Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/61795a43-9fe0-40d6-ab61-82510e0f4c0c/4d269a5af1629e4dbe3658b03316fa90578932d3.roa
File:                     4d269a5af1629e4dbe3658b03316fa90578932d3.roa (raw, json)
Hash identifier:          mH1mxrx+7FGNwfHoRHbZdAMJDz+KYUafsNMWlNenEvM=
Subject key identifier:   80:87:7B:D6:2B:54:81:36:4D:F8:DD:04:52:D1:02:15:0E:41:08:2D
Certificate issuer:       /CN=b337a534780cb1f89f02f57838f0b895e5da3b0e
Certificate serial:       03430C
Authority key identifier: B3:B6:62:F8:E5:E9:53:20:83:9E:CA:06:A4:37:1B:2E:01:2A:9F:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b337a534780cb1f89f02f57838f0b895e5da3b0e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/61795a43-9fe0-40d6-ab61-82510e0f4c0c/4d269a5af1629e4dbe3658b03316fa90578932d3.roa
Signing time:             Wed 24 Mar 2021 14:40:53 +0000
ROA not before:           Wed 24 Mar 2021 14:40:52 +0000
ROA not after:            Tue 24 Mar 2026 14:40:52 +0000
asID:                     270071
IP address blocks:        186.219.48.0/22 maxlen: 24
                          2803:e3e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213772 (0x3430c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b337a534780cb1f89f02f57838f0b895e5da3b0e
        Validity
            Not Before: Mar 24 14:40:52 2021 GMT
            Not After : Mar 24 14:40:52 2026 GMT
        Subject: CN=4d269a5af1629e4dbe3658b03316fa90578932d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:00:06:06:fd:66:36:7e:38:ea:db:d6:e9:de:
                    58:99:bb:c3:12:7b:eb:eb:5f:ed:fe:be:8b:17:38:
                    f5:13:5b:1a:10:e6:b5:60:69:4f:d3:6d:f2:18:54:
                    f1:c8:dc:54:5e:8c:7f:73:d6:5d:36:a3:bd:3f:40:
                    19:17:df:92:d2:3d:b6:0f:ae:0e:0c:d0:92:6e:a1:
                    2b:80:0b:61:36:17:4b:50:15:35:4e:be:98:4d:95:
                    52:f8:16:7c:d3:84:94:0f:81:55:a4:f6:59:60:02:
                    58:d2:f9:94:08:df:20:47:59:b2:1e:a3:79:eb:15:
                    b4:d6:c2:40:25:b5:6e:b4:9c:37:7b:d3:b7:cb:c5:
                    10:0f:a4:2d:08:88:fb:f3:9e:d3:4f:43:4a:88:59:
                    15:5b:a7:36:13:ac:ae:a5:c2:24:54:c3:9f:6f:45:
                    4b:31:ce:59:02:7d:04:d9:d4:04:52:ad:da:03:37:
                    91:8d:e6:b0:c2:a0:22:81:40:b8:47:19:a4:6c:59:
                    42:cb:64:1d:29:1f:65:10:1e:62:a8:69:d6:ae:93:
                    46:c4:36:4f:91:19:70:94:37:6e:19:68:70:94:d2:
                    cf:e7:e7:a5:9c:7f:04:30:c7:8a:97:ac:01:b6:a7:
                    60:e1:d3:9c:84:d2:6e:89:88:5d:ab:32:0a:17:5e:
                    bf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:87:7B:D6:2B:54:81:36:4D:F8:DD:04:52:D1:02:15:0E:41:08:2D
            X509v3 Authority Key Identifier:
                keyid:B3:B6:62:F8:E5:E9:53:20:83:9E:CA:06:A4:37:1B:2E:01:2A:9F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b337a534780cb1f89f02f57838f0b895e5da3b0e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/61795a43-9fe0-40d6-ab61-82510e0f4c0c/4d269a5af1629e4dbe3658b03316fa90578932d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/61795a43-9fe0-40d6-ab61-82510e0f4c0c/b337a534780cb1f89f02f57838f0b895e5da3b0e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.48.0/22
                IPv6:
                  2803:e3e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:f2:2a:e5:3b:30:1a:89:1d:00:86:dd:09:db:56:14:a2:b9:
         23:2e:13:40:f2:e1:b8:84:9c:f1:5b:bd:6f:a1:53:fa:2f:c4:
         c0:c8:96:66:0e:0a:b4:f1:df:14:9e:eb:7e:37:bd:09:8d:8b:
         d7:ef:4a:a2:dc:72:a7:57:8e:b2:9a:3a:09:20:96:6d:37:32:
         21:da:a3:86:e5:02:92:61:bd:53:9a:ee:58:ef:e6:de:8d:c4:
         a3:b3:4c:c0:42:7e:6d:b1:aa:18:29:46:49:58:8f:32:51:f9:
         11:12:69:9e:76:b2:33:0f:ef:91:2b:29:e9:01:af:84:e5:e6:
         2e:45:7e:02:aa:a1:4f:33:90:89:df:5b:70:f6:fe:c5:1d:9b:
         6d:1c:7e:8e:3f:6a:3e:b6:48:aa:70:0e:0a:ae:83:e6:0a:a2:
         c2:62:ce:50:5e:7e:6e:a0:3f:ad:e3:8a:38:87:c2:6d:a8:16:
         fe:c3:a1:bb:0d:6f:f1:13:7d:a7:37:ce:3c:ba:f6:11:85:de:
         ff:4b:ad:35:fb:8d:49:6f:4f:4f:28:30:02:8b:3b:1f:cd:9c:
         45:92:10:13:ec:f3:5b:01:d7:3c:2f:4c:26:39:d5:71:d2:9b:
         24:5e:dd:6d:ed:31:54:df:f7:53:0a:2d:80:71:4f:b8:60:0e:
         b4:3b:48:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----