Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/98b28503f8958a3f68469965a792cfbdb155b49d.roa
File:                     98b28503f8958a3f68469965a792cfbdb155b49d.roa (raw, json)
Hash identifier:          81awFnM4PYdke6gjx1QdBukCdUt8rf2J42dm0T6BRTc=
Subject key identifier:   31:EE:A7:34:7F:F4:F1:89:DE:4E:6D:AA:28:E4:8B:8C:DF:58:18:C3
Certificate issuer:       /CN=4b0ff3b0bb36514a29ceced3a440524fd7f636dc
Certificate serial:       0712DA
Authority key identifier: 33:53:3D:1D:1F:5A:F1:D7:5C:44:A5:38:F4:4F:00:64:DC:F8:DC:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/98b28503f8958a3f68469965a792cfbdb155b49d.roa
Signing time:             Wed 24 Mar 2021 14:28:38 +0000
ROA not before:           Wed 24 Mar 2021 14:28:38 +0000
ROA not after:            Tue 24 Mar 2026 14:28:38 +0000
asID:                     3597
IP address blocks:        168.96.0.0/16 maxlen: 24
                          200.10.202.0/24 maxlen: 24
                          2001:1318::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463578 (0x712da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b0ff3b0bb36514a29ceced3a440524fd7f636dc
        Validity
            Not Before: Mar 24 14:28:38 2021 GMT
            Not After : Mar 24 14:28:38 2026 GMT
        Subject: CN=98b28503f8958a3f68469965a792cfbdb155b49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:2d:55:e7:a0:57:aa:f0:ab:f9:83:da:ea:36:
                    35:cb:22:a8:1d:86:e0:99:00:a5:07:a3:b5:1c:f5:
                    0b:07:cc:33:65:d0:33:e2:85:26:75:55:8a:11:ba:
                    68:50:cf:a7:b8:85:87:c0:91:ee:b6:5c:30:23:1a:
                    61:1f:fc:37:6a:e0:31:93:8d:98:41:35:64:a6:ee:
                    26:f7:7f:77:b8:80:72:f7:7b:a8:80:42:d7:fd:e9:
                    31:a8:d8:d0:24:27:f2:d4:d3:5c:38:76:9c:8d:05:
                    9e:86:13:28:4f:4a:d5:7d:d5:5a:29:90:79:39:2f:
                    6e:fa:69:51:f9:68:d3:c8:5f:89:ce:b3:40:5c:34:
                    fa:33:10:29:4a:c4:df:8d:47:52:94:a9:ef:5f:33:
                    5a:57:68:a6:16:ee:4f:af:5f:9a:bd:82:09:62:99:
                    62:b1:f7:6d:65:6c:78:cd:7a:e9:fd:c7:d2:83:1b:
                    1e:b0:4a:86:4e:2d:ec:6d:2a:84:87:a9:e0:4a:44:
                    e2:12:60:6d:bb:f0:03:a9:82:33:53:80:cd:60:95:
                    d7:8b:06:e4:dc:e0:c6:85:d7:ec:5d:56:2c:81:76:
                    23:4d:a6:36:ec:e8:30:61:f7:d2:f5:07:a2:b2:3a:
                    fb:8e:a9:49:0b:55:f9:b2:6a:a3:10:2f:52:d5:4f:
                    52:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EE:A7:34:7F:F4:F1:89:DE:4E:6D:AA:28:E4:8B:8C:DF:58:18:C3
            X509v3 Authority Key Identifier:
                keyid:33:53:3D:1D:1F:5A:F1:D7:5C:44:A5:38:F4:4F:00:64:DC:F8:DC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/98b28503f8958a3f68469965a792cfbdb155b49d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.96.0.0/16
                  200.10.202.0/24
                IPv6:
                  2001:1318::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:8f:d6:a0:ed:a4:cf:58:89:3c:12:40:e7:4c:3b:67:82:a2:
         d9:ee:cb:97:83:93:15:62:cf:61:f5:3c:ab:be:8b:cd:79:49:
         7c:16:eb:99:71:71:b4:e7:c2:cd:56:ea:f4:7d:d6:b6:a8:83:
         24:18:63:08:cb:a0:0f:5d:1b:f5:03:35:4a:47:62:8f:a2:22:
         50:a9:e9:a7:d1:f7:a6:fd:84:f0:f1:86:c5:a1:71:a8:b5:f7:
         5e:7d:37:df:fb:3c:ad:61:ec:09:6c:0e:36:30:c7:7a:cc:34:
         aa:f3:9e:66:25:2a:b9:d7:98:ad:59:70:b7:2b:5d:09:25:1d:
         da:1b:2a:f7:f6:e3:30:f9:9d:98:d2:e3:e1:f6:d8:db:fe:14:
         98:0f:40:26:36:1b:73:ce:1e:61:21:4e:07:80:7e:12:db:42:
         8e:94:7c:af:e8:e6:81:ac:c0:73:9f:5e:e6:55:97:ae:78:a0:
         15:5c:01:e4:8f:50:fe:0b:02:c2:c9:92:98:be:09:e3:d6:6c:
         35:43:d6:44:7a:65:f6:a9:32:0e:7b:43:39:04:68:1d:35:2f:
         76:68:40:da:a4:30:bd:89:32:26:3f:77:e9:65:45:9d:a6:1f:
         14:22:66:28:15:d4:02:49:19:89:55:1c:ca:03:27:c7:d3:38:
         87:0e:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----