Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7a31e7aa-443d-4ff2-8b74-773396fe3433/a1d7d61da27faba6ccfb02d80f3df3f44697bf5c.roa
File:                     a1d7d61da27faba6ccfb02d80f3df3f44697bf5c.roa (raw, json)
Hash identifier:          koBbXuEZbUBqLrg57E3N6pekeL6AJY+dylKqPS14xgo=
Subject key identifier:   89:1C:5F:1C:72:95:38:85:92:0E:A4:8C:53:FE:F4:91:B2:BF:7D:62
Certificate issuer:       /CN=b1e681b3a50e20044b7b83f7f72b1363596eba66
Certificate serial:       0DEC5C
Authority key identifier: 8E:02:F7:B4:C4:46:AC:9B:CF:3E:74:6A:7C:CA:9B:91:B7:91:38:B0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1e681b3a50e20044b7b83f7f72b1363596eba66.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7a31e7aa-443d-4ff2-8b74-773396fe3433/a1d7d61da27faba6ccfb02d80f3df3f44697bf5c.roa
Signing time:             Wed 24 Mar 2021 14:33:09 +0000
ROA not before:           Wed 24 Mar 2021 14:33:09 +0000
ROA not after:            Tue 24 Mar 2026 14:33:09 +0000
asID:                     265769
IP address blocks:        164.163.80.0/22 maxlen: 22
                          2803:e7c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912476 (0xdec5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1e681b3a50e20044b7b83f7f72b1363596eba66
        Validity
            Not Before: Mar 24 14:33:09 2021 GMT
            Not After : Mar 24 14:33:09 2026 GMT
        Subject: CN=a1d7d61da27faba6ccfb02d80f3df3f44697bf5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:af:b4:13:56:d1:3e:19:44:34:82:a9:df:a5:
                    45:fc:53:a6:81:e6:63:36:47:dc:ca:70:dc:e4:37:
                    a8:9f:3e:38:2a:41:aa:01:21:f7:fe:27:93:f2:31:
                    0f:2d:01:f2:f8:18:60:25:a6:7f:06:01:fe:b7:6b:
                    9d:12:55:d2:fd:ec:71:0d:4a:57:15:6b:93:94:07:
                    43:2e:d0:4c:7d:af:2b:0f:ff:15:b0:b2:1d:27:88:
                    f6:6a:3b:4f:87:e4:1c:bb:db:f7:93:39:96:d3:ee:
                    55:c3:1f:f5:e9:18:39:a2:e8:a9:d0:4d:d2:03:a6:
                    31:38:ff:04:bd:c2:32:bb:69:76:de:d6:7e:2f:9c:
                    0c:9b:6d:b5:9c:f1:bb:0c:a1:2a:ec:e4:fd:03:55:
                    09:95:d5:b8:12:1b:39:b8:41:20:c6:5a:8a:da:a6:
                    40:0a:9d:54:9b:7d:2c:11:18:80:44:da:18:51:60:
                    99:b4:3e:56:85:12:b7:0a:b9:8e:18:fe:6a:1a:d1:
                    77:d2:a4:a0:6f:41:18:b3:cb:8e:00:a6:f9:c2:0e:
                    25:70:f1:02:2d:cc:8f:c3:9a:d0:48:d3:13:f6:95:
                    b1:e9:81:22:7e:87:10:39:7c:10:20:14:83:3a:50:
                    30:74:ea:5f:35:9d:e7:e6:2b:9e:29:4c:7e:a0:37:
                    e6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:1C:5F:1C:72:95:38:85:92:0E:A4:8C:53:FE:F4:91:B2:BF:7D:62
            X509v3 Authority Key Identifier:
                keyid:8E:02:F7:B4:C4:46:AC:9B:CF:3E:74:6A:7C:CA:9B:91:B7:91:38:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1e681b3a50e20044b7b83f7f72b1363596eba66.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7a31e7aa-443d-4ff2-8b74-773396fe3433/a1d7d61da27faba6ccfb02d80f3df3f44697bf5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7a31e7aa-443d-4ff2-8b74-773396fe3433/b1e681b3a50e20044b7b83f7f72b1363596eba66.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.80.0/22
                IPv6:
                  2803:e7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:4d:07:3c:0b:85:1f:d7:c2:54:73:1b:c9:74:52:6a:ea:01:
         dc:69:2a:d0:49:84:d4:31:ea:6a:c4:ee:37:bb:7d:d4:36:a7:
         d7:52:45:e5:c4:95:b4:1c:09:91:09:52:40:33:51:b2:85:b4:
         7a:b9:88:45:5e:71:ed:7b:f0:b7:1a:2a:b6:e9:9d:de:03:db:
         93:35:1f:50:fd:1c:1c:4f:6b:de:6e:33:4c:eb:dc:96:1f:b2:
         ad:9c:99:b2:64:06:f2:fb:f6:28:7f:e2:09:e5:33:5c:62:68:
         d3:e9:5b:3e:98:d9:f6:ca:37:cb:2b:ea:47:17:c0:d1:d8:9c:
         1e:4a:6f:2b:0f:9c:88:8c:33:3d:1d:f0:90:e5:a3:b2:ea:2a:
         97:cf:04:18:5f:5e:96:b1:55:94:e4:79:83:24:71:b8:93:36:
         8e:f6:32:52:0f:9d:98:53:5a:40:c1:c7:b2:20:52:33:0a:2d:
         c9:a3:a3:b2:db:66:07:65:1c:91:8e:be:03:4c:d8:38:e3:4d:
         98:ef:7a:43:28:c3:8b:72:26:14:9e:e6:bc:a5:cc:4e:1a:b9:
         1a:ff:cb:99:55:4a:fc:dd:11:be:18:87:f8:cf:53:4b:a3:26:
         29:9f:4d:f8:c5:a5:3f:23:2c:ad:7c:9c:ef:35:df:bb:99:07:
         3b:12:92:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----