Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d99c55c275c59c14cc02ed8cf16ee79d3e9cc4e7.roa
File:                     d99c55c275c59c14cc02ed8cf16ee79d3e9cc4e7.roa (raw, json)
Hash identifier:          cEnboqHVATdQQYCpJcBAdmVesMQClDHAzD4kI1UWIqc=
Subject key identifier:   76:87:94:D0:C1:85:32:E1:59:62:45:67:05:4B:E9:28:EC:79:1D:31
Certificate issuer:       /CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
Certificate serial:       02480B
Authority key identifier: 42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d99c55c275c59c14cc02ed8cf16ee79d3e9cc4e7.roa
Signing time:             Wed 24 Mar 2021 14:48:09 +0000
ROA not before:           Wed 24 Mar 2021 14:48:09 +0000
ROA not after:            Tue 24 Mar 2026 14:48:09 +0000
asID:                     267789
IP address blocks:        161.22.38.0/24 maxlen: 24
                          161.22.32.0/24 maxlen: 24
                          161.22.34.0/23 maxlen: 24
                          2803:6680::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149515 (0x2480b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591
        Validity
            Not Before: Mar 24 14:48:09 2021 GMT
            Not After : Mar 24 14:48:09 2026 GMT
        Subject: CN=d99c55c275c59c14cc02ed8cf16ee79d3e9cc4e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:25:bf:6b:9a:83:e5:c3:0d:e8:ab:93:20:
                    44:ff:d8:3e:f6:d4:13:09:c8:6c:ee:62:56:e3:b1:
                    5a:2d:40:41:78:91:6b:39:6f:b1:df:67:69:d8:cf:
                    b3:30:71:8f:cd:e8:0a:cf:13:37:56:11:ce:92:4b:
                    ed:5d:4c:01:20:27:dd:1f:8d:11:b8:5f:1b:69:c2:
                    5d:84:55:ac:fb:54:25:b0:76:e2:f0:e5:7f:99:42:
                    a1:e6:1c:53:7b:67:7f:eb:b5:c8:c6:2e:66:f7:0d:
                    47:30:28:08:b0:ee:d5:59:1a:0c:8c:f5:87:dd:2c:
                    90:62:fd:e1:9f:37:84:6a:99:aa:36:f7:e5:81:4f:
                    a0:d6:3b:43:11:ee:a1:84:42:b9:9d:0b:90:ee:0d:
                    9e:86:af:b6:9b:87:e3:37:80:d4:d8:ce:db:09:4f:
                    1d:48:0d:fb:04:f4:13:03:51:da:ed:a6:d7:06:62:
                    73:3f:e4:e7:b0:77:df:f9:ee:d6:89:25:59:0a:66:
                    0e:7e:68:f8:e1:e6:ab:1a:94:ae:e3:28:cc:85:5d:
                    eb:36:4f:8b:49:1b:cc:7c:81:f3:b5:f9:a3:78:5e:
                    45:b1:9c:0f:43:43:e7:22:db:c3:d9:f2:8a:e0:06:
                    10:d5:9a:c5:a4:a6:6e:3a:b4:30:df:29:e3:50:5b:
                    d2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:87:94:D0:C1:85:32:E1:59:62:45:67:05:4B:E9:28:EC:79:1D:31
            X509v3 Authority Key Identifier:
                keyid:42:EC:CC:AC:F8:89:6B:C8:B0:FF:2A:74:69:56:CF:56:89:0B:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d99c55c275c59c14cc02ed8cf16ee79d3e9cc4e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a05b684c-dd00-4841-9929-1ab75094679b/d0f59e4d0f4dd66d1e80cb4ff76e6ab293179591.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.32.0/24
                  161.22.34.0/23
                  161.22.38.0/24
                IPv6:
                  2803:6680::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:b3:ff:e9:72:ab:07:75:d3:f4:0e:23:6d:a4:a6:5e:a6:f1:
         b8:85:8c:31:da:3e:19:b8:10:6e:18:44:d5:e9:28:07:5b:b4:
         4b:0b:fe:8a:2f:57:61:1e:75:27:6e:35:5e:a8:db:de:97:17:
         b8:65:35:04:ac:41:23:a1:53:04:90:ad:22:ca:5c:a8:2e:50:
         b8:49:b3:d6:57:b3:02:52:74:ab:9c:76:1a:1b:7e:74:d2:a8:
         b1:ec:38:cd:92:80:f0:19:5a:13:05:e2:17:fd:2e:7d:26:c5:
         f4:cb:00:d8:86:4b:b9:5b:03:93:37:73:31:eb:b6:e8:5f:32:
         41:8e:a7:d3:09:76:a4:ca:0d:2c:d9:8d:2a:2b:76:12:8c:86:
         3a:77:72:01:22:a3:20:e0:c8:da:c1:0e:b2:e4:74:19:77:92:
         0b:f0:31:f3:26:1a:f2:8f:75:fe:35:0b:2d:32:22:42:1b:0b:
         95:6c:2e:be:f0:ef:65:f5:b4:e9:c9:5c:80:b0:77:a2:db:25:
         9a:af:12:8b:c5:62:2b:25:c7:3a:60:0e:ae:12:91:50:9b:9e:
         f6:90:3f:3c:19:74:87:a2:70:8d:4d:75:3d:1f:5c:c0:3d:cc:
         5e:6b:c4:d1:a6:51:c0:89:9a:e9:8b:ab:a4:7d:6b:6b:91:7b:
         0b:53:95:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----