Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/116c582df7ada9095975806aea2a245cd7e0e769.roa
File:                     116c582df7ada9095975806aea2a245cd7e0e769.roa (raw, json)
Hash identifier:          yIaZdKnxda9/4VZBrSTe02tUqQHx/F6u3WtMkR8Ie84=
Subject key identifier:   B6:02:99:AB:56:36:F7:15:B9:CF:F2:98:CE:47:15:4E:E9:A5:8E:31
Certificate issuer:       /CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
Certificate serial:       0D4020
Authority key identifier: 08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/116c582df7ada9095975806aea2a245cd7e0e769.roa
Signing time:             Wed 24 Mar 2021 14:47:21 +0000
ROA not before:           Wed 24 Mar 2021 14:47:21 +0000
ROA not after:            Tue 24 Mar 2026 14:47:21 +0000
asID:                     27717
IP address blocks:        186.167.240.0/24 maxlen: 24
                          2800:930::/30 maxlen: 32
                          2800:934::/31 maxlen: 32
                          2800:936::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868384 (0xd4020)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fbc1b8c542f9384f9a2004e66a61080248cdc6
        Validity
            Not Before: Mar 24 14:47:21 2021 GMT
            Not After : Mar 24 14:47:21 2026 GMT
        Subject: CN=116c582df7ada9095975806aea2a245cd7e0e769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:80:c9:9d:28:9a:97:9a:7f:11:f7:48:72:55:
                    d7:af:4a:70:88:e9:0e:3b:1c:ed:f2:8b:a5:8d:0c:
                    f4:1d:a6:cd:ad:18:29:e2:43:9e:49:bd:4c:2e:16:
                    23:b8:dc:64:aa:b6:56:bb:ae:67:f2:2a:f3:4c:d9:
                    4d:45:ba:50:8a:2b:c5:04:0f:2d:84:47:69:d2:69:
                    1b:1e:84:30:72:78:b8:54:71:92:63:06:00:6c:83:
                    03:2d:82:1c:4e:b2:32:3c:21:ad:8c:d8:fe:a9:b1:
                    9d:3f:cb:bb:60:bb:b8:aa:fe:23:84:c1:0b:35:35:
                    9c:3a:a1:77:0e:81:15:98:cb:d8:bb:ff:f7:c2:5a:
                    df:f1:f7:b2:66:52:05:fa:4f:30:e9:2f:e3:7a:00:
                    71:83:52:88:38:71:65:8a:b6:9e:89:6a:c7:99:ed:
                    dc:a2:8b:f4:4c:d0:67:59:3a:88:92:4d:cf:56:ef:
                    2e:fd:60:eb:cd:02:65:3a:db:26:fe:12:d2:0f:3d:
                    f1:97:cf:32:8a:4a:5f:d3:13:cf:c6:a8:90:39:91:
                    7b:4e:14:9d:0e:e0:a2:6c:63:74:49:dc:4f:a0:c0:
                    4b:53:1e:51:45:97:a8:4a:0e:6c:2f:0b:06:be:f8:
                    fb:89:17:62:34:13:d1:f6:45:6d:04:bd:4f:04:94:
                    fb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:02:99:AB:56:36:F7:15:B9:CF:F2:98:CE:47:15:4E:E9:A5:8E:31
            X509v3 Authority Key Identifier:
                keyid:08:13:39:09:AC:82:C2:8D:B1:37:8F:72:53:42:C9:9F:9F:8D:53:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96fbc1b8c542f9384f9a2004e66a61080248cdc6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/116c582df7ada9095975806aea2a245cd7e0e769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/55f99e10-78af-42f6-a7a5-0892ef22d1d8/96fbc1b8c542f9384f9a2004e66a61080248cdc6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.167.240.0/24
                IPv6:
                  2800:930::-2800:936:ffff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         0b:10:17:5f:17:34:c7:1c:33:42:3b:ee:65:96:6b:69:79:dc:
         42:91:81:d7:4a:68:f0:5d:80:c5:af:0e:3c:cc:8c:29:28:d9:
         09:33:02:22:fa:84:14:b2:72:b2:7c:8f:15:fa:af:cd:5d:ef:
         76:96:2f:3d:5f:75:69:f2:a3:28:71:9a:cc:42:c9:eb:65:90:
         7e:6c:08:08:46:e0:d8:57:00:67:a0:41:de:0a:5d:66:2d:c5:
         b3:a0:8f:92:76:35:42:5c:ef:fc:fb:0c:6a:45:6b:05:56:46:
         b9:ff:16:07:a9:dd:6c:c1:8c:af:c9:b4:03:4e:1b:bd:6f:c9:
         3c:fb:ce:25:1d:29:c9:2f:12:fc:7b:e5:fe:82:b1:5a:39:31:
         19:c8:da:31:23:3b:a8:04:39:62:ba:24:f5:b9:a5:3f:29:78:
         a5:78:71:e6:25:5c:61:51:88:0d:7a:f3:79:5e:aa:3d:a4:fe:
         78:d1:c0:6d:da:1c:b6:41:ac:ff:ee:55:59:66:cb:15:e3:5c:
         dd:2d:7b:95:22:f5:b1:6a:dd:79:bf:79:c6:cf:b8:03:06:39:
         c8:ca:5f:5d:a0:43:95:66:56:9d:77:b9:f0:1e:13:98:d7:c4:
         57:b9:1e:68:49:e4:90:85:9c:ab:19:4f:d5:0b:d2:4e:08:63:
         e6:a8:51:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----