Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/fa89aba752c6c0e8d21a7ea0d7cc721fbb2e23f9.roa
File:                     fa89aba752c6c0e8d21a7ea0d7cc721fbb2e23f9.roa (raw, json)
Hash identifier:          mXWfSa29UtgieJD8Nm/KsQTYVlu7Z9Z8oprKe6Suvx0=
Subject key identifier:   8A:1B:C0:B1:8B:5B:87:16:44:DC:F1:4A:A0:D4:D7:2B:DD:17:56:6A
Certificate issuer:       /CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
Certificate serial:       4440
Authority key identifier: 58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/fa89aba752c6c0e8d21a7ea0d7cc721fbb2e23f9.roa
Signing time:             Tue 18 Jan 2022 15:06:51 +0000
ROA not before:           Tue 18 Jan 2022 03:00:00 +0000
ROA not after:            Thu 18 Jan 2024 03:00:00 +0000
asID:                     22927
IP address blocks:        186.56.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17472 (0x4440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
        Validity
            Not Before: Jan 18 03:00:00 2022 GMT
            Not After : Jan 18 03:00:00 2024 GMT
        Subject: CN=fa89aba752c6c0e8d21a7ea0d7cc721fbb2e23f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:d9:84:59:50:e4:fa:89:cd:ff:0c:84:0b:
                    2e:77:82:a9:90:5b:a0:e4:25:44:b9:ba:4e:f5:88:
                    13:15:8d:61:c7:ec:39:b9:bf:1d:c1:07:82:c7:3e:
                    07:98:d4:b3:e5:7e:47:c2:05:07:b8:69:ac:cb:0c:
                    36:cd:39:51:4c:ef:26:e1:09:f1:06:7f:a8:8f:df:
                    50:dc:c2:be:c6:c1:b0:ff:6b:49:7e:12:d6:b2:6d:
                    56:1b:e9:f3:c7:bb:a1:8b:bf:02:e7:15:d3:39:d3:
                    b3:98:05:ec:bb:0c:19:d8:50:69:4d:bb:0a:ca:bb:
                    9c:75:1b:9e:e2:23:81:c7:fa:d3:40:ca:d8:81:42:
                    d7:7b:3f:f7:ea:46:e2:a1:7f:cf:cd:54:90:92:35:
                    fc:e3:0f:0d:f9:d5:c2:1e:5c:8c:1c:4d:d9:7c:41:
                    86:8b:75:0a:96:4a:35:9c:1f:53:00:ec:52:61:f7:
                    39:5f:3f:7d:f4:57:f8:de:09:04:45:51:86:94:9d:
                    c9:e9:d3:fa:ff:ee:e2:54:2a:3d:94:58:0f:36:c3:
                    ce:5a:4b:3e:88:9b:87:99:48:a3:35:d6:fe:92:3a:
                    20:de:13:80:71:60:ab:0f:b1:c9:ec:71:fa:d5:a8:
                    3f:db:ee:e5:90:87:ea:a9:11:05:fa:45:7d:e9:dd:
                    26:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1B:C0:B1:8B:5B:87:16:44:DC:F1:4A:A0:D4:D7:2B:DD:17:56:6A
            X509v3 Authority Key Identifier:
                keyid:58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/fa89aba752c6c0e8d21a7ea0d7cc721fbb2e23f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.56.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4e:87:63:1d:b9:79:e2:31:1e:ce:74:e1:5e:9c:8c:86:0e:c7:
         20:a1:e3:92:f9:1d:b0:8f:4a:08:83:34:d1:b8:6e:64:55:87:
         5f:51:10:cf:cc:88:5a:ec:7f:95:47:85:3d:fc:ad:96:64:89:
         22:5f:ef:af:c9:a7:83:02:e0:a7:fd:bc:97:bf:fa:6a:1b:b5:
         92:21:52:ba:6d:e2:56:89:67:50:40:b3:09:d1:b6:d5:90:dd:
         33:44:7c:cc:01:12:fc:ec:96:cb:2d:e6:e9:59:c1:5f:0e:0c:
         bb:8d:07:e9:43:59:b2:61:e1:ed:dd:52:a9:a7:2d:df:a5:7c:
         b0:91:02:a3:38:7d:6a:44:bd:8d:38:30:cd:08:5c:81:6f:c7:
         90:83:9f:8e:3d:6f:98:0e:ab:48:f1:b7:a2:39:0d:88:98:d4:
         ad:3a:2f:1b:6b:a6:4c:bd:cd:0a:56:1f:b7:ed:15:52:54:8f:
         0e:72:ce:25:be:d0:24:2b:a6:48:c3:96:73:78:1b:78:c4:0e:
         d8:3c:9f:d7:75:48:7d:8b:8c:94:56:39:f6:2a:a6:c3:cd:21:
         4e:64:69:c1:b3:9a:91:c1:12:59:58:4c:ab:c8:11:28:0f:ef:
         01:ad:2d:cf:dc:d8:21:99:09:a6:ee:cd:28:b1:03:45:16:f5:
         e4:fd:a9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----