Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abf1411d-afd3-4165-b445-d723d265a88d/07a95024b717e6b9fc4f977a3a512407fb3612e9.roa
File:                     07a95024b717e6b9fc4f977a3a512407fb3612e9.roa (raw, json)
Hash identifier:          U1Qy/K4aBA98Qo/UWUQd5ZYDmr7FdlmN+Gf2PZt5Qg0=
Subject key identifier:   DC:37:63:59:0C:FA:FF:75:17:DD:5A:7A:04:28:7D:82:48:85:26:A4
Certificate issuer:       /CN=4019f35f7ca8fc11898d08928b649b585f772286
Certificate serial:       05D292
Authority key identifier: 13:2E:0A:EA:89:AA:A3:3A:E0:44:88:58:38:B5:DA:64:68:31:D5:6D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4019f35f7ca8fc11898d08928b649b585f772286.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abf1411d-afd3-4165-b445-d723d265a88d/07a95024b717e6b9fc4f977a3a512407fb3612e9.roa
Signing time:             Wed 24 Mar 2021 14:34:45 +0000
ROA not before:           Wed 24 Mar 2021 14:34:45 +0000
ROA not after:            Tue 24 Mar 2026 14:34:45 +0000
asID:                     262191
IP address blocks:        131.0.168.0/22 maxlen: 24
                          168.197.68.0/22 maxlen: 24
                          2803:1580::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381586 (0x5d292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4019f35f7ca8fc11898d08928b649b585f772286
        Validity
            Not Before: Mar 24 14:34:45 2021 GMT
            Not After : Mar 24 14:34:45 2026 GMT
        Subject: CN=07a95024b717e6b9fc4f977a3a512407fb3612e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8d:a6:2a:9f:03:d1:49:53:73:e4:dc:13:a1:
                    53:a8:46:fe:27:2c:04:d6:20:13:8f:24:5d:73:4e:
                    22:52:2b:c9:57:db:75:94:65:2d:5d:a3:60:36:e7:
                    63:70:95:2c:25:82:dd:f6:94:84:94:75:77:e2:a2:
                    5c:e1:4c:28:83:e1:08:14:1c:72:5e:fb:3b:30:bc:
                    1c:a5:af:89:62:a0:08:fb:ef:6e:32:12:2f:b5:1a:
                    19:11:09:37:cf:93:fc:b0:94:1a:9e:94:49:14:6d:
                    52:c9:86:47:76:d9:c2:e2:d2:34:0f:eb:07:9c:d4:
                    40:a1:a6:59:98:39:cc:96:01:62:a3:23:2d:63:f6:
                    eb:6a:8b:e4:3f:5d:fb:97:6d:1b:e8:bd:02:bd:0a:
                    47:14:6b:c3:44:88:16:7a:0e:66:92:3c:02:c9:f4:
                    47:f3:6b:b0:a3:51:a0:a1:c2:53:4d:84:2d:66:e5:
                    88:fe:c5:c1:83:d5:79:e5:fc:2d:d4:2c:f0:1e:86:
                    37:f8:7a:61:ea:10:f2:26:fb:92:21:25:5f:46:b9:
                    04:26:56:35:1c:56:7d:bb:b3:de:79:12:13:93:ec:
                    b2:c1:88:17:16:de:42:55:90:d2:1a:41:c6:49:3e:
                    6d:02:50:db:2e:8b:b0:c8:54:e6:e1:62:ec:58:ba:
                    6e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:37:63:59:0C:FA:FF:75:17:DD:5A:7A:04:28:7D:82:48:85:26:A4
            X509v3 Authority Key Identifier:
                keyid:13:2E:0A:EA:89:AA:A3:3A:E0:44:88:58:38:B5:DA:64:68:31:D5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4019f35f7ca8fc11898d08928b649b585f772286.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abf1411d-afd3-4165-b445-d723d265a88d/07a95024b717e6b9fc4f977a3a512407fb3612e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abf1411d-afd3-4165-b445-d723d265a88d/4019f35f7ca8fc11898d08928b649b585f772286.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.168.0/22
                  168.197.68.0/22
                IPv6:
                  2803:1580::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:8d:a6:84:47:1e:ce:d7:09:39:e7:50:3f:02:13:23:dd:ae:
         ee:46:d8:10:f4:8f:93:bd:7b:79:a2:a5:41:7d:fb:47:30:68:
         99:12:d2:c6:16:c5:40:24:59:bb:45:df:28:6d:07:b7:75:94:
         f4:59:c8:12:36:4b:a5:ec:c9:e8:86:f5:48:23:8d:7e:6e:79:
         fc:92:5d:bd:9b:d5:10:c2:70:3f:2a:fe:72:18:80:82:65:af:
         aa:a1:ab:65:fe:12:f4:80:90:e7:23:04:69:dd:57:24:02:e6:
         9e:73:2a:2b:5b:5a:b4:b9:d5:15:02:90:e9:20:7c:d8:b4:86:
         bb:ea:ed:d7:e5:80:63:4e:19:e3:6f:7a:cf:a0:b1:3b:1a:0a:
         ba:26:a3:e0:b4:6b:a7:61:10:f0:48:33:63:0b:da:5a:1f:75:
         42:e2:eb:8e:b4:48:3b:b2:69:b9:e0:b3:89:a7:34:3b:d0:34:
         5b:37:70:04:bb:6b:98:f2:21:8d:e2:96:27:2f:55:1f:5f:9b:
         ba:d5:7a:d0:3f:8a:23:31:7c:15:3f:75:3b:ac:35:8d:ea:c3:
         1e:d4:77:cd:4b:b9:84:cc:d0:8c:b0:6a:c4:da:ac:b2:e4:fb:
         f1:a9:0d:ff:fe:90:36:48:fd:57:4b:17:b4:0b:ec:f3:8a:15:
         13:81:85:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----