Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/63fd9cd9-6349-4d55-82f3-69155590a385/628b6fbbbfb58eb3640e6afde5da168927b32116.roa
File:                     628b6fbbbfb58eb3640e6afde5da168927b32116.roa (raw, json)
Hash identifier:          kBDS2w1zpEeO4KNhJCmhV0Cpw/2DPaO6aiqVVaP3mFM=
Subject key identifier:   92:9A:0D:AD:95:2D:7B:F4:13:7F:E1:30:14:EB:CC:02:BC:B5:DF:A4
Certificate issuer:       /CN=4520cad2b02202800fc6f594ab8b392ad20e8934
Certificate serial:       0303D8
Authority key identifier: 8E:EE:41:CE:A4:CB:F5:1E:32:E2:12:18:C8:ED:CD:0B:80:6F:9B:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4520cad2b02202800fc6f594ab8b392ad20e8934.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/63fd9cd9-6349-4d55-82f3-69155590a385/628b6fbbbfb58eb3640e6afde5da168927b32116.roa
Signing time:             Wed 24 Mar 2021 14:32:01 +0000
ROA not before:           Wed 24 Mar 2021 14:32:01 +0000
ROA not after:            Tue 24 Mar 2026 14:32:01 +0000
asID:                     269994
IP address blocks:        177.53.120.0/22 maxlen: 24
                          2803:c1e0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197592 (0x303d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4520cad2b02202800fc6f594ab8b392ad20e8934
        Validity
            Not Before: Mar 24 14:32:01 2021 GMT
            Not After : Mar 24 14:32:01 2026 GMT
        Subject: CN=628b6fbbbfb58eb3640e6afde5da168927b32116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0f:40:b6:e0:ee:3c:fc:c9:90:b0:05:d5:8e:
                    d1:cf:19:d8:8f:63:55:0f:c2:f1:b0:3c:60:bf:24:
                    0d:56:a7:44:34:70:bf:62:37:c0:68:5b:08:55:2b:
                    eb:d5:23:fb:2a:4a:b0:5a:5b:5d:c4:34:0d:5c:48:
                    5c:84:0d:7f:c6:15:c0:38:93:4e:86:d7:86:27:32:
                    1a:9b:fb:ec:49:32:08:e4:de:ab:10:f5:5e:0b:36:
                    bb:7f:57:a4:2b:d9:bc:0c:cf:95:53:3b:90:f3:13:
                    6c:ae:f1:b7:4c:58:0f:c8:1d:48:5c:99:08:0d:4e:
                    64:01:ca:64:3e:d4:aa:a1:1e:24:bd:50:b6:39:11:
                    d8:b2:dc:95:ef:7f:78:13:67:01:f9:4d:40:97:05:
                    5a:1d:01:9d:ec:47:0b:46:18:73:3f:fe:9d:1d:23:
                    23:d3:71:7f:0e:7b:2f:40:40:31:9f:1b:de:28:6f:
                    3c:6d:66:b7:bc:34:b5:65:8d:6c:f4:25:90:88:c4:
                    8f:44:79:0a:43:bb:e1:72:aa:8f:4d:9b:8b:ff:4b:
                    29:f7:0e:c4:fa:dc:c6:d6:a4:f9:38:ed:f3:97:36:
                    68:c1:a7:5d:18:ef:a7:90:43:b4:42:2b:2a:ae:05:
                    68:a5:53:5d:b6:f6:d0:64:e2:57:4d:85:ae:af:a3:
                    af:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:9A:0D:AD:95:2D:7B:F4:13:7F:E1:30:14:EB:CC:02:BC:B5:DF:A4
            X509v3 Authority Key Identifier:
                keyid:8E:EE:41:CE:A4:CB:F5:1E:32:E2:12:18:C8:ED:CD:0B:80:6F:9B:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4520cad2b02202800fc6f594ab8b392ad20e8934.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/63fd9cd9-6349-4d55-82f3-69155590a385/628b6fbbbfb58eb3640e6afde5da168927b32116.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/63fd9cd9-6349-4d55-82f3-69155590a385/4520cad2b02202800fc6f594ab8b392ad20e8934.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.120.0/22
                IPv6:
                  2803:c1e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:6b:13:66:cd:b2:81:79:50:67:58:34:f2:b0:e5:22:27:2e:
         cd:6e:3e:90:3f:7f:df:cf:36:f6:b6:d7:da:0d:00:94:ea:0e:
         fa:33:2d:2c:b2:5a:63:07:8f:1b:cc:38:d1:aa:df:37:38:95:
         db:01:d1:a7:2c:32:de:60:ad:79:e3:29:d0:1f:84:57:21:32:
         2f:9b:44:f7:d1:a9:2a:02:c1:96:f1:e9:5a:01:16:38:36:73:
         9b:1c:b5:d5:b3:8d:7c:82:43:02:2e:a8:98:58:fa:58:d9:66:
         ac:e6:d3:db:0b:ad:b3:e6:ee:78:47:ec:a7:1f:07:cd:db:83:
         ae:aa:12:f7:e4:6b:b3:7a:78:49:05:1a:a2:b3:45:07:dc:b5:
         81:94:31:e8:9f:b4:1a:1c:23:80:71:86:4b:af:cc:93:6c:5d:
         27:97:c7:cc:14:d9:4b:18:e7:a2:00:8a:25:55:11:97:2e:fc:
         b4:2a:4b:9c:e8:21:84:29:72:11:c2:0c:4f:12:6c:fc:68:96:
         b8:5a:96:e8:a4:33:e9:2e:cd:94:0a:07:32:57:8a:eb:9f:6f:
         22:77:a6:80:25:79:fd:bf:af:d0:96:cf:c8:c2:f2:bc:c5:31:
         91:94:ef:56:15:ca:4c:08:d1:fe:10:a4:e4:90:53:05:6a:37:
         62:39:da:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----