Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/71aca22d-6ca2-4d5f-a990-d53e121577b7/5d6e8679b16a10d2aca2d10d2b23f96992189d46.roa
File:                     5d6e8679b16a10d2aca2d10d2b23f96992189d46.roa (raw, json)
Hash identifier:          +ZN/l05HpFV4sC1deojpS/jshIWQ8M5H36LRpGVkDVE=
Subject key identifier:   D3:E0:33:1B:4D:FD:03:C8:7C:9D:CE:F9:87:D0:EC:7A:DE:8C:89:DD
Certificate issuer:       /CN=f7ff8a69f03dcbd51ba2407e8bf1a73d2aeb4ec9
Certificate serial:       0CCDA4
Authority key identifier: 73:EE:DC:58:A2:51:1A:93:7E:EA:7D:55:34:63:EF:31:F8:3E:CF:63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7ff8a69f03dcbd51ba2407e8bf1a73d2aeb4ec9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/71aca22d-6ca2-4d5f-a990-d53e121577b7/5d6e8679b16a10d2aca2d10d2b23f96992189d46.roa
Signing time:             Wed 24 Mar 2021 14:36:08 +0000
ROA not before:           Wed 24 Mar 2021 14:36:08 +0000
ROA not after:            Tue 24 Mar 2026 14:36:08 +0000
asID:                     263836
IP address blocks:        143.0.92.0/22 maxlen: 24
                          2803:5640::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839076 (0xccda4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7ff8a69f03dcbd51ba2407e8bf1a73d2aeb4ec9
        Validity
            Not Before: Mar 24 14:36:08 2021 GMT
            Not After : Mar 24 14:36:08 2026 GMT
        Subject: CN=5d6e8679b16a10d2aca2d10d2b23f96992189d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:dc:23:7b:c4:c5:b9:0c:70:2d:bf:a7:3e:c1:
                    d4:34:70:7e:c9:e2:84:c6:15:be:64:c1:0c:af:3b:
                    ff:70:08:31:1b:80:dc:52:23:7f:57:41:80:f5:fd:
                    95:e0:c0:09:89:c3:cf:23:0d:59:08:6f:8a:33:28:
                    67:f8:dc:63:02:81:fc:cb:63:45:81:7b:e5:8f:ba:
                    ba:ba:8b:f6:fb:27:29:09:2d:45:5b:75:8e:b1:b2:
                    63:95:6e:e1:76:21:04:ac:cf:6a:f0:54:91:0d:1b:
                    04:ef:d0:c1:8a:00:db:57:ae:6a:bf:2f:fb:ff:59:
                    07:4b:01:f3:c5:95:13:20:bc:a1:12:b5:a9:48:72:
                    da:6f:e8:59:12:35:a2:b2:04:73:b2:db:24:50:47:
                    0d:af:fd:04:81:d7:9c:0a:b2:2d:bb:46:15:d7:20:
                    27:5d:24:2c:82:da:a2:17:41:c2:90:4c:60:91:80:
                    fc:52:31:11:a6:1f:5a:8a:fc:97:68:a3:13:6e:ae:
                    0c:f1:cb:45:c0:36:fa:7f:fc:64:5c:31:45:1f:29:
                    85:30:6e:6a:6e:20:1e:dc:90:4f:4a:73:be:13:eb:
                    96:37:16:e6:e3:be:04:2a:6b:05:35:4f:8e:8c:e5:
                    82:c6:64:0d:99:b9:60:05:2e:9c:be:9c:75:4a:21:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E0:33:1B:4D:FD:03:C8:7C:9D:CE:F9:87:D0:EC:7A:DE:8C:89:DD
            X509v3 Authority Key Identifier:
                keyid:73:EE:DC:58:A2:51:1A:93:7E:EA:7D:55:34:63:EF:31:F8:3E:CF:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7ff8a69f03dcbd51ba2407e8bf1a73d2aeb4ec9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/71aca22d-6ca2-4d5f-a990-d53e121577b7/5d6e8679b16a10d2aca2d10d2b23f96992189d46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/71aca22d-6ca2-4d5f-a990-d53e121577b7/f7ff8a69f03dcbd51ba2407e8bf1a73d2aeb4ec9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.92.0/22
                IPv6:
                  2803:5640::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:9e:7e:f5:8a:65:d1:e6:69:34:ca:3e:65:a4:80:30:95:76:
         24:4e:04:0b:d3:d2:ce:14:07:c6:85:16:a6:d6:d7:45:81:31:
         3a:eb:8e:ef:09:a7:be:9c:2a:ca:08:e9:c6:09:ba:cf:65:2a:
         17:bf:db:03:90:57:25:d8:54:83:c1:bf:80:de:47:6a:43:55:
         37:69:50:30:18:49:44:40:94:37:77:44:77:dc:93:71:44:56:
         6c:18:ed:59:59:16:3c:b8:38:66:06:c6:bb:70:0e:95:a7:0d:
         a8:ff:27:06:63:a3:79:55:b7:7b:9c:91:38:6e:be:c5:42:7a:
         28:92:af:57:95:0f:71:55:80:eb:4a:68:44:a9:12:ba:8b:ba:
         2e:48:70:3c:81:4f:fa:ce:e9:86:4c:74:7e:3a:d0:06:7b:65:
         ac:fd:3b:d0:4a:b7:b7:68:6c:43:9a:06:db:45:7e:1d:eb:2f:
         43:a7:39:93:ff:21:c5:f5:2b:12:ee:23:26:6f:18:b6:a6:e6:
         17:3f:53:67:65:b4:ee:d4:6d:3d:57:c0:7a:59:5f:8f:a1:4c:
         46:e6:24:df:12:ae:ba:e7:fd:00:22:2c:a6:91:8a:00:48:c7:
         fd:f5:b3:d4:f8:23:45:96:e1:aa:7b:1a:4d:c2:41:39:fb:92:
         88:be:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----