Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/943acbc5-5f6d-4e41-a9f2-7b2448893f20/05ef366e1825af2da94c55869a4a1962c3b6f6ec.roa
File:                     05ef366e1825af2da94c55869a4a1962c3b6f6ec.roa (raw, json)
Hash identifier:          gfdH0w5B0RXVCGtgKZOAOEAbekJuiidrb+8A/BVlr1Q=
Subject key identifier:   67:46:C9:50:A8:E9:20:F4:90:6B:90:38:37:A7:98:99:CD:F3:60:BB
Certificate issuer:       /CN=0d1877bd36cc5ccc64afec2ed652685f0453ae84
Certificate serial:       0D3F67
Authority key identifier: E3:B9:A9:81:C1:3F:1A:C1:D3:30:19:F3:49:06:4A:2D:30:8D:CF:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1877bd36cc5ccc64afec2ed652685f0453ae84.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/943acbc5-5f6d-4e41-a9f2-7b2448893f20/05ef366e1825af2da94c55869a4a1962c3b6f6ec.roa
Signing time:             Wed 24 Mar 2021 14:31:40 +0000
ROA not before:           Wed 24 Mar 2021 14:31:40 +0000
ROA not after:            Tue 24 Mar 2026 14:31:40 +0000
asID:                     264822
IP address blocks:        170.80.136.0/22 maxlen: 24
                          2803:bcc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868199 (0xd3f67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1877bd36cc5ccc64afec2ed652685f0453ae84
        Validity
            Not Before: Mar 24 14:31:40 2021 GMT
            Not After : Mar 24 14:31:40 2026 GMT
        Subject: CN=05ef366e1825af2da94c55869a4a1962c3b6f6ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9c:fc:ab:6d:f3:16:ed:bb:fe:02:43:87:c6:
                    6f:ad:4b:3b:c5:16:bd:bc:73:d9:47:f6:fd:e0:6c:
                    a1:af:68:ce:43:cf:32:46:18:ac:d0:dd:0c:81:24:
                    94:29:39:6f:1f:43:2c:ac:d8:5e:d1:35:e1:79:9d:
                    fa:9d:e7:98:f6:04:1f:51:ac:11:1f:6a:0b:08:31:
                    b3:9f:db:0c:16:da:65:f2:d6:81:e4:28:73:a2:ef:
                    ba:8c:bd:e2:2b:a0:f3:a9:8f:8b:1f:db:91:69:c0:
                    56:66:e8:4a:92:56:95:1f:13:ed:4f:db:11:a1:e7:
                    8b:95:23:55:ae:eb:86:f9:cd:32:e7:05:b6:fc:29:
                    4d:44:25:cb:a7:f7:23:55:5a:37:68:6f:a3:47:f1:
                    88:6b:b4:94:f7:37:f3:89:18:c2:92:cf:1a:99:75:
                    7f:2f:ce:4f:91:86:1c:87:70:36:19:bb:c5:6d:b1:
                    c8:6c:75:8e:e7:98:0b:b8:ac:b4:9a:ed:7c:40:0a:
                    06:47:c1:79:f5:a4:1b:a0:ba:d5:f5:92:8d:4c:66:
                    1c:a8:8a:23:5d:25:95:90:11:69:06:09:4e:04:82:
                    42:ea:d8:0a:4b:a4:67:71:b4:8c:59:b9:c7:fe:5d:
                    0e:ff:28:2c:21:c8:3f:87:1d:38:a7:26:31:df:69:
                    a8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:46:C9:50:A8:E9:20:F4:90:6B:90:38:37:A7:98:99:CD:F3:60:BB
            X509v3 Authority Key Identifier:
                keyid:E3:B9:A9:81:C1:3F:1A:C1:D3:30:19:F3:49:06:4A:2D:30:8D:CF:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d1877bd36cc5ccc64afec2ed652685f0453ae84.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/943acbc5-5f6d-4e41-a9f2-7b2448893f20/05ef366e1825af2da94c55869a4a1962c3b6f6ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/943acbc5-5f6d-4e41-a9f2-7b2448893f20/0d1877bd36cc5ccc64afec2ed652685f0453ae84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.136.0/22
                IPv6:
                  2803:bcc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:27:67:c7:af:9a:1d:fa:ae:0e:15:cd:e8:ca:40:4d:95:3d:
         71:d1:c0:d3:be:69:d3:44:1a:cb:49:35:c5:0b:2d:16:f2:61:
         26:57:2b:ce:c5:45:c6:6d:e1:b9:1d:ee:c6:f8:85:0d:f1:f6:
         29:6b:71:9b:43:e5:c8:03:63:15:cd:17:48:a0:9c:71:80:03:
         46:d2:7d:a0:8a:f1:f1:b4:44:9c:7d:de:6d:9c:2a:26:4c:67:
         fb:e9:15:e7:4e:71:fc:a2:d5:69:49:70:18:49:dd:0d:01:d8:
         19:cd:43:5c:0f:1c:d7:8a:0d:65:db:b6:bc:ff:ed:c4:85:81:
         76:77:70:8f:f8:a6:43:7a:bf:48:7c:ed:cc:9e:09:12:41:15:
         2f:f1:30:d6:4d:7a:10:4e:57:40:7c:14:d0:ed:8d:15:f0:83:
         61:63:6f:8d:e1:67:c4:14:9a:1d:89:8e:58:15:67:2d:40:ff:
         8a:d4:74:ee:39:58:c5:e2:9d:ef:29:11:5e:3c:6b:5d:3a:a2:
         05:74:c0:e3:ce:a2:b2:83:cd:5d:72:b5:12:45:14:71:ce:6f:
         29:bc:67:56:a5:8d:51:a6:d3:2f:34:0a:2c:17:7d:6d:8d:7c:
         65:18:37:98:aa:cb:55:e4:68:a5:91:0d:a3:36:60:88:b8:55:
         8b:ee:a7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----