Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/2aeb371b931ebfd72bfec74e3d69178380caa01d.roa
File:                     2aeb371b931ebfd72bfec74e3d69178380caa01d.roa (raw, json)
Hash identifier:          yx56h7uqyeXagJVU4gtXFPlPPaS/qieyJJUzKWA16qw=
Subject key identifier:   B2:54:65:14:A3:2D:92:8F:C4:58:73:76:19:06:3B:05:99:69:C9:8B
Certificate issuer:       /CN=fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0
Certificate serial:       0D2957
Authority key identifier: C9:AF:3E:90:B4:D4:15:3A:ED:3C:22:DD:4D:BE:95:F2:3E:74:2D:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/2aeb371b931ebfd72bfec74e3d69178380caa01d.roa
Signing time:             Wed 24 Mar 2021 14:34:15 +0000
ROA not before:           Wed 24 Mar 2021 14:34:14 +0000
ROA not after:            Tue 24 Mar 2026 14:34:14 +0000
asID:                     27897
IP address blocks:        158.170.0.0/16 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862551 (0xd2957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0
        Validity
            Not Before: Mar 24 14:34:14 2021 GMT
            Not After : Mar 24 14:34:14 2026 GMT
        Subject: CN=2aeb371b931ebfd72bfec74e3d69178380caa01d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fc:3d:33:b7:fc:93:d0:c3:40:b0:ce:5b:26:
                    7c:dd:c3:05:2f:e9:0a:74:2e:37:c5:0d:4b:d1:aa:
                    1c:c3:25:8a:c7:50:0e:ea:f5:06:48:35:0d:8d:cb:
                    8b:a4:7e:a9:d4:99:a7:40:07:45:70:dc:8c:53:18:
                    a7:50:51:8f:c3:c0:92:25:f5:a7:a0:19:4c:d0:27:
                    45:d5:b7:96:0e:ec:fb:17:ff:a1:e5:11:06:7c:1f:
                    63:61:0b:52:21:a2:0b:12:e4:b2:47:a3:83:19:67:
                    70:09:7d:e2:0e:8c:71:d1:8f:48:c0:8e:4e:8f:6c:
                    0a:d4:df:37:f0:5e:fc:ba:5f:9d:05:31:4e:39:52:
                    81:95:9a:8b:d7:8c:b7:5f:a5:b1:4c:d6:28:7d:2e:
                    fb:0b:d2:72:a9:c8:0f:b7:0d:f8:5c:b3:07:39:66:
                    45:49:20:34:26:ef:0c:0f:00:4b:b0:4e:f7:af:c5:
                    14:77:d8:27:22:28:57:fd:03:47:23:f2:0b:2a:93:
                    e3:b6:d3:b9:a1:7e:75:1b:c3:35:17:36:aa:00:bb:
                    d1:3c:07:c2:94:49:d9:9b:85:50:5d:53:fc:26:ed:
                    92:d2:d8:dc:da:50:e0:ce:4c:b5:70:ac:60:35:9c:
                    86:89:af:f1:c9:07:56:77:27:43:30:76:ee:dc:e0:
                    21:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:54:65:14:A3:2D:92:8F:C4:58:73:76:19:06:3B:05:99:69:C9:8B
            X509v3 Authority Key Identifier:
                keyid:C9:AF:3E:90:B4:D4:15:3A:ED:3C:22:DD:4D:BE:95:F2:3E:74:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/2aeb371b931ebfd72bfec74e3d69178380caa01d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a3680c7d-afc2-4556-acee-527fe700ad30/fcd19793fdd5f6d283f3cc1925b7d81ceeb450f0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.170.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         06:ca:a3:aa:b7:b2:b0:92:66:19:b1:ee:0d:68:8e:01:48:ee:
         5c:e5:cb:7d:f6:e9:3c:56:ca:c5:4c:f4:2f:13:e2:ce:77:9b:
         3a:6b:6e:68:2b:a9:29:49:9d:e7:2e:48:22:d6:ef:e4:b8:52:
         99:a9:a3:79:92:db:46:f6:b2:e5:a7:d8:ee:e4:25:9a:b1:4d:
         e0:fa:06:da:ac:60:76:6d:a0:f8:60:fa:2e:f1:be:14:3e:96:
         e4:6f:27:d0:9f:25:2b:1c:a0:2a:83:f0:8b:1c:d9:22:33:60:
         84:e0:7b:40:d7:28:4c:f8:9b:37:61:c1:52:8c:9d:71:a1:30:
         62:4b:9b:3b:d4:1d:47:79:cb:f4:ea:1a:45:5f:4e:c0:5d:79:
         32:71:2b:d1:53:12:7b:43:cd:cb:df:18:cc:76:98:44:b8:a9:
         bc:90:31:db:b1:eb:ea:6b:66:b1:9f:27:a4:c6:80:fe:3a:c6:
         96:e0:f5:55:9b:3e:ef:48:24:34:eb:ff:55:b3:20:49:06:0a:
         0f:e8:d4:ad:0c:3e:e5:9a:32:27:46:bf:e3:19:0e:96:45:53:
         36:dc:07:55:f4:69:61:71:f5:a9:bf:77:cc:2d:07:6d:2d:27:
         a2:c2:8e:f9:e0:ce:a5:3c:31:0a:15:d9:26:73:50:61:00:5f:
         98:99:51:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----