Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9b68a10c-54a0-424e-88c9-e0e7e85e5c5c/6ca315b71c1dec86986340bd09916b7bc3804354.roa
File:                     6ca315b71c1dec86986340bd09916b7bc3804354.roa (raw, json)
Hash identifier:          8jgMFu/3LLHpRxw9KCmd9SVi/1qAY5g1UjysswunOp8=
Subject key identifier:   AE:30:61:CC:D5:34:F1:E6:78:6A:40:12:49:69:0F:06:66:43:87:27
Certificate issuer:       /CN=3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c
Certificate serial:       0DAD68
Authority key identifier: C0:DF:BE:F2:49:D4:28:4F:A2:22:65:25:74:CA:A9:6B:98:D1:BD:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9b68a10c-54a0-424e-88c9-e0e7e85e5c5c/6ca315b71c1dec86986340bd09916b7bc3804354.roa
Signing time:             Wed 24 Mar 2021 14:47:22 +0000
ROA not before:           Wed 24 Mar 2021 14:47:22 +0000
ROA not after:            Tue 24 Mar 2026 14:47:22 +0000
asID:                     265633
IP address blocks:        170.244.52.0/22 maxlen: 22
                          2803:5ac0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896360 (0xdad68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c
        Validity
            Not Before: Mar 24 14:47:22 2021 GMT
            Not After : Mar 24 14:47:22 2026 GMT
        Subject: CN=6ca315b71c1dec86986340bd09916b7bc3804354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:08:c9:8a:cd:30:1e:fa:1d:93:f5:21:70:3a:
                    0c:e5:d1:b0:29:0e:8a:1a:d1:b0:cc:d8:f7:4a:46:
                    44:b7:43:02:5c:62:24:a7:b5:82:df:7c:dc:3a:2e:
                    f9:e8:37:0c:3f:16:65:f4:67:17:b9:8c:cb:5b:5c:
                    2d:a2:64:5f:bb:62:6d:c2:ce:d4:dc:27:32:d2:f9:
                    72:db:91:63:ed:c4:47:3e:37:e7:c1:12:1b:92:a4:
                    a4:a6:66:0c:29:1b:a9:d5:c5:6a:5c:8f:d2:e0:26:
                    b7:6f:29:2d:43:5a:ee:59:92:e7:be:bf:4b:68:7b:
                    9c:17:33:d0:4c:77:2d:36:ab:5b:16:0c:a1:d3:61:
                    13:0a:63:65:ca:06:51:93:9f:86:c4:00:4e:ad:17:
                    59:d4:7e:99:41:d9:35:79:2c:8f:11:8e:55:6b:32:
                    36:17:57:43:6e:8a:5d:b5:73:3b:6a:ab:19:41:b2:
                    d5:44:c0:6f:72:62:80:ce:96:cf:70:9d:10:1c:80:
                    32:45:15:cd:44:b0:c4:ca:60:76:e2:8e:e2:2a:ed:
                    75:57:d7:91:64:d3:91:07:48:4c:26:74:c6:fd:94:
                    f9:ca:0c:bf:b5:4a:33:8e:94:b7:0e:9e:aa:47:19:
                    6d:31:73:4f:44:2c:64:29:60:6b:e7:d5:1e:59:ed:
                    76:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:30:61:CC:D5:34:F1:E6:78:6A:40:12:49:69:0F:06:66:43:87:27
            X509v3 Authority Key Identifier:
                keyid:C0:DF:BE:F2:49:D4:28:4F:A2:22:65:25:74:CA:A9:6B:98:D1:BD:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9b68a10c-54a0-424e-88c9-e0e7e85e5c5c/6ca315b71c1dec86986340bd09916b7bc3804354.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9b68a10c-54a0-424e-88c9-e0e7e85e5c5c/3e089b1672b85d5b6e072fa49ac9aa7681ce1d2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.52.0/22
                IPv6:
                  2803:5ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:e0:56:20:75:d6:4b:65:4b:72:fc:d3:45:31:8c:0f:d4:be:
         f6:b4:e7:46:17:8a:f0:1f:5b:8c:50:f4:f3:7a:e2:dd:5d:6e:
         53:1d:df:11:9c:c5:25:49:29:e4:7e:4f:e1:4f:90:aa:b0:97:
         97:c0:76:c7:97:1a:15:cb:dc:18:28:c0:f5:b3:62:e0:aa:96:
         ef:64:6f:d6:f4:dd:56:60:6e:3d:26:50:f6:08:84:bc:ad:28:
         85:22:f5:1b:19:21:e6:49:0e:e5:fe:58:29:ee:36:05:cc:96:
         3f:2a:d4:82:c3:c1:92:52:6d:53:ab:2f:ec:77:e2:df:e6:82:
         94:b9:d2:0c:c5:b6:58:f0:8c:89:37:bf:c0:79:5e:3d:f7:29:
         c6:5b:49:d6:57:0f:a5:ac:c4:3e:83:fb:8c:29:53:dd:3a:8c:
         d7:84:2b:08:f5:0c:e6:71:50:93:a8:a4:07:50:a9:f9:a6:1f:
         b0:97:8a:ee:23:c0:c4:95:71:e8:44:c2:49:ff:4a:9f:13:26:
         bb:af:0f:74:23:f4:79:ab:ba:6f:10:0e:49:e6:ab:a5:52:7a:
         82:55:9a:c2:bf:d6:a7:71:0d:43:9a:75:bc:30:a5:bf:df:79:
         43:ea:11:cf:d9:19:b4:1a:6c:e2:86:8d:a4:1f:82:77:ea:9a:
         6f:b5:3f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----