Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e8e554f-0425-4894-bace-9c83339b84e7/b34519b01f36d5551124b29ed07c394355611eb6.roa
File:                     b34519b01f36d5551124b29ed07c394355611eb6.roa (raw, json)
Hash identifier:          6HiIitIzH+GOS6Q/pEcqcvQUa9o6mjrsrT7PXZvauOA=
Subject key identifier:   C5:DD:AB:70:DA:C5:D7:24:E0:B5:56:6D:2F:39:2F:FD:B5:3E:DA:E0
Certificate issuer:       /CN=7b7f4781ac3db65e6100955a969c54c494191e2b
Certificate serial:       068895
Authority key identifier: 97:C7:25:DB:A1:D5:6E:49:14:4F:FC:59:E4:95:3D:43:65:92:A9:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b7f4781ac3db65e6100955a969c54c494191e2b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e8e554f-0425-4894-bace-9c83339b84e7/b34519b01f36d5551124b29ed07c394355611eb6.roa
Signing time:             Wed 24 Mar 2021 14:33:13 +0000
ROA not before:           Wed 24 Mar 2021 14:33:13 +0000
ROA not after:            Tue 24 Mar 2026 14:33:13 +0000
asID:                     61466
IP address blocks:        164.163.88.0/22 maxlen: 24
                          2803:17c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428181 (0x68895)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b7f4781ac3db65e6100955a969c54c494191e2b
        Validity
            Not Before: Mar 24 14:33:13 2021 GMT
            Not After : Mar 24 14:33:13 2026 GMT
        Subject: CN=b34519b01f36d5551124b29ed07c394355611eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:c9:45:5c:6c:0d:79:be:27:61:6e:c8:e8:
                    9d:ac:0c:15:1d:2d:6f:e1:8b:43:75:f9:8c:65:cd:
                    7e:17:91:4a:b8:92:52:ac:5c:e6:05:92:39:e1:f3:
                    ed:45:a4:39:ea:29:e9:15:1b:35:8a:00:2a:9f:2b:
                    b6:ef:5f:25:d2:62:13:d6:b5:42:ec:5d:f3:12:74:
                    b8:58:5e:12:c3:fc:f4:51:bb:cf:60:64:10:e0:a9:
                    b0:8b:99:98:0c:9b:75:31:e9:7b:f0:eb:0e:8b:3f:
                    0f:83:1f:20:fb:50:aa:72:68:ae:99:89:7b:3d:27:
                    47:32:68:99:d7:3f:86:b8:0e:ca:cd:fb:7c:7d:c9:
                    be:d9:03:b7:02:cc:cf:28:15:a1:cc:30:01:ba:51:
                    a1:5b:99:fc:10:03:9b:bc:a3:5c:d2:b2:42:39:a9:
                    fb:7e:7c:01:74:57:43:6d:7d:91:98:34:7b:b9:77:
                    19:76:79:65:dc:71:48:05:6e:16:cc:50:cf:d2:fb:
                    cc:38:f8:10:40:e8:8e:1e:22:a5:d0:34:aa:7a:c6:
                    a0:da:b7:4f:d7:bc:8e:f9:13:f6:cf:d9:d3:d1:a5:
                    4a:40:2e:94:d5:2d:82:27:ac:2f:b6:6d:e4:69:9e:
                    8b:d4:a6:16:ce:c1:64:e3:8e:96:67:1b:9c:59:53:
                    c7:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DD:AB:70:DA:C5:D7:24:E0:B5:56:6D:2F:39:2F:FD:B5:3E:DA:E0
            X509v3 Authority Key Identifier:
                keyid:97:C7:25:DB:A1:D5:6E:49:14:4F:FC:59:E4:95:3D:43:65:92:A9:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b7f4781ac3db65e6100955a969c54c494191e2b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e8e554f-0425-4894-bace-9c83339b84e7/b34519b01f36d5551124b29ed07c394355611eb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e8e554f-0425-4894-bace-9c83339b84e7/7b7f4781ac3db65e6100955a969c54c494191e2b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.88.0/22
                IPv6:
                  2803:17c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:5e:55:d8:d3:f0:42:96:8f:2f:6e:98:ed:e8:46:a5:7f:b2:
         ea:6b:d9:fc:c2:da:58:be:80:1d:ad:58:22:96:48:85:99:5f:
         3f:93:bd:d9:2a:3a:f0:37:3d:78:81:2a:47:01:57:10:ed:88:
         d0:da:23:d4:3a:b8:5d:00:92:ab:b2:a6:0f:3a:21:cd:b9:a9:
         d4:36:a9:9b:3c:85:cc:17:3a:20:b1:0b:5b:52:b3:e5:f0:88:
         ca:07:12:55:4f:fb:72:b2:13:ef:eb:f8:39:92:68:fb:99:b3:
         ec:48:fa:af:56:67:63:ba:d7:b9:d5:ba:62:a2:92:44:12:d6:
         d2:51:db:10:8b:32:fd:69:3a:5f:3d:06:76:df:b9:76:53:b6:
         12:18:87:6f:76:e5:04:cf:a1:28:29:ab:d2:3b:0e:87:5b:55:
         f9:6d:27:2d:c4:59:ee:ad:09:7d:4a:6d:95:9c:14:21:72:f6:
         75:20:5c:40:8e:92:12:11:a4:a4:f5:36:c4:d1:3e:41:f3:92:
         3b:14:60:8b:6a:0f:16:2b:a9:84:f4:6d:21:6f:e0:02:4b:11:
         29:d3:99:03:df:d5:ab:96:fb:f7:9b:07:10:51:b7:f1:f2:26:
         c9:6b:e4:d2:d6:30:e7:06:d0:4f:e3:24:e1:a5:d1:4d:28:fc:
         a6:6e:51:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----