Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/0e66a6f4e8fb3d38de8d7309f227052f7e29b560.roa
File:                     0e66a6f4e8fb3d38de8d7309f227052f7e29b560.roa (raw, json)
Hash identifier:          DBgAqym4EDeCpOIZ6j0cHts7YJqbr8HvGdHn7mX+/jw=
Subject key identifier:   44:8C:84:E5:7C:11:4D:E6:35:FF:6C:DC:13:5C:18:AE:E4:85:72:AB
Certificate issuer:       /CN=5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae
Certificate serial:       0E1524
Authority key identifier: 75:77:AF:10:66:15:D9:6D:1C:24:42:60:6A:86:60:57:EE:9F:48:82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/0e66a6f4e8fb3d38de8d7309f227052f7e29b560.roa
Signing time:             Wed 24 Mar 2021 14:32:05 +0000
ROA not before:           Wed 24 Mar 2021 14:32:05 +0000
ROA not after:            Tue 24 Mar 2026 14:32:05 +0000
asID:                     7049
IP address blocks:        186.0.192.0/18 maxlen: 24
                          2800:630::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922916 (0xe1524)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae
        Validity
            Not Before: Mar 24 14:32:05 2021 GMT
            Not After : Mar 24 14:32:05 2026 GMT
        Subject: CN=0e66a6f4e8fb3d38de8d7309f227052f7e29b560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:39:c6:8b:3d:13:8d:9f:5f:21:ae:54:27:
                    d5:7c:e0:f9:bf:81:75:73:e0:1d:a8:62:6a:a4:cf:
                    9d:02:5e:6c:e1:41:f9:8c:01:9f:11:10:fa:54:97:
                    d3:91:81:92:81:fd:fa:6a:72:4c:ae:15:d7:4d:97:
                    7b:61:c7:93:50:bb:7c:80:e1:9c:5b:cf:16:b1:29:
                    b4:fd:42:53:e5:e7:a6:23:94:e6:e3:3e:c4:48:12:
                    75:5d:14:c6:a5:3b:88:33:55:bd:dc:0c:49:e4:33:
                    54:f4:d8:d9:ec:26:1e:16:fd:e6:71:ff:cd:c0:61:
                    13:c0:15:a0:ce:ac:fe:25:71:0e:96:10:f5:43:24:
                    f7:ba:13:ac:0f:d5:81:9f:1b:64:78:53:d6:83:d2:
                    25:0a:39:3d:fb:7e:a4:1e:f5:cc:f9:cc:83:2a:3d:
                    05:1f:e6:75:02:64:9c:0d:a0:e8:ed:eb:97:3a:38:
                    2b:c1:f4:ad:15:b0:6e:62:8d:91:aa:06:93:f3:b8:
                    10:6e:02:e3:e3:95:9d:ce:38:48:18:10:cb:c6:f2:
                    61:df:3a:a2:32:88:a8:ab:f7:49:dc:f7:5b:08:e8:
                    a4:77:2d:32:af:80:46:ea:fc:bb:14:6c:99:c2:84:
                    c4:8d:b2:c9:8c:ba:95:a6:b5:df:7f:98:71:5a:6b:
                    c9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8C:84:E5:7C:11:4D:E6:35:FF:6C:DC:13:5C:18:AE:E4:85:72:AB
            X509v3 Authority Key Identifier:
                keyid:75:77:AF:10:66:15:D9:6D:1C:24:42:60:6A:86:60:57:EE:9F:48:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/0e66a6f4e8fb3d38de8d7309f227052f7e29b560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9c34294d-9ae6-49fd-8d50-84ea7e5c9a59/5cc8a7a5937d9d7077f00b2d98fc6901e063c7ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.0.192.0/18
                IPv6:
                  2800:630::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:3f:e9:74:76:d3:bb:5e:03:31:49:9f:bf:06:8e:00:50:be:
         47:b9:7b:da:7b:9d:b5:be:9c:66:60:b4:7f:11:4c:4e:54:a1:
         bb:3e:ac:77:3e:0b:b5:61:25:1d:2e:28:58:bc:cd:fc:23:65:
         fa:cb:c4:ff:d9:cc:88:e7:f3:4b:76:9b:f6:c0:2b:b9:1a:36:
         5f:7d:a6:98:3e:a0:87:70:90:7b:2b:b7:b6:05:50:74:87:ed:
         ae:e9:90:4e:53:5e:73:8a:3f:e2:a6:dd:89:26:ba:e5:ca:ea:
         bd:9e:79:b3:8b:36:22:c8:44:11:db:c9:ae:ab:bc:b3:94:f5:
         2f:3f:3a:05:8f:ea:7b:13:38:39:9e:59:3c:22:04:2b:46:8b:
         d2:f1:4d:84:4c:51:e8:4f:93:df:0e:22:5e:29:8b:97:a6:7b:
         65:91:a2:ca:69:4d:1b:a7:2c:9e:43:19:66:7a:c3:23:c9:68:
         aa:b9:9a:5d:86:89:ce:de:83:a5:7d:0b:88:91:4a:19:12:42:
         a5:c5:a5:d9:bc:97:95:27:aa:3f:f2:27:2f:e8:b9:bd:f9:45:
         f5:2e:b5:97:1e:a4:c5:be:ca:cc:f2:4f:68:53:0b:dc:c5:b2:
         25:14:25:fb:a6:dd:1e:02:64:fb:c1:10:2e:a9:b5:5e:aa:dd:
         3c:41:03:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----