Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/2b47680f8b6390045ba2d263175a7e46274c7f62.roa
File:                     2b47680f8b6390045ba2d263175a7e46274c7f62.roa (raw, json)
Hash identifier:          GpBSEi3KrS375KDR9e/yvANfMSrsb4R/kEvkBlwW4qM=
Subject key identifier:   C1:14:D5:48:25:3E:B3:8E:BD:C1:90:8C:F0:9E:1F:08:AF:75:07:21
Certificate issuer:       /CN=2733e5fc045a22897f64385008a5c519f68c3738
Certificate serial:       041E
Authority key identifier: 34:F4:01:2A:E3:5E:A3:ED:47:89:FB:B2:04:40:FF:56:A7:F4:DE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2733e5fc045a22897f64385008a5c519f68c3738.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/2b47680f8b6390045ba2d263175a7e46274c7f62.roa
Signing time:             Fri 10 Jun 2022 17:41:05 +0000
ROA not before:           Fri 10 Jun 2022 03:00:00 +0000
ROA not after:            Mon 30 Nov 2026 03:00:00 +0000
asID:                     272057
IP address blocks:        187.63.156.0/22 maxlen: 24
                          2803:7d10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1054 (0x41e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2733e5fc045a22897f64385008a5c519f68c3738
        Validity
            Not Before: Jun 10 03:00:00 2022 GMT
            Not After : Nov 30 03:00:00 2026 GMT
        Subject: CN=2b47680f8b6390045ba2d263175a7e46274c7f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:45:88:3b:c2:a4:a7:01:68:c8:71:d2:a1:
                    4d:35:18:9b:2d:65:bf:14:6c:12:f3:3e:db:22:2e:
                    2c:ef:46:0b:d3:50:ad:46:d6:c5:0a:1e:1c:1f:d8:
                    48:69:d1:8d:de:c1:01:63:c9:56:06:ce:a2:6e:2c:
                    8a:29:8b:56:b5:26:10:d9:b5:1f:53:32:bb:55:0e:
                    4e:d7:e9:a2:6f:6d:38:e1:eb:dd:ed:be:98:e3:02:
                    5f:db:14:74:44:73:fa:6d:82:88:40:38:75:ed:f8:
                    be:4c:a1:29:3d:69:e8:29:1b:02:ae:4c:12:13:e9:
                    6a:b6:72:10:1d:54:76:9f:2b:fc:f7:10:5d:5a:76:
                    d9:02:14:b5:90:a6:24:fd:5c:31:d5:e3:5d:ae:12:
                    f1:85:fb:95:1e:3c:a9:fe:b5:d1:99:00:aa:a8:e7:
                    58:bd:fa:8b:fa:2b:5a:18:76:1b:4b:9a:13:04:e2:
                    cb:9c:99:3a:a8:ba:19:fe:11:ab:75:72:00:d4:27:
                    d7:00:c9:f8:38:19:e4:60:c9:0c:90:f8:5e:96:75:
                    08:32:b1:c1:95:46:f9:77:56:ac:06:34:38:35:9e:
                    21:10:a1:47:93:87:5d:4a:87:18:38:a0:62:fd:86:
                    93:e4:4b:92:75:ab:5f:76:d2:d8:fe:8a:f4:9f:01:
                    3a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:14:D5:48:25:3E:B3:8E:BD:C1:90:8C:F0:9E:1F:08:AF:75:07:21
            X509v3 Authority Key Identifier:
                keyid:34:F4:01:2A:E3:5E:A3:ED:47:89:FB:B2:04:40:FF:56:A7:F4:DE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2733e5fc045a22897f64385008a5c519f68c3738.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/2b47680f8b6390045ba2d263175a7e46274c7f62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/2733e5fc045a22897f64385008a5c519f68c3738.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.156.0/22
                IPv6:
                  2803:7d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:d6:f9:8b:4d:19:a9:6e:c9:2a:be:8d:52:bb:f0:2e:91:e4:
         22:8b:2c:da:42:dd:b4:97:a4:b8:58:05:c4:ec:a0:6b:4f:4e:
         ff:cb:d0:3f:2d:48:4d:df:45:c9:b6:25:df:56:8b:ee:0d:d5:
         1d:98:87:fe:00:e5:a8:47:85:f1:37:77:0d:02:6f:f5:49:ee:
         c5:9b:2c:ee:b1:33:84:55:94:de:ec:33:29:01:2b:7b:6b:7f:
         9e:6e:78:50:24:53:0e:ec:ca:cd:4a:c1:9d:82:a5:c8:4a:d7:
         57:97:37:87:be:21:f0:58:0d:c8:31:36:b1:03:f9:6d:b5:c2:
         82:1a:da:bd:82:5c:d5:6b:a4:4e:36:b8:d4:8c:61:10:ff:5c:
         94:7e:a7:cb:db:5a:9b:f7:78:d1:9b:9b:55:24:1b:c9:df:83:
         5b:1e:ac:af:b6:20:d0:d0:10:e0:e0:a2:16:10:a5:fe:e3:b8:
         3f:1d:0d:4f:ec:4c:32:cd:65:4d:58:b1:e6:56:b7:6f:80:3f:
         49:83:87:2b:18:17:5c:64:ae:34:81:ea:aa:35:f6:e6:34:5f:
         22:63:45:61:fe:3d:bc:3e:eb:56:98:e9:53:a6:8e:ba:4d:bc:
         7e:fb:5a:a8:0f:b6:28:2c:50:8c:61:54:0a:68:d0:d2:28:46:
         46:34:45:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----