86ae26c7c73db79
        Validity
            Not Before: Mar 31 03:00:00 2022 GMT
            Not After : Apr  2 03:00:00 2034 GMT
        Subject: CN=1be0effcf6e5afbd466bc76b81053a5d7a4a8f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:53:d1:ca:72:d3:ee:6b:a3:6b:0a:27:25:
                    f9:6e:ae:1e:76:51:ef:39:c4:af:52:66:c1:38:34:
                    6f:4f:5c:61:69:1b:16:13:26:11:e6:c9:df:c0:68:
                    0a:3f:12:aa:cc:89:3f:c0:4d:b1:8d:90:42:98:28:
                    98:b9:41:6b:b3:34:65:c1:61:20:14:f7:30:5a:53:
                    09:3c:6b:c3:9c:a5:72:3b:75:c1:b2:6f:63:01:9f:
                    93:e1:0b:fd:ff:bd:db:ff:fa:02:ce:18:ea:b2:55:
                    51:ce:50:be:3d:ad:bd:49:e7:98:1d:54:52:f0:10:
                    80:2c:0c:d9:37:0f:c7:79:ce:ae:82:01:4c:98:97:
                    ec:dd:97:47:f5:39:f0:51:67:73:07:14:b1:23:94:
                    ea:90:ba:eb:e8:2e:7d:77:d7:a5:b9:6a:e0:1b:b7:
                    3b:50:1a:10:0c:0f:f9:77:4f:9b:d4:85:79:44:98:
                    94:a8:e6:2f:cb:aa:84:dd:f7:79:42:c2:bf:f9:0b:
                    30:42:8f:7e:db:fb:9d:6b:29:ec:78:0d:47:59:d1:
                    d8:de:c6:92:d2:d5:3f:9e:1e:6f:7e:7b:85:e1:8e:
                    da:fc:23:a5:c3:53:0f:23:f3:fc:ed:50:63:51:d0:
                    d6:8c:79:a0:88:3d:96:50:30:06:a5:73:f1:ed:5a:
                    54:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F4:9F:14:8D:59:6C:8A:30:8D:13:45:68:AE:D9:92:0C:01:1F:95
            X509v3 Authority Key Identifier:
                keyid:D6:B8:8E:7A:F3:33:46:E0:95:C5:F6:4A:64:31:03:4E:5A:01:12:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6a87731fd0e709e012a794d3f86ae26c7c73db79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/1be0effcf6e5afbd466bc76b81053a5d7a4a8f7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4d4a8543-ee9e-4487-a3d7-7f7bb6302e7f/6a87731fd0e709e012a794d3f86ae26c7c73db79.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.231.16.0/21
                IPv6:
                  2803:ee80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:ee:31:af:56:25:74:61:53:41:9b:35:2d:c0:39:3f:10:64:
         e6:48:8e:73:1b:ca:ad:ee:c0:08:75:6b:2a:8b:7d:b5:18:8c:
         b8:03:91:96:c1:8d:04:06:f5:7e:14:45:60:71:87:97:aa:24:
         21:fc:63:8f:5a:40:8f:ae:7a:95:dd:3e:76:88:16:26:e5:5b:
         93:ba:09:2a:d1:f2:db:b7:cd:8c:bc:22:bf:6e:e0:ac:89:dd:
         e8:f3:fb:3c:78:28:85:dc:29:d8:30:63:c6:e1:76:16:1f:7a:
         b2:fe:18:8e:fc:0f:4e:69:72:38:b6:00:34:32:41:19:cd:8d:
         fe:ac:4f:09:3e:3f:f4:ff:67:9d:77:2c:f3:5e:6e:19:ae:2b:
         1b:86:5b:d1:46:cd:ed:e3:c7:9e:0b:e5:a2:95:79:d5:27:e1:
         82:80:bc:dc:5f:33:9d:80:72:56:2c:2c:e9:96:a1:52:f5:c8:
         98:26:06:eb:07:b4:61:94:2c:7c:03:23:4d:d3:67:5a:da:31:
         48:6c:04:2a:89:71:1d:e1:32:c1:53:86:c8:21:6a:a4:33:0c:
         0d:51:0c:10:3d:44:55:b7:66:01:5c:01:a8:c2:d4:5d:f0:e9:
         fb:c8:5c:92:08:82:28:54:35:49:83:68:f5:87:cf:81:b7:50:
         5d:6c:98:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----