Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/743ad174-889b-4dd2-beac-af3f0e4eb73e/85f2a0de791e96bc0c614bb4b0a25c1ca6bb17f8.roa
File:                     85f2a0de791e96bc0c614bb4b0a25c1ca6bb17f8.roa (raw, json)
Hash identifier:          /AS/9gh6DaHFxLiTQuq/w1bh9eNUGCLiuMVN5G0JgCU=
Subject key identifier:   80:8A:4E:1D:1C:19:C9:4F:19:BB:03:8A:4F:F3:1E:EF:DF:E7:51:5D
Certificate issuer:       /CN=a6909b0665be941391b3b1470ca2466a28b38c4a
Certificate serial:       13585D
Authority key identifier: 56:C1:69:F6:A3:DC:E4:9F:F7:C1:46:AF:9F:37:D1:CC:BA:98:73:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6909b0665be941391b3b1470ca2466a28b38c4a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/743ad174-889b-4dd2-beac-af3f0e4eb73e/85f2a0de791e96bc0c614bb4b0a25c1ca6bb17f8.roa
Signing time:             Wed 15 Dec 2021 19:44:59 +0000
ROA not before:           Wed 15 Dec 2021 03:00:00 +0000
ROA not after:            Fri 15 Dec 2023 03:00:00 +0000
asID:                     264647
IP address blocks:        143.0.102.0/23 maxlen: 24
                          2801:1d0:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1267805 (0x13585d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6909b0665be941391b3b1470ca2466a28b38c4a
        Validity
            Not Before: Dec 15 03:00:00 2021 GMT
            Not After : Dec 15 03:00:00 2023 GMT
        Subject: CN=85f2a0de791e96bc0c614bb4b0a25c1ca6bb17f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e7:36:a0:7d:ab:64:2c:c7:89:63:40:23:be:
                    17:0b:c2:e8:83:ae:3a:63:41:c9:0b:d8:fc:3e:f8:
                    e2:13:b5:bc:ea:7a:2a:74:44:cc:a6:83:97:36:00:
                    0d:e2:f7:37:84:34:a9:ec:98:51:44:ee:95:35:51:
                    ac:c1:7a:59:a8:82:90:d5:59:47:1d:9a:a7:c9:f9:
                    47:ce:5d:a4:22:8b:f2:24:e1:ee:88:5e:04:32:17:
                    01:16:19:78:75:d9:6d:33:d0:25:ac:2c:e2:f7:26:
                    6e:75:e0:5b:b6:1a:ae:6c:f9:f6:1d:62:2a:87:0a:
                    64:86:e0:1b:25:02:b8:5c:93:7a:c4:b4:77:06:5d:
                    64:7f:53:a2:80:6c:3f:00:a9:80:48:01:fe:c1:e9:
                    eb:3e:8d:3e:88:a5:38:7d:b2:af:fc:59:51:70:bf:
                    79:29:c1:f6:b2:f6:e8:2e:4f:6b:cf:df:63:80:bf:
                    3a:0f:94:0f:a9:29:35:56:2f:c6:0e:cf:0a:60:2f:
                    4c:9f:01:ee:90:42:68:4e:4d:27:f6:fb:6b:b7:3c:
                    91:c9:c7:23:be:52:73:82:2c:09:85:8c:c7:c8:7c:
                    14:4e:1a:28:f7:87:54:60:54:62:b2:36:78:50:96:
                    c0:9f:d8:f3:55:49:4b:2f:7c:7f:e1:fc:71:e8:d9:
                    35:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8A:4E:1D:1C:19:C9:4F:19:BB:03:8A:4F:F3:1E:EF:DF:E7:51:5D
            X509v3 Authority Key Identifier:
                keyid:56:C1:69:F6:A3:DC:E4:9F:F7:C1:46:AF:9F:37:D1:CC:BA:98:73:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6909b0665be941391b3b1470ca2466a28b38c4a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/743ad174-889b-4dd2-beac-af3f0e4eb73e/85f2a0de791e96bc0c614bb4b0a25c1ca6bb17f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/743ad174-889b-4dd2-beac-af3f0e4eb73e/a6909b0665be941391b3b1470ca2466a28b38c4a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.102.0/23
                IPv6:
                  2801:1d0:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:f5:b7:42:95:67:a2:82:cd:ac:57:07:a9:66:c3:69:d3:5f:
         18:a7:2e:ac:7d:84:87:ee:fc:cf:7f:3c:8b:98:e1:b9:15:9c:
         7f:b9:68:d3:dc:21:48:ce:e6:88:23:13:41:3b:18:cd:61:39:
         c7:fd:0e:a0:50:39:d5:58:2d:68:40:16:f6:cb:76:e1:53:5d:
         c5:3b:20:76:38:30:85:60:82:4b:70:0d:66:93:ca:3d:a6:a8:
         0a:1f:c6:c9:81:11:85:a5:f8:a2:6d:06:11:cc:f6:a4:4e:1e:
         60:d5:ce:e1:23:f9:46:6c:99:25:18:a8:85:94:90:62:7f:bf:
         1f:fa:bf:9e:ca:b7:43:ca:8c:5b:a1:1d:e4:8a:68:fb:9d:d6:
         f3:c1:16:39:df:70:83:8a:64:57:a9:fc:6b:39:d5:ea:b3:71:
         f9:65:4e:42:e7:72:f0:ad:96:88:9a:20:d3:05:c4:7d:55:dd:
         e0:5c:dc:f3:02:df:97:e3:90:18:23:aa:6d:cb:58:f4:97:08:
         5b:11:3c:98:9d:07:79:5b:bd:66:69:65:d4:ee:db:8d:e7:48:
         66:3b:c6:92:51:63:25:b5:e1:d6:07:65:6b:7e:63:11:f8:a9:
         41:d1:6f:26:94:68:3f:e5:2a:25:66:d0:90:63:16:f0:91:8c:
         54:25:40:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----