Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c5d50be-579e-4126-839f-270dfa25d01a/2e82339fc3f1f480f5db1231ad0f7b2b6a8f3e25.roa
File:                     2e82339fc3f1f480f5db1231ad0f7b2b6a8f3e25.roa (raw, json)
Hash identifier:          C7L4npgJip0T359263HbvMX/TK7SuAKkhop6GkHn29s=
Subject key identifier:   B3:60:3C:1A:27:38:48:32:21:7E:CE:A5:FD:03:79:03:D3:D5:E8:A8
Certificate issuer:       /CN=6f4947f69ab9a7d3809d9a7b76bc2aec7dd527da
Certificate serial:       1CDB
Authority key identifier: E6:24:64:EB:D9:8E:6A:09:CB:78:3B:5D:6F:E3:FF:3C:97:9A:13:CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f4947f69ab9a7d3809d9a7b76bc2aec7dd527da.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c5d50be-579e-4126-839f-270dfa25d01a/2e82339fc3f1f480f5db1231ad0f7b2b6a8f3e25.roa
Signing time:             Fri 16 Jul 2021 19:55:18 +0000
ROA not before:           Wed 01 Jul 2020 03:00:00 +0000
ROA not after:            Sat 16 Jul 2050 03:00:00 +0000
asID:                     270120
IP address blocks:        187.103.24.0/22 maxlen: 24
                          2806:3bf::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7387 (0x1cdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f4947f69ab9a7d3809d9a7b76bc2aec7dd527da
        Validity
            Not Before: Jul  1 03:00:00 2020 GMT
            Not After : Jul 16 03:00:00 2050 GMT
        Subject: CN=2e82339fc3f1f480f5db1231ad0f7b2b6a8f3e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:72:c8:79:ab:71:65:e2:65:61:93:50:a6:bf:
                    47:a2:6e:78:ef:5d:df:85:1e:fa:3c:04:a2:7e:3b:
                    ab:53:61:de:ce:f0:08:42:82:16:f2:f0:a3:f0:a1:
                    91:5d:01:6c:19:08:ac:00:43:d7:a1:40:cd:11:3e:
                    e8:cc:bd:8a:2a:67:01:9f:3d:16:7e:6c:d7:13:ba:
                    6e:b1:ba:61:03:e9:45:9c:c2:fa:08:7d:58:a8:cf:
                    96:68:e0:7d:74:21:7c:0f:a5:8b:04:0f:3c:4e:a3:
                    b7:33:03:48:d3:53:b3:3b:65:53:1e:cf:45:ca:59:
                    9d:5c:2d:ef:16:e4:88:53:f4:e1:af:9e:aa:fa:2d:
                    00:03:5a:cf:40:d1:e1:1a:53:e3:4c:32:c1:af:c6:
                    f5:f8:78:fa:ca:cd:35:72:f5:c3:62:49:08:4c:5c:
                    36:89:7d:d3:34:de:63:ae:f3:79:c1:e7:31:42:4c:
                    1a:13:1e:ce:3e:07:b5:f3:39:8d:a2:fe:5b:74:92:
                    b8:b7:af:69:25:cb:cb:03:7f:a6:7c:6a:2c:50:26:
                    c2:79:58:cd:f2:8f:07:b2:c8:3f:6f:2c:6a:6f:db:
                    7c:33:0c:e6:54:7f:e8:a1:60:66:db:f9:c2:c5:76:
                    9c:af:ae:6c:78:79:aa:6c:50:41:10:db:f0:d5:92:
                    8b:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:60:3C:1A:27:38:48:32:21:7E:CE:A5:FD:03:79:03:D3:D5:E8:A8
            X509v3 Authority Key Identifier:
                keyid:E6:24:64:EB:D9:8E:6A:09:CB:78:3B:5D:6F:E3:FF:3C:97:9A:13:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f4947f69ab9a7d3809d9a7b76bc2aec7dd527da.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c5d50be-579e-4126-839f-270dfa25d01a/2e82339fc3f1f480f5db1231ad0f7b2b6a8f3e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c5d50be-579e-4126-839f-270dfa25d01a/6f4947f69ab9a7d3809d9a7b76bc2aec7dd527da.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.103.24.0/22
                IPv6:
                  2806:3bf::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:36:42:e0:f6:ca:93:ef:21:97:a8:c0:1e:f8:05:10:f3:9e:
         52:4e:92:49:16:72:b5:dc:cb:54:82:53:1b:ee:ad:c8:09:ce:
         5b:cd:b0:89:a7:b4:c5:0c:50:e2:55:52:49:fe:d5:08:aa:85:
         2d:8e:e6:88:df:24:00:7b:b9:92:f0:56:5e:ef:7f:bd:80:50:
         26:fe:9d:f3:a2:3d:33:fd:01:b7:cb:0e:45:fa:b5:d8:7a:1f:
         1c:60:b4:bf:82:16:72:02:18:23:ba:90:17:c5:4e:36:aa:99:
         b1:6b:60:0f:ea:93:e9:92:cd:af:9e:37:cd:1e:99:b2:2a:e4:
         80:8e:71:92:a4:b3:2e:0d:77:69:32:69:a2:4a:4c:d2:40:b1:
         aa:02:d8:c6:e0:2a:67:1d:07:5d:09:23:9d:f3:ea:d3:04:73:
         77:3c:c0:3b:2b:9d:c0:95:91:57:51:fc:97:7b:1b:c5:b2:6c:
         7e:45:66:e5:fc:e1:1d:6a:52:3a:7b:62:19:cc:4b:d7:28:9f:
         f6:c1:df:81:fa:18:a4:cc:41:48:a6:30:c2:31:85:10:fd:7e:
         36:5f:85:1d:65:45:94:fa:96:b4:5b:16:b6:ae:4e:2e:cf:8a:
         c9:26:07:97:67:6a:b3:87:e1:6d:a8:53:88:77:bf:96:4c:c9:
         ed:be:36:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----