Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/301a8f2dab28c1dc957a0aef11843d41bcc0eefd.roa
File:                     301a8f2dab28c1dc957a0aef11843d41bcc0eefd.roa (raw, json)
Hash identifier:          v/xVWXV/qTBY93uJ9b63LCaZiSlgD2OkdEKXXyamVcU=
Subject key identifier:   F2:44:DE:3E:6B:DD:DA:02:17:24:3E:2D:3F:18:05:55:D7:70:0B:21
Certificate issuer:       /CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
Certificate serial:       5393
Authority key identifier: 58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/301a8f2dab28c1dc957a0aef11843d41bcc0eefd.roa
Signing time:             Tue 18 Jan 2022 15:34:22 +0000
ROA not before:           Tue 18 Jan 2022 03:00:00 +0000
ROA not after:            Thu 18 Jan 2024 03:00:00 +0000
asID:                     11311
IP address blocks:        186.61.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21395 (0x5393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
        Validity
            Not Before: Jan 18 03:00:00 2022 GMT
            Not After : Jan 18 03:00:00 2024 GMT
        Subject: CN=301a8f2dab28c1dc957a0aef11843d41bcc0eefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:e4:fa:8b:25:53:ae:bc:fe:73:2f:cf:c1:
                    3c:31:4b:9f:0c:97:3b:5b:12:95:dc:ee:10:7b:74:
                    2d:8e:53:2d:2d:b6:36:c0:e2:9f:d4:6f:4f:e4:a5:
                    e4:4c:23:d9:07:03:42:8e:ee:f9:5c:62:85:7b:3f:
                    87:50:fe:25:bc:e1:41:a9:48:1d:06:0d:1f:4d:42:
                    57:87:a5:40:06:29:fc:be:66:ba:02:c0:5d:83:00:
                    9c:cf:4e:25:1c:c7:8f:0d:8f:d2:80:9c:ca:06:7e:
                    bb:f9:85:c5:18:1b:f2:7d:f9:f3:04:59:85:2c:d6:
                    9a:8f:b3:2c:e9:08:3f:df:5a:55:55:f3:9b:87:0d:
                    c6:fd:2c:d0:bf:6d:cb:f2:0e:3d:94:fb:df:88:f6:
                    5e:98:73:27:32:e0:da:46:65:b8:2c:3a:5b:3e:0d:
                    cf:58:9a:55:12:f1:50:32:1e:28:86:13:fb:86:8a:
                    61:f4:94:be:37:ce:97:a4:9e:df:8a:32:d6:52:1d:
                    b1:04:27:45:e3:76:db:13:d1:f6:fe:70:f3:ab:82:
                    ea:ff:ad:b7:9b:f9:6f:93:73:40:e2:c7:73:69:99:
                    95:ed:30:41:96:4f:06:4f:44:d3:f6:c4:3a:72:d6:
                    0f:cd:a3:31:b8:c3:99:58:71:16:d6:82:a6:79:ba:
                    35:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:44:DE:3E:6B:DD:DA:02:17:24:3E:2D:3F:18:05:55:D7:70:0B:21
            X509v3 Authority Key Identifier:
                keyid:58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/301a8f2dab28c1dc957a0aef11843d41bcc0eefd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.61.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:a0:38:cc:7d:30:2a:ce:d8:51:fa:14:13:aa:ab:b6:df:65:
         13:ad:27:ed:07:24:1c:a4:d6:33:38:c0:69:69:6c:cc:ac:b9:
         40:64:cd:cb:a4:3c:c0:53:6d:19:b6:a7:18:00:ff:7c:8d:b3:
         d0:cd:bf:77:63:89:a2:be:a2:4c:44:31:8a:2a:72:5d:08:b3:
         c7:82:b2:5f:96:a7:69:15:84:fa:96:2e:67:64:a1:87:68:aa:
         d0:6b:c3:68:b2:af:11:a5:2f:b3:6a:55:1e:dc:d8:f1:d2:bd:
         b8:62:43:40:4b:1b:0e:04:9f:ed:fb:1b:4e:21:00:5c:2f:1d:
         d8:54:d6:22:2c:3f:d8:aa:d8:3d:f1:11:20:9e:5c:25:4f:16:
         a8:3c:a4:b2:09:78:97:9b:62:87:af:52:14:1d:a7:f2:5b:cc:
         4b:fa:19:cc:26:85:31:52:0a:4c:ec:1c:53:6e:3c:8e:aa:a7:
         05:f9:7d:64:cc:7f:28:87:e7:9f:ef:12:55:9b:95:f2:53:df:
         62:2b:04:93:f4:06:ac:6c:2c:57:ed:58:c7:f6:c3:f9:69:8b:
         72:2b:ee:4a:54:65:a4:46:7e:42:9d:81:ac:93:7d:f1:9e:d4:
         41:d8:97:80:44:04:37:42:db:a1:c4:11:5b:13:d2:d3:79:3d:
         6f:41:1f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----