Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/6f7622acb25503ea7c87663d9d77d3dff4b960bd.roa
File:                     6f7622acb25503ea7c87663d9d77d3dff4b960bd.roa (raw, json)
Hash identifier:          ffWbq9Q4ERX6acCSgc/cLM4Q+lEQtzL07izaZCypB2o=
Subject key identifier:   4E:7D:84:6F:5F:FD:A9:45:9F:3C:F9:3B:57:38:BD:EB:26:FF:DC:9E
Certificate issuer:       /CN=8cc792e76ddd9bfaff65ffe563bf76567bc7914c
Certificate serial:       0F6C
Authority key identifier: B7:18:81:E4:8F:C9:78:3D:CD:A1:67:1D:7B:BD:04:B7:13:60:F6:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cc792e76ddd9bfaff65ffe563bf76567bc7914c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/6f7622acb25503ea7c87663d9d77d3dff4b960bd.roa
Signing time:             Thu 11 Nov 2021 22:21:22 +0000
ROA not before:           Thu 11 Nov 2021 02:00:00 +0000
ROA not after:            Sat 11 Nov 2023 02:00:00 +0000
asID:                     13959
IP address blocks:        45.167.12.0/22 maxlen: 24
                          2806:311::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3948 (0xf6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cc792e76ddd9bfaff65ffe563bf76567bc7914c
        Validity
            Not Before: Nov 11 02:00:00 2021 GMT
            Not After : Nov 11 02:00:00 2023 GMT
        Subject: CN=6f7622acb25503ea7c87663d9d77d3dff4b960bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:66:ac:6e:cb:ce:39:90:cf:95:9e:80:68:7c:
                    c1:2d:a6:2f:c4:73:b6:92:c1:0b:26:5e:f5:d3:e6:
                    17:65:62:2a:9f:0e:bc:6a:2e:53:15:aa:12:49:d1:
                    5a:20:53:ee:2f:41:23:48:71:65:70:7f:04:9e:32:
                    30:67:53:07:cd:38:07:05:7d:c2:3a:23:63:47:51:
                    af:0c:4b:34:cf:e9:4f:19:63:17:85:46:87:25:c5:
                    4a:fc:7e:ee:4a:e1:cb:da:94:9a:9f:5f:61:b1:af:
                    fa:44:d9:58:9b:7a:28:fa:90:49:a3:c6:10:87:cc:
                    c3:1f:41:db:fe:c3:aa:86:be:5b:ef:c6:6b:58:d6:
                    9d:ce:44:dc:6a:0e:d0:44:de:5e:8d:f9:50:b4:ce:
                    75:91:35:ab:a5:31:f1:59:9c:52:e8:c2:aa:18:2b:
                    cc:8d:c9:45:82:d4:08:30:0d:64:cc:f1:97:06:6d:
                    60:cd:ab:7e:55:42:b8:3e:7f:64:34:15:ac:61:3b:
                    3c:12:19:af:0d:70:81:93:a9:1d:29:05:46:b8:6a:
                    a7:bf:0d:42:6f:54:22:0b:d7:02:29:5a:5f:9e:37:
                    f8:b2:eb:a0:61:b4:31:56:89:eb:de:47:0b:e5:b5:
                    ca:ed:75:ac:01:9a:5f:f1:bd:8d:4d:a4:13:54:4a:
                    47:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7D:84:6F:5F:FD:A9:45:9F:3C:F9:3B:57:38:BD:EB:26:FF:DC:9E
            X509v3 Authority Key Identifier:
                keyid:B7:18:81:E4:8F:C9:78:3D:CD:A1:67:1D:7B:BD:04:B7:13:60:F6:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cc792e76ddd9bfaff65ffe563bf76567bc7914c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/6f7622acb25503ea7c87663d9d77d3dff4b960bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c2f7d5f-2773-4cc1-bbd1-a6b8ec216393/8cc792e76ddd9bfaff65ffe563bf76567bc7914c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.12.0/22
                IPv6:
                  2806:311::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:37:6f:cc:f9:06:99:99:46:0e:01:54:d8:df:29:6c:14:19:
         79:f5:9b:b1:34:66:f2:5f:7c:d0:e3:5c:55:1a:2f:92:3a:fb:
         84:86:28:a4:54:33:be:fb:df:e6:85:44:53:f2:ef:66:43:95:
         87:2d:ee:7e:68:ba:15:58:6e:d7:a8:4a:19:60:39:93:a6:28:
         ca:5c:b6:80:11:a9:41:fe:28:cc:a4:fc:23:82:7b:1a:85:b7:
         4a:82:03:bb:95:c9:87:ed:26:8a:99:bb:fd:37:fc:81:89:4b:
         79:7d:70:e5:21:d5:b4:26:12:72:a0:3e:b0:82:c9:c3:62:41:
         f9:1b:ce:04:71:5c:42:ac:99:c6:a7:9e:6e:cf:04:7e:a3:52:
         c2:f6:d3:ce:cd:43:ca:77:16:d7:f4:e2:5f:a1:b6:07:31:08:
         51:b2:1f:6d:8d:5f:0a:6b:16:62:be:2d:a9:a0:4d:0a:d0:2c:
         2f:4f:15:8d:32:a0:20:76:aa:a9:02:4d:7a:5e:88:d0:26:22:
         b1:d9:0a:d5:56:66:d0:33:67:df:b8:da:e2:1c:0d:1f:f9:6a:
         98:56:fb:c4:a8:ad:3a:e4:79:be:35:01:b8:13:c8:06:e1:4c:
         0b:bc:e2:3a:51:d1:99:61:25:06:87:77:ed:05:27:03:0f:42:
         5c:19:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----