Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/22b46c612c83adef2e9f0170583bfc9cba742631.roa
File:                     22b46c612c83adef2e9f0170583bfc9cba742631.roa (raw, json)
Hash identifier:          QUV2Ig5CgLK+cZe0WuRi8U8uv0gSyTEx4ohmeIs4Ii4=
Subject key identifier:   77:87:DD:29:3B:27:CF:D6:12:FA:1F:9E:A7:C7:EC:98:32:41:68:27
Certificate issuer:       /CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
Certificate serial:       10EB1E
Authority key identifier: 48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/22b46c612c83adef2e9f0170583bfc9cba742631.roa
Signing time:             Wed 24 Mar 2021 14:44:28 +0000
ROA not before:           Wed 24 Mar 2021 14:43:44 +0000
ROA not after:            Tue 24 Mar 2026 14:43:44 +0000
asID:                     278
IP address blocks:        132.248.202.192/27 maxlen: 27

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108766 (0x10eb1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9
        Validity
            Not Before: Mar 24 14:43:44 2021 GMT
            Not After : Mar 24 14:43:44 2026 GMT
        Subject: CN=22b46c612c83adef2e9f0170583bfc9cba742631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:0e:da:4b:53:f3:09:15:d6:d4:e0:e3:68:
                    14:29:9f:f0:19:92:58:01:47:31:2d:0b:12:25:43:
                    38:ae:75:3d:bf:33:a7:80:20:6c:14:0c:89:15:94:
                    65:72:85:5d:c9:7c:f5:c8:e8:9b:06:59:bf:0f:ef:
                    e4:ae:5e:3b:f5:e2:78:19:2b:e9:4c:d6:a6:34:b8:
                    f6:6b:31:17:1d:cf:9b:20:c7:a9:dc:d8:07:07:57:
                    37:15:82:96:6a:9e:0b:21:f2:20:b5:21:23:e0:d7:
                    49:11:dc:73:f8:a0:68:b5:26:0b:3e:b5:94:02:9a:
                    41:be:a0:87:08:c0:9d:30:07:1c:4f:ca:6b:5a:80:
                    25:08:96:98:6d:05:a4:b5:a1:67:d2:92:41:a8:f8:
                    63:4d:dd:a8:ae:d1:7c:ce:c9:2f:58:2c:50:75:6c:
                    5a:d9:89:e7:c3:1b:02:ba:93:52:03:6a:28:f5:68:
                    8b:bd:22:97:b4:b1:21:13:dd:b1:8c:44:26:e5:1d:
                    14:df:96:00:9e:21:8c:19:98:c8:72:80:1e:73:4e:
                    50:51:32:19:b7:23:e1:62:d1:36:62:63:3b:1a:67:
                    bb:d4:22:bb:e1:1e:bf:13:cb:52:a9:c1:c5:c3:54:
                    cb:3f:7e:e9:1e:56:c4:e1:37:2f:71:08:20:92:35:
                    76:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:87:DD:29:3B:27:CF:D6:12:FA:1F:9E:A7:C7:EC:98:32:41:68:27
            X509v3 Authority Key Identifier:
                keyid:48:B1:BD:0F:CA:73:B8:AE:61:49:CE:25:46:CC:0F:15:E0:7E:76:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/22b46c612c83adef2e9f0170583bfc9cba742631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/842b633f-80b8-4f4c-be98-656d6f9a7f38/490a4fa4caf480cb76c0bc4aefbf633f8ce3b1f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.248.202.192/27

    Signature Algorithm: sha256WithRSAEncryption
         44:a4:83:67:02:4c:b1:1b:30:44:20:2a:bd:56:ed:1b:1d:84:
         12:a5:49:6c:58:35:aa:d8:60:12:ea:35:b8:14:00:75:54:38:
         2f:a7:de:e5:f5:a0:56:0f:c5:42:04:7e:7e:b6:5e:1d:e6:6e:
         a0:e7:63:d5:22:1c:e3:66:88:3c:24:c7:25:60:91:58:39:98:
         ed:ba:6a:df:27:95:bf:bd:4a:df:1b:fd:2e:50:10:b0:59:f9:
         7b:79:aa:11:54:d0:78:c7:f2:98:9a:23:56:0d:d1:e0:f9:79:
         1c:6f:7d:62:4b:25:8b:2d:87:2d:82:8b:ae:96:cf:80:ef:6b:
         21:fd:8f:94:f0:68:9a:20:6e:97:87:cb:25:55:5a:56:93:64:
         dd:fd:89:87:d2:47:6c:f1:1f:2d:c8:48:0b:2d:6b:9b:87:24:
         69:c0:2c:3c:34:30:c7:60:19:a0:0f:bb:e4:d7:fc:bb:c9:91:
         79:ce:64:ed:fc:60:2f:cb:ca:73:3f:9c:8a:97:3d:00:69:cc:
         88:4a:4d:bb:56:aa:e4:04:f4:b4:6e:ee:54:be:8a:ae:7f:21:
         88:c6:6f:64:9e:b2:6b:95:6d:b6:a1:9d:53:e7:07:f6:d4:b0:
         98:b0:63:26:02:64:51:9c:57:f3:8a:40:52:41:76:97:e0:6b:
         e7:d1:f1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----