Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6760b319-026b-4468-b01e-a4a54036f44b/db9592e5a03a4b414f37cd343ef2c0cd1bb8ca8b.roa
File:                     db9592e5a03a4b414f37cd343ef2c0cd1bb8ca8b.roa (raw, json)
Hash identifier:          16Q+rF0QDpuLTBpiRqN9phCv6VP6FeWpxKiupceW50I=
Subject key identifier:   D1:1F:D0:45:DA:84:50:13:59:68:22:1C:A7:B3:87:92:B4:26:99:4E
Certificate issuer:       /CN=72201ce88caa8d6bed08962d2748088a683dfa85
Certificate serial:       061630
Authority key identifier: 52:EB:65:C3:55:06:AE:0F:46:15:3A:00:53:32:2A:5A:86:CD:B3:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72201ce88caa8d6bed08962d2748088a683dfa85.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6760b319-026b-4468-b01e-a4a54036f44b/db9592e5a03a4b414f37cd343ef2c0cd1bb8ca8b.roa
Signing time:             Wed 24 Mar 2021 14:33:10 +0000
ROA not before:           Wed 24 Mar 2021 14:33:10 +0000
ROA not after:            Tue 24 Mar 2026 14:33:10 +0000
asID:                     270034
IP address blocks:        177.12.88.0/22 maxlen: 24
                          2803:65e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398896 (0x61630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72201ce88caa8d6bed08962d2748088a683dfa85
        Validity
            Not Before: Mar 24 14:33:10 2021 GMT
            Not After : Mar 24 14:33:10 2026 GMT
        Subject: CN=db9592e5a03a4b414f37cd343ef2c0cd1bb8ca8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:cf:19:9c:22:bd:05:c1:7a:46:92:fc:64:ac:
                    79:97:97:20:81:f7:de:79:01:90:12:52:91:a0:2f:
                    8c:b6:74:e9:22:04:2a:76:4e:4b:9c:5c:57:b0:6f:
                    2a:1f:b8:44:28:f6:84:54:b8:04:09:f3:41:05:55:
                    98:54:0c:d4:5f:81:d0:bf:9b:4d:be:bb:48:c7:16:
                    4b:37:cb:f4:08:c2:09:e5:8d:75:ae:e5:b5:89:b7:
                    e7:16:bd:f2:02:35:39:62:15:e4:22:e4:7d:8b:a5:
                    62:5c:1f:67:dc:72:36:a4:37:80:e3:12:78:2b:20:
                    35:9e:36:59:fa:11:23:7a:90:6a:61:30:f3:01:f6:
                    87:f5:ca:ac:d5:c8:ef:5e:1b:4b:5d:3f:c3:12:3d:
                    49:d1:23:0d:51:4a:c8:b8:b1:4a:61:93:41:8d:17:
                    37:2d:a5:d6:41:f6:ba:15:b1:7a:51:84:b8:30:8b:
                    83:91:dd:6c:0b:a1:ed:4d:10:89:5f:d0:9a:d5:7f:
                    03:f6:60:93:b4:46:a2:53:be:c5:19:f3:06:1c:49:
                    fe:69:cd:c6:de:b6:b8:d4:e0:d9:f1:90:fa:3f:c6:
                    2c:f4:df:b0:e3:50:ba:5a:67:8f:4d:48:31:aa:a2:
                    c1:a7:f8:fb:bd:98:74:39:10:c0:f4:c3:c5:36:11:
                    ee:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1F:D0:45:DA:84:50:13:59:68:22:1C:A7:B3:87:92:B4:26:99:4E
            X509v3 Authority Key Identifier:
                keyid:52:EB:65:C3:55:06:AE:0F:46:15:3A:00:53:32:2A:5A:86:CD:B3:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72201ce88caa8d6bed08962d2748088a683dfa85.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6760b319-026b-4468-b01e-a4a54036f44b/db9592e5a03a4b414f37cd343ef2c0cd1bb8ca8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6760b319-026b-4468-b01e-a4a54036f44b/72201ce88caa8d6bed08962d2748088a683dfa85.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.12.88.0/22
                IPv6:
                  2803:65e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:e1:83:9c:01:03:d3:35:b0:bc:6e:5c:a7:dd:94:29:ae:ba:
         2e:21:3b:53:69:41:ef:15:e4:23:5a:61:55:4f:9f:e2:48:c2:
         01:99:e3:1d:27:c5:3c:fe:17:53:9e:75:da:f1:78:8e:97:e7:
         3f:58:7d:2b:10:36:5b:6a:ea:0a:36:3a:fe:9a:1e:10:55:bb:
         ec:1c:74:03:c8:a6:69:d2:c5:33:1d:7b:df:d2:a0:f8:42:77:
         74:04:fa:81:3d:b3:47:ac:c2:9c:ca:bf:e9:73:8b:ba:7d:77:
         70:e2:19:63:20:70:80:4d:98:17:56:6d:e1:61:05:6d:02:0a:
         51:1f:10:4a:b3:36:c5:43:3c:45:f9:f9:c4:9a:8c:16:eb:49:
         2f:13:eb:98:5b:85:a9:75:dd:eb:73:3c:54:c5:73:c2:72:68:
         29:bb:9c:b4:55:47:fd:bb:bc:01:5c:10:66:9c:7a:11:35:62:
         60:9e:52:1b:30:20:14:2c:56:78:f6:ee:88:bb:ea:3e:55:27:
         6b:68:97:a8:a2:06:8a:24:64:5d:3c:01:c1:3b:c5:b0:cc:bb:
         ab:12:a5:14:92:a6:2a:b0:fd:b8:1a:7c:b9:9d:71:42:57:2b:
         16:34:fa:ca:20:40:79:f9:54:ad:a5:9f:93:f0:fb:09:53:3f:
         37:61:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----