Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6a54d8a4-ff02-430a-ad5d-79095b0d2a67/7f8d7f4c45c81303b48f3ea01a3b57e5495cfdcb.roa
File:                     7f8d7f4c45c81303b48f3ea01a3b57e5495cfdcb.roa (raw, json)
Hash identifier:          FINBuEa5/o282ybLDPRrfZBPupTSRjFBmAkodcdFCqI=
Subject key identifier:   59:B7:E1:6F:59:C8:93:E5:AB:A6:FE:87:0C:24:DE:1B:89:84:25:89
Certificate issuer:       /CN=f2046b7578bbaa098b083e843bd46c17390e6597
Certificate serial:       093B35
Authority key identifier: CA:6B:2F:26:EA:5F:47:C2:B4:72:4C:D1:35:71:79:AC:C9:8F:23:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2046b7578bbaa098b083e843bd46c17390e6597.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6a54d8a4-ff02-430a-ad5d-79095b0d2a67/7f8d7f4c45c81303b48f3ea01a3b57e5495cfdcb.roa
Signing time:             Wed 24 Mar 2021 14:31:40 +0000
ROA not before:           Wed 24 Mar 2021 14:31:40 +0000
ROA not after:            Tue 24 Mar 2026 14:31:40 +0000
asID:                     52444
IP address blocks:        170.80.168.0/22 maxlen: 24
                          190.105.208.0/20 maxlen: 24
                          190.123.80.0/20 maxlen: 24
                          2803:6d00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604981 (0x93b35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2046b7578bbaa098b083e843bd46c17390e6597
        Validity
            Not Before: Mar 24 14:31:40 2021 GMT
            Not After : Mar 24 14:31:40 2026 GMT
        Subject: CN=7f8d7f4c45c81303b48f3ea01a3b57e5495cfdcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:19:a4:df:b5:55:bd:a7:8d:bc:47:8d:b5:
                    4c:68:45:4b:13:3b:2f:fa:44:a4:d2:e2:5e:f2:f0:
                    6a:87:d6:66:e9:0a:84:8e:f6:05:96:7b:ed:53:5f:
                    eb:9a:ae:a5:ae:25:ca:9e:a2:37:a0:9f:9c:45:bd:
                    29:e7:be:d2:bb:22:eb:43:39:2a:18:ee:df:7d:a8:
                    10:54:b4:00:2e:bc:28:f5:76:2d:f1:e6:60:75:d8:
                    64:8f:23:74:6e:40:44:7d:aa:29:b5:b3:1e:93:62:
                    9c:73:fd:e0:1d:7a:f6:12:87:a0:d6:a1:b2:6c:23:
                    5f:ba:aa:c4:62:8b:51:58:d3:5c:c5:65:a1:c8:c5:
                    f5:61:a6:8e:cb:0a:a8:e5:c7:31:4d:ae:c0:e1:e7:
                    e5:4e:64:77:75:5a:55:0c:48:a3:c0:53:3e:5b:51:
                    d2:8e:c0:c3:82:f7:71:f8:c6:a8:0e:ec:42:2a:a4:
                    04:36:4f:6b:01:84:88:cf:2f:e9:b4:56:6e:84:5e:
                    d5:0a:2e:0e:12:fb:7f:ce:1f:71:2d:f0:18:5f:4d:
                    dc:e9:6c:e3:81:f6:5b:a6:07:3a:0a:6c:9d:ca:23:
                    b8:8a:db:86:9b:b1:44:2f:88:99:6e:d2:0a:c3:1d:
                    56:79:8f:ca:63:bc:25:aa:ea:ce:3a:d0:7e:8e:24:
                    f4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B7:E1:6F:59:C8:93:E5:AB:A6:FE:87:0C:24:DE:1B:89:84:25:89
            X509v3 Authority Key Identifier:
                keyid:CA:6B:2F:26:EA:5F:47:C2:B4:72:4C:D1:35:71:79:AC:C9:8F:23:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2046b7578bbaa098b083e843bd46c17390e6597.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6a54d8a4-ff02-430a-ad5d-79095b0d2a67/7f8d7f4c45c81303b48f3ea01a3b57e5495cfdcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6a54d8a4-ff02-430a-ad5d-79095b0d2a67/f2046b7578bbaa098b083e843bd46c17390e6597.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.168.0/22
                  190.105.208.0/20
                  190.123.80.0/20
                IPv6:
                  2803:6d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:30:eb:3f:a6:81:9b:7e:3f:0f:1e:c6:22:a7:3a:61:12:0f:
         9f:1f:c3:51:88:a7:12:d6:25:c8:37:ed:aa:44:fc:87:95:2c:
         a0:06:eb:4c:f8:4c:65:83:3b:8e:fa:b9:dc:46:e5:87:86:fe:
         0e:63:3b:3b:a9:a2:64:87:99:9c:4e:be:55:99:cb:c5:d8:c0:
         80:c5:69:35:e8:12:9b:5c:4d:fb:af:06:b3:3d:5e:ca:db:20:
         d8:fd:c7:45:bf:07:ef:e0:22:cc:79:3e:09:ff:86:b7:23:11:
         82:ed:0f:bc:5e:2b:2a:00:c3:0b:1a:da:bd:1e:42:a4:e0:5c:
         ec:f1:eb:a9:6a:c7:b6:55:9b:0d:d2:13:40:96:e0:9c:bc:69:
         a4:9c:c9:70:cf:00:d2:37:7e:f6:fa:5d:52:ba:1b:ba:83:fc:
         fc:66:46:0e:fb:67:c4:3a:68:eb:e1:3a:26:18:ee:e1:84:c9:
         d7:2a:57:59:b5:42:35:75:2b:ec:fa:df:ae:67:91:b7:77:db:
         1b:e3:f5:ff:19:b3:4b:98:26:87:36:87:dc:ad:1c:ed:da:81:
         99:d4:bd:2f:57:d9:f2:ba:24:54:bc:1f:6e:fb:72:cd:f5:bf:
         cb:27:2c:77:86:16:92:ca:40:f2:4d:c8:2e:9e:cf:4d:c6:a9:
         8b:3d:0c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----