Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e696eab-5bfa-47ab-9eef-8bec393c4e60/00a923f916156a6ec166ae3743bd39edf4b6c649.roa
File:                     00a923f916156a6ec166ae3743bd39edf4b6c649.roa (raw, json)
Hash identifier:          hvCj2RhtPDsbDNsxmRA3IS9RIPUwHtgts7hoOQO31LQ=
Subject key identifier:   FA:3E:A4:61:22:8B:B2:AF:40:80:88:09:D4:99:39:39:BC:D1:8D:32
Certificate issuer:       /CN=28420f8200dcb670f177aab28b17c8fceb40aee7
Certificate serial:       07A7BB
Authority key identifier: B5:A1:93:00:83:69:61:BB:24:FA:2B:2D:37:7F:60:84:B5:80:69:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28420f8200dcb670f177aab28b17c8fceb40aee7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e696eab-5bfa-47ab-9eef-8bec393c4e60/00a923f916156a6ec166ae3743bd39edf4b6c649.roa
Signing time:             Wed 24 Mar 2021 14:43:25 +0000
ROA not before:           Wed 24 Mar 2021 14:43:25 +0000
ROA not after:            Tue 24 Mar 2026 14:43:25 +0000
asID:                     265623
IP address blocks:        201.46.92.0/22 maxlen: 22
                          2806:3a4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501691 (0x7a7bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28420f8200dcb670f177aab28b17c8fceb40aee7
        Validity
            Not Before: Mar 24 14:43:25 2021 GMT
            Not After : Mar 24 14:43:25 2026 GMT
        Subject: CN=00a923f916156a6ec166ae3743bd39edf4b6c649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e0:3e:51:91:db:34:58:81:21:b7:7f:a4:49:
                    7f:31:62:f8:81:4f:72:d4:45:63:4e:4b:f0:57:67:
                    a2:5e:2c:c7:04:f9:fa:da:af:f6:99:c9:ce:0c:63:
                    f8:e5:81:e0:cc:1a:76:72:e5:68:43:d5:86:13:cc:
                    d4:bb:de:4d:2d:f2:c1:3d:70:19:66:29:24:c6:3f:
                    95:94:4c:dc:84:7a:3d:df:53:c2:cd:f5:b6:41:c1:
                    de:73:1d:02:45:0e:3c:db:bc:e8:81:61:bc:0e:4a:
                    fc:ed:30:c0:48:0c:48:29:54:1d:81:1f:a3:34:9e:
                    08:28:a9:07:1c:cc:75:7d:6d:96:77:09:cc:d6:c9:
                    4d:02:bf:4a:a6:43:57:7b:cd:e3:c8:c9:db:e5:d7:
                    0f:73:c9:cd:cd:6c:5c:e4:3f:f1:91:49:97:b9:0d:
                    bd:cf:4e:3f:d4:d9:27:b5:8b:e7:71:7f:b4:ba:67:
                    88:03:c3:3e:5d:8b:d7:77:29:58:9e:f8:38:df:fa:
                    4b:e7:bb:fe:c1:9d:9a:27:4d:8e:68:2c:f2:04:5d:
                    03:0a:ba:e4:20:d9:5c:c7:fd:75:90:59:a1:e9:4e:
                    7b:8e:81:38:6d:2b:59:cb:a7:1d:4f:87:f7:2e:ce:
                    b2:d9:d4:5c:c7:4d:8f:82:d3:c2:c6:5e:8a:af:92:
                    ff:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3E:A4:61:22:8B:B2:AF:40:80:88:09:D4:99:39:39:BC:D1:8D:32
            X509v3 Authority Key Identifier:
                keyid:B5:A1:93:00:83:69:61:BB:24:FA:2B:2D:37:7F:60:84:B5:80:69:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28420f8200dcb670f177aab28b17c8fceb40aee7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e696eab-5bfa-47ab-9eef-8bec393c4e60/00a923f916156a6ec166ae3743bd39edf4b6c649.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e696eab-5bfa-47ab-9eef-8bec393c4e60/28420f8200dcb670f177aab28b17c8fceb40aee7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.92.0/22
                IPv6:
                  2806:3a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:d3:fe:a9:d6:fe:92:b5:12:73:21:6c:c0:3e:d7:91:22:45:
         6b:97:3a:5a:3d:32:4b:cb:d4:de:9d:13:57:35:c8:51:85:c4:
         15:79:3a:64:6c:8b:1c:93:77:c3:fd:c6:6f:25:0e:a6:76:13:
         d6:e9:af:ae:1d:c7:3f:df:70:15:80:a8:97:57:98:0e:72:8d:
         d3:a7:11:c0:7e:7c:bd:af:19:63:2e:43:dc:4f:d2:75:6e:e5:
         1b:1f:e9:fa:cd:19:f5:22:54:7b:58:8e:1b:45:fd:a7:87:19:
         54:cc:83:9a:44:7b:df:8a:2a:6b:b0:dc:c6:e7:d7:c8:9a:9c:
         a5:9e:5b:04:7f:2d:41:07:82:4e:aa:f7:a0:19:c4:bf:2d:c8:
         78:b3:8f:d7:4c:e3:a2:0a:67:1c:96:ca:de:1c:b7:25:55:53:
         51:0b:71:b3:4e:94:18:c8:fe:09:76:06:bd:5d:f9:2c:08:b1:
         56:6e:b8:a4:80:a6:df:28:12:21:4d:03:cc:86:d3:18:06:63:
         0e:83:27:8b:1d:10:9d:e4:65:8c:f6:52:fd:e3:81:f8:35:10:
         bd:ce:8a:4c:d8:5a:a1:62:a2:72:3b:52:5f:5f:c0:cc:57:af:
         ae:b9:76:ff:f1:82:f2:34:18:1b:a3:a8:25:df:c1:4d:0e:bb:
         95:20:96:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----