Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/90417d20-1997-420b-ba86-286d1ef490a9/8f6fc12ebe18e4dc382720e23042c3feded518c4.roa
File:                     8f6fc12ebe18e4dc382720e23042c3feded518c4.roa (raw, json)
Hash identifier:          91r4fYCquaFFOH3oKnjHJEJT1WYGiSsNPvIV/2RkoDM=
Subject key identifier:   43:43:13:49:A0:AD:CC:31:3E:02:84:4B:98:04:22:C4:87:05:58:70
Certificate issuer:       /CN=9406f9de2cc36563c979a4e153dcfbff00ffd679
Certificate serial:       0C4E28
Authority key identifier: AB:B1:EC:F6:2E:F1:62:1B:37:0A:A9:22:33:D6:41:7B:54:37:74:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9406f9de2cc36563c979a4e153dcfbff00ffd679.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/90417d20-1997-420b-ba86-286d1ef490a9/8f6fc12ebe18e4dc382720e23042c3feded518c4.roa
Signing time:             Wed 24 Mar 2021 14:28:35 +0000
ROA not before:           Wed 24 Mar 2021 14:28:35 +0000
ROA not after:            Tue 24 Mar 2026 14:28:35 +0000
asID:                     27694
IP address blocks:        143.0.32.0/22 maxlen: 22
                          200.71.248.0/21 maxlen: 21
                          200.107.84.0/22 maxlen: 22
                          2803:f640::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 806440 (0xc4e28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9406f9de2cc36563c979a4e153dcfbff00ffd679
        Validity
            Not Before: Mar 24 14:28:35 2021 GMT
            Not After : Mar 24 14:28:35 2026 GMT
        Subject: CN=8f6fc12ebe18e4dc382720e23042c3feded518c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b1:b5:e6:f5:56:1b:8f:a3:62:b9:b8:5d:82:
                    db:20:75:92:23:2e:8a:2d:fe:49:cd:6b:2d:91:ed:
                    6b:a7:3a:f3:20:5c:66:b9:4f:c0:62:1c:23:66:c2:
                    d1:2c:05:23:40:ed:20:80:62:b8:21:54:bb:5d:06:
                    aa:c6:64:21:46:6c:15:0b:50:6d:f9:e6:fb:f2:d6:
                    1e:dd:67:e7:ea:49:30:24:07:08:41:b2:64:a4:8d:
                    0e:1b:46:f3:d3:3a:d9:ed:e4:64:32:32:1a:ad:90:
                    67:8e:61:d0:32:d2:cd:1a:2f:ed:23:89:cd:8c:07:
                    be:2c:f0:9d:09:a2:f6:37:e6:e2:85:f2:96:08:b2:
                    bb:fe:8d:fa:16:fd:50:4f:df:f0:b3:ee:56:49:c5:
                    84:0b:44:9e:c8:33:e5:b4:56:21:01:1e:48:61:8b:
                    c3:0a:fe:06:df:19:cd:2b:06:6f:b5:8b:04:3e:5f:
                    0c:a4:cb:55:fb:b0:0e:0d:5c:8f:b7:db:a9:8f:2c:
                    bf:98:96:90:aa:b5:6c:79:c0:cb:44:5c:cf:d4:5f:
                    2d:ca:4d:32:b2:28:74:97:e5:83:8d:7b:12:f1:fb:
                    09:fe:28:34:93:7a:86:40:b7:1b:d4:87:ca:90:d2:
                    bf:64:3b:c0:f2:55:28:32:21:88:6a:ed:38:61:6b:
                    bf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:43:13:49:A0:AD:CC:31:3E:02:84:4B:98:04:22:C4:87:05:58:70
            X509v3 Authority Key Identifier:
                keyid:AB:B1:EC:F6:2E:F1:62:1B:37:0A:A9:22:33:D6:41:7B:54:37:74:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9406f9de2cc36563c979a4e153dcfbff00ffd679.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/90417d20-1997-420b-ba86-286d1ef490a9/8f6fc12ebe18e4dc382720e23042c3feded518c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/90417d20-1997-420b-ba86-286d1ef490a9/9406f9de2cc36563c979a4e153dcfbff00ffd679.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.0.32.0/22
                  200.71.248.0/21
                  200.107.84.0/22
                IPv6:
                  2803:f640::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:60:df:63:b3:fa:42:cc:b2:7a:f2:78:f4:9e:13:7b:79:52:
         b0:04:eb:c0:6d:f1:2e:7b:78:6a:e2:35:b5:cb:7a:5f:07:22:
         67:bc:57:6f:f9:9f:92:64:8e:54:99:0e:e4:1e:f7:49:2f:7b:
         ee:bd:2a:64:6b:30:8d:5b:e5:1a:f8:08:1d:80:db:69:e5:58:
         a4:20:d8:da:ed:d8:99:f3:eb:ac:8a:7a:23:2c:47:0b:1e:d1:
         4d:ee:cc:0f:69:25:9b:fd:e9:64:ac:a4:33:93:00:b1:9f:90:
         43:0c:78:6d:9a:a4:3b:e2:66:e3:0b:a5:bd:e6:70:97:be:13:
         f1:26:17:41:59:bb:f9:a0:8f:17:8e:b1:e1:a4:28:1b:05:b0:
         0a:59:a4:b8:54:c3:3a:67:80:c5:46:bb:a1:c6:f9:07:7c:06:
         f0:2b:18:f6:43:a1:4b:6b:59:69:93:e7:81:68:af:47:b9:de:
         c4:59:70:0a:f7:7f:23:bb:5c:f9:f5:a2:ff:2d:a9:ea:1a:2a:
         10:d3:3f:76:ea:60:dd:db:91:03:53:ef:2a:c5:33:5b:15:9b:
         46:a0:1b:ca:12:00:96:b7:4c:60:bf:fc:8d:4c:f6:5f:80:31:
         dd:c7:38:61:41:25:d7:b5:7c:74:30:bc:61:92:f1:d9:d8:f1:
         38:f0:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----