Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5065d047-0bc8-4910-8bf6-072848176eb3/1d5a257f46c4449eee71d664d2a6e09077063e6f.roa
File:                     1d5a257f46c4449eee71d664d2a6e09077063e6f.roa (raw, json)
Hash identifier:          jN+NYNbjKT7IZpD6BQZT0adPb9b049/RvLS2CgFu1b0=
Subject key identifier:   2B:52:A6:DF:11:AF:6C:65:B0:DC:ED:AE:CF:47:B2:F4:96:C9:A5:93
Certificate issuer:       /CN=c663d17f7cf5e52db765787876ed9a3f5bbcd5ce
Certificate serial:       0443AE
Authority key identifier: 55:2C:FD:83:1D:9D:00:25:F3:33:BA:27:71:7F:0C:18:37:AC:CD:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c663d17f7cf5e52db765787876ed9a3f5bbcd5ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5065d047-0bc8-4910-8bf6-072848176eb3/1d5a257f46c4449eee71d664d2a6e09077063e6f.roa
Signing time:             Wed 24 Mar 2021 14:34:13 +0000
ROA not before:           Wed 24 Mar 2021 14:34:13 +0000
ROA not after:            Tue 24 Mar 2026 14:34:13 +0000
asID:                     271788
IP address blocks:        190.171.64.0/22 maxlen: 24
                          2803:dfe0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279470 (0x443ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c663d17f7cf5e52db765787876ed9a3f5bbcd5ce
        Validity
            Not Before: Mar 24 14:34:13 2021 GMT
            Not After : Mar 24 14:34:13 2026 GMT
        Subject: CN=1d5a257f46c4449eee71d664d2a6e09077063e6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:6f:5f:09:bf:0e:d1:93:e4:c8:61:b7:36:5f:
                    2c:aa:6a:29:f0:a5:10:35:6e:ea:28:72:0e:59:da:
                    d8:17:b8:0b:70:20:7c:18:68:32:ef:b0:2b:aa:6e:
                    69:47:47:e4:0e:67:52:cd:0d:24:96:a8:bf:14:87:
                    03:14:25:da:f0:46:5e:f0:be:ae:1c:4d:1d:f4:f5:
                    6c:08:65:46:f8:e5:63:69:1d:f3:e8:e6:87:39:84:
                    0b:d3:74:b8:c7:64:ec:75:44:ed:49:ee:56:3e:92:
                    36:1b:ec:fa:79:d5:c0:66:60:0a:67:db:f8:f6:0c:
                    9b:2a:c8:fa:4d:b0:2b:b2:7c:52:12:4e:33:1d:28:
                    09:5a:e2:78:f8:9c:90:6c:fb:5e:d1:13:8b:38:15:
                    ff:70:a1:1b:01:18:e4:a3:2f:dd:85:79:73:0e:0c:
                    30:6d:86:02:b1:fe:ed:06:c1:65:c9:ea:ae:5d:ad:
                    d8:f2:37:54:31:13:d9:bb:56:70:25:9c:52:4e:1b:
                    c3:6b:fe:3a:22:b6:b0:c3:3c:eb:01:c1:e6:70:bb:
                    ea:d9:e6:27:0a:30:39:35:b5:c6:de:2f:cc:d8:60:
                    52:cf:a0:e3:d3:98:46:e4:36:71:e5:60:5b:2b:6d:
                    7d:95:c9:b6:6a:b3:55:49:da:56:c8:78:33:b2:4b:
                    de:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:52:A6:DF:11:AF:6C:65:B0:DC:ED:AE:CF:47:B2:F4:96:C9:A5:93
            X509v3 Authority Key Identifier:
                keyid:55:2C:FD:83:1D:9D:00:25:F3:33:BA:27:71:7F:0C:18:37:AC:CD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c663d17f7cf5e52db765787876ed9a3f5bbcd5ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5065d047-0bc8-4910-8bf6-072848176eb3/1d5a257f46c4449eee71d664d2a6e09077063e6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5065d047-0bc8-4910-8bf6-072848176eb3/c663d17f7cf5e52db765787876ed9a3f5bbcd5ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.64.0/22
                IPv6:
                  2803:dfe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:22:e2:1f:0b:a9:18:4a:42:23:aa:ca:21:d9:96:73:64:b0:
         d1:0e:5b:35:75:3c:d1:41:d2:ee:c3:96:ec:81:d9:a6:ee:66:
         19:7c:e0:eb:27:0b:9b:d0:b4:e7:57:be:f5:36:67:ed:4a:82:
         11:f2:98:9f:30:72:28:3e:90:73:0d:73:7c:42:45:4a:4f:77:
         ea:00:65:ec:a7:15:b7:1d:c6:f1:e0:e8:7a:18:35:28:bb:f5:
         f6:9a:13:70:24:02:80:3c:7c:86:23:c1:28:e8:26:ab:df:30:
         18:38:61:34:9c:ea:c4:7a:84:88:4f:e5:9d:5c:15:c3:ed:17:
         88:ac:8f:3c:f9:c8:ee:d4:ed:6a:f3:44:1b:d0:db:43:d0:df:
         be:70:09:b6:90:fe:be:98:f8:f5:54:54:10:97:e5:3d:32:63:
         49:5d:05:36:fe:14:27:51:40:9b:d8:39:93:63:bd:ab:e0:b5:
         55:79:17:fd:bb:d3:a8:09:53:75:46:54:30:cd:0a:6d:b4:48:
         41:eb:09:cc:c8:8d:f4:7b:f4:3f:78:bb:80:02:78:cd:dc:c0:
         90:5c:c8:81:cb:a9:3c:6d:db:34:1b:8e:e9:16:60:c6:11:a4:
         f6:bc:56:74:2e:c4:6e:4a:e8:fd:82:35:ee:dc:f8:82:63:b0:
         37:e7:13:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----