Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a9d1a9b-b98f-44c3-9af0-77d3c6bab10d/f5a7271f1cfb563c90434a01426b11e9d7857bb9.roa
File:                     f5a7271f1cfb563c90434a01426b11e9d7857bb9.roa (raw, json)
Hash identifier:          OCtyycpJG7A3KmwSqFcZWq1wwlsM1m4htXMhZvdkDo4=
Subject key identifier:   D6:05:5C:71:61:F9:EB:5F:48:C3:BC:9D:EB:58:B2:C3:5D:95:C5:FF
Certificate issuer:       /CN=d5500d1ecca7525c7eb9f64c4ac2576932ed59cf
Certificate serial:       01231F
Authority key identifier: ED:3C:99:F3:7A:A9:1C:A6:16:0F:FF:3A:49:DC:1D:15:C7:3F:46:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5500d1ecca7525c7eb9f64c4ac2576932ed59cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a9d1a9b-b98f-44c3-9af0-77d3c6bab10d/f5a7271f1cfb563c90434a01426b11e9d7857bb9.roa
Signing time:             Wed 24 Mar 2021 14:43:11 +0000
ROA not before:           Wed 24 Mar 2021 14:43:11 +0000
ROA not after:            Tue 24 Mar 2026 14:43:11 +0000
asID:                     265523
IP address blocks:        186.209.92.0/22 maxlen: 22
                          2806:3cd::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74527 (0x1231f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5500d1ecca7525c7eb9f64c4ac2576932ed59cf
        Validity
            Not Before: Mar 24 14:43:11 2021 GMT
            Not After : Mar 24 14:43:11 2026 GMT
        Subject: CN=f5a7271f1cfb563c90434a01426b11e9d7857bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:58:ca:4b:74:28:67:75:72:b7:55:73:74:d9:
                    a8:b5:4f:72:15:1f:21:f7:53:78:40:56:66:c8:90:
                    2c:40:27:39:d3:78:03:84:0d:e1:c6:a7:1b:b8:51:
                    16:6e:37:f3:12:ec:00:c3:94:d6:70:f6:38:cf:ff:
                    4a:d7:64:12:a5:d7:5d:74:83:be:86:75:b5:ca:7d:
                    23:e8:95:63:05:e0:54:9b:46:90:df:46:54:27:f7:
                    fe:73:af:6e:d5:d6:4a:56:44:8d:18:5a:78:2b:2b:
                    0c:44:2f:e2:b6:5e:79:0d:8b:44:13:3b:21:fb:76:
                    65:3f:48:63:66:67:f0:23:92:57:98:ea:1d:00:5a:
                    fb:6d:04:54:d7:bc:32:ca:7d:99:1d:25:05:c9:6b:
                    f3:37:97:2b:c7:89:08:51:a5:7a:61:ea:7f:cb:a0:
                    13:e4:cb:4f:01:e2:7b:19:ca:a4:de:02:82:46:3f:
                    c2:33:90:d7:b9:9c:11:a3:78:9b:12:a1:df:10:c9:
                    ac:12:f7:82:83:bb:81:1b:a6:a3:df:f3:32:1a:a1:
                    3c:7b:14:33:50:88:2b:85:d2:07:7c:8b:a3:41:8a:
                    18:cf:a1:02:e7:13:3b:92:a8:11:21:99:f0:fa:c2:
                    34:27:fd:fd:85:57:e9:2d:d9:87:a9:9c:69:c1:00:
                    d8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:05:5C:71:61:F9:EB:5F:48:C3:BC:9D:EB:58:B2:C3:5D:95:C5:FF
            X509v3 Authority Key Identifier:
                keyid:ED:3C:99:F3:7A:A9:1C:A6:16:0F:FF:3A:49:DC:1D:15:C7:3F:46:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5500d1ecca7525c7eb9f64c4ac2576932ed59cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a9d1a9b-b98f-44c3-9af0-77d3c6bab10d/f5a7271f1cfb563c90434a01426b11e9d7857bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a9d1a9b-b98f-44c3-9af0-77d3c6bab10d/d5500d1ecca7525c7eb9f64c4ac2576932ed59cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.92.0/22
                IPv6:
                  2806:3cd::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:f9:38:98:52:40:f4:50:9f:54:1f:10:aa:d1:10:e4:2c:65:
         36:93:ce:01:de:42:a4:76:c0:ba:d7:33:14:ba:b6:fa:8b:32:
         66:a0:58:a3:ac:f3:73:f9:53:67:3d:ab:7f:4d:0f:b5:6f:2c:
         5e:a3:ce:4a:f3:f4:4a:0e:32:69:87:df:a0:f0:33:18:5d:27:
         5b:d2:62:a4:d9:d1:30:06:e1:78:76:d8:b3:0b:ef:a6:a9:72:
         b1:76:8f:9f:76:16:73:cb:c6:c0:f5:b4:09:54:db:45:11:75:
         06:46:bb:53:f4:84:3a:37:6b:d2:3a:20:d1:29:a1:eb:a0:79:
         33:c9:6f:fb:57:48:36:67:8e:b9:21:b8:1b:4e:cf:ed:93:f0:
         2a:60:8c:9a:b9:59:3c:c9:1d:0d:2c:ca:ef:85:f0:74:6c:1c:
         2a:50:2a:5e:7f:23:16:83:0f:e0:ba:51:d7:3a:e3:e0:4c:3f:
         9d:d1:de:75:53:bd:cd:2b:c7:04:04:6d:2b:d0:f8:a1:67:89:
         e4:04:a8:ec:6f:d2:f9:bb:68:ad:e5:cf:7c:c9:fe:55:9b:c2:
         0f:b7:0c:29:d1:e7:5b:58:7f:cb:68:b8:34:a3:f0:e9:ab:f5:
         b7:60:39:d3:ac:4f:ab:0c:50:71:83:9c:0d:80:2b:d7:bf:bb:
         82:eb:65:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----