Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8045470a-0ede-486e-a579-2bab730f0fd5/71041c21029499603d9bda8a8c3f5bade7ab13ed.roa
File:                     71041c21029499603d9bda8a8c3f5bade7ab13ed.roa (raw, json)
Hash identifier:          pdWlC9q5p9/3jT3jAx8BU6ROvft++4Kpy+Hfpx04IWg=
Subject key identifier:   00:F5:4C:2D:8D:2C:10:E6:4C:33:B3:8C:39:C9:1F:27:3E:F6:BA:87
Certificate issuer:       /CN=a7592b08126953b5ea8de3d431acbcc3fd5ebd54
Certificate serial:       0D44A9
Authority key identifier: 69:5A:A1:C4:C5:81:9D:6A:73:87:26:DD:D3:7C:21:F9:65:CC:FC:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7592b08126953b5ea8de3d431acbcc3fd5ebd54.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8045470a-0ede-486e-a579-2bab730f0fd5/71041c21029499603d9bda8a8c3f5bade7ab13ed.roa
Signing time:             Wed 24 Mar 2021 14:35:30 +0000
ROA not before:           Wed 24 Mar 2021 14:35:30 +0000
ROA not after:            Tue 24 Mar 2026 14:35:30 +0000
asID:                     262215
IP address blocks:        179.60.240.0/22 maxlen: 24
                          186.159.112.0/22 maxlen: 24
                          2803:e000::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869545 (0xd44a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7592b08126953b5ea8de3d431acbcc3fd5ebd54
        Validity
            Not Before: Mar 24 14:35:30 2021 GMT
            Not After : Mar 24 14:35:30 2026 GMT
        Subject: CN=71041c21029499603d9bda8a8c3f5bade7ab13ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:63:f7:63:b0:2d:c4:68:b9:ce:da:37:7b:11:
                    2d:ea:3b:16:64:68:62:a3:b4:79:93:11:bc:27:7c:
                    43:1c:1b:d8:95:f6:b7:2e:55:4c:44:b5:ab:92:3b:
                    fe:54:af:69:49:c5:ff:79:ab:6a:af:ca:fe:e4:18:
                    c8:92:d3:39:b3:fb:b3:e0:d4:40:3b:67:7c:d4:0b:
                    24:bf:52:a7:79:94:56:55:9a:8f:51:19:b6:16:da:
                    41:90:27:99:9c:0c:d8:09:7c:e7:4e:95:0b:e0:10:
                    ab:97:47:44:d5:8b:22:76:7a:d9:9e:fb:13:95:81:
                    45:a0:8b:67:35:51:57:38:3a:cb:09:be:28:c6:12:
                    c1:18:d5:28:8b:51:33:f1:4b:ed:d8:eb:19:31:ef:
                    28:1f:2a:18:10:cb:ef:51:76:2c:e0:2f:a2:c8:d7:
                    21:bd:95:92:69:ce:a0:ae:b6:c4:04:93:cd:7b:b9:
                    07:51:f2:fb:a4:24:19:da:bb:7d:a4:f7:62:91:a9:
                    ee:2d:ca:bd:c0:2a:b9:7a:a0:91:fb:4a:7d:13:70:
                    0d:71:61:79:0e:af:5c:eb:7a:58:e4:ae:15:7c:53:
                    92:33:ca:71:12:f2:f2:b9:47:db:89:4a:b4:07:47:
                    5f:19:49:a7:2e:9a:24:e7:11:9f:38:f0:85:0a:12:
                    ad:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F5:4C:2D:8D:2C:10:E6:4C:33:B3:8C:39:C9:1F:27:3E:F6:BA:87
            X509v3 Authority Key Identifier:
                keyid:69:5A:A1:C4:C5:81:9D:6A:73:87:26:DD:D3:7C:21:F9:65:CC:FC:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7592b08126953b5ea8de3d431acbcc3fd5ebd54.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8045470a-0ede-486e-a579-2bab730f0fd5/71041c21029499603d9bda8a8c3f5bade7ab13ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8045470a-0ede-486e-a579-2bab730f0fd5/a7592b08126953b5ea8de3d431acbcc3fd5ebd54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.240.0/22
                  186.159.112.0/22
                IPv6:
                  2803:e000::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:ff:1d:02:1a:d3:c2:76:1d:31:38:b7:c7:df:72:b6:a1:66:
         f2:9b:15:d6:c2:75:9a:75:bb:b6:d0:9f:ed:27:b9:a3:30:9a:
         fb:ca:f1:a8:a6:a6:5c:f6:9b:1d:ca:3e:17:59:89:d1:26:a5:
         87:05:ca:ab:15:e6:d9:e7:5c:94:dc:a1:8b:b6:5d:1c:0d:67:
         68:0c:9c:96:86:ed:50:44:9c:68:2d:2e:e7:35:0f:db:62:6a:
         a5:05:1d:f4:71:70:84:b5:de:0d:1c:4d:13:b4:54:58:5f:cf:
         14:f5:a7:58:c3:55:1f:20:e1:8c:21:92:1f:ab:df:ab:82:dd:
         cd:85:29:93:17:67:20:a9:92:d5:28:80:13:53:8e:52:b0:b3:
         8d:3b:4c:fd:a5:f9:59:fd:fd:df:fb:4b:fd:11:c4:7c:2a:65:
         92:fc:71:e5:76:a9:8d:35:a9:96:6a:9b:2f:6f:e6:16:e2:52:
         06:63:a7:fd:18:3f:2a:af:8b:29:e1:c5:2f:bd:98:51:b5:09:
         25:16:48:df:14:13:0e:62:8f:6d:ba:da:0e:a7:e5:ff:a3:ff:
         f0:ab:81:32:8c:fd:91:43:88:50:71:a2:f0:8e:ac:52:44:85:
         e0:2b:f8:4b:83:d7:45:e8:68:80:4b:35:07:fc:e7:98:2f:c3:
         09:f0:9f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----