Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/53e639af-cd7b-46ba-8172-f4b3feb05af9/7f3cafa03d7ac60fb25bbd99ab7d92d694f5018e.roa
File:                     7f3cafa03d7ac60fb25bbd99ab7d92d694f5018e.roa (raw, json)
Hash identifier:          U6Jm/0vYtK1jybRbsnyEogtsHhFDQKC//7cP8X79RTI=
Subject key identifier:   14:BF:6B:E3:AE:81:60:95:1B:B1:01:0C:E7:39:45:FC:8F:1D:5E:E8
Certificate issuer:       /CN=cc9025adc86618d4b13c3405def7aff69985eb16
Certificate serial:       0613C0
Authority key identifier: E2:10:16:11:62:21:C8:F1:BE:A2:D9:38:6D:1A:7B:EA:B2:AA:F1:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9025adc86618d4b13c3405def7aff69985eb16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/53e639af-cd7b-46ba-8172-f4b3feb05af9/7f3cafa03d7ac60fb25bbd99ab7d92d694f5018e.roa
Signing time:             Mon 13 Jun 2022 19:12:15 +0000
ROA not before:           Mon 13 Jun 2022 03:00:00 +0000
ROA not after:            Thu 13 Jun 2024 03:00:00 +0000
asID:                     52413
IP address blocks:        201.220.16.0/21 maxlen: 24
                          2803:8900::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398272 (0x613c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9025adc86618d4b13c3405def7aff69985eb16
        Validity
            Not Before: Jun 13 03:00:00 2022 GMT
            Not After : Jun 13 03:00:00 2024 GMT
        Subject: CN=7f3cafa03d7ac60fb25bbd99ab7d92d694f5018e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:30:34:cc:63:c4:8e:03:58:4e:32:7c:83:e5:
                    69:ec:5b:e0:e3:30:ed:c9:3e:78:7c:07:4b:15:2e:
                    42:fd:10:1d:50:81:cb:1b:d7:fc:43:25:78:3b:be:
                    9a:42:b4:e3:04:27:f9:0e:dc:e8:f7:45:45:29:f1:
                    96:6b:67:42:3f:2e:c7:cd:5f:81:89:09:33:9c:88:
                    15:de:ea:ff:44:92:bc:b3:ce:40:86:f5:f4:91:83:
                    3b:44:42:ee:fb:27:70:c1:e9:8f:bb:b6:c7:78:6b:
                    2b:1f:06:f0:09:1f:12:a8:93:7c:3a:45:72:eb:46:
                    d4:5e:dd:b1:89:e7:bf:d3:5d:a5:56:7b:89:53:30:
                    e6:82:39:da:41:46:9a:20:97:6d:5c:00:3d:ae:66:
                    cc:14:dc:1a:0f:fa:ba:40:a4:7f:c7:5f:59:bf:2f:
                    a6:e3:31:9f:1e:4b:b6:aa:3b:1d:3c:46:27:86:f6:
                    78:d5:e4:77:f4:f6:5e:ea:30:4f:1e:30:30:79:0f:
                    06:32:55:06:b1:09:c1:a3:9e:90:b0:85:9d:d3:1b:
                    c3:fc:67:32:ac:26:d2:ba:8e:ec:37:7a:ee:c8:19:
                    0e:ca:8a:94:fd:97:8a:ba:55:e6:3b:a1:db:1b:cb:
                    50:1a:a9:c8:e3:0d:4d:16:91:4d:2a:63:7f:06:e2:
                    8f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BF:6B:E3:AE:81:60:95:1B:B1:01:0C:E7:39:45:FC:8F:1D:5E:E8
            X509v3 Authority Key Identifier:
                keyid:E2:10:16:11:62:21:C8:F1:BE:A2:D9:38:6D:1A:7B:EA:B2:AA:F1:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc9025adc86618d4b13c3405def7aff69985eb16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/53e639af-cd7b-46ba-8172-f4b3feb05af9/7f3cafa03d7ac60fb25bbd99ab7d92d694f5018e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/53e639af-cd7b-46ba-8172-f4b3feb05af9/cc9025adc86618d4b13c3405def7aff69985eb16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.16.0/21
                IPv6:
                  2803:8900::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:8f:5a:69:32:7b:0b:68:85:6e:2d:d7:ec:a4:bd:cb:a1:49:
         64:a4:d4:a1:a6:15:f2:ff:ae:2f:09:34:11:e9:6a:f7:a8:ca:
         bd:1b:2c:44:02:55:01:3c:56:bd:bb:1d:7e:45:2a:22:7a:0d:
         82:4a:c8:3c:2f:f7:10:0b:6a:b7:2f:18:e8:a9:43:22:17:27:
         ae:02:e4:90:32:de:6d:0c:eb:56:cb:a7:8e:bb:aa:e3:a5:a6:
         ee:5e:96:7c:85:bb:eb:e3:c8:e4:46:90:fc:3a:08:f6:40:eb:
         b3:3e:43:38:cf:0f:fa:f5:f7:b0:cc:91:5d:ec:af:53:86:e8:
         43:c1:27:a8:04:3e:ea:e3:76:3c:1f:bf:dd:d2:f3:80:76:e8:
         5f:0e:f3:b2:08:41:a1:ff:f9:05:fd:66:4d:55:4b:e0:73:0f:
         f4:d2:e1:b6:cb:9c:ab:9e:2f:f4:02:17:79:dd:58:27:d0:92:
         90:4d:19:20:64:f5:b2:58:dd:cb:45:31:8c:e1:89:a9:49:30:
         b9:50:df:36:5e:b7:2d:16:bb:88:87:1a:e6:70:d2:78:19:b3:
         10:85:3b:39:24:47:d9:0e:cf:2d:31:db:81:54:1d:64:09:70:
         86:4e:74:64:6a:30:5a:29:df:8c:46:22:82:d4:ab:58:a7:c2:
         a0:52:86:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----