Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/80669f26435981e3475e818806d7b67a0c23d0d5.roa
File:                     80669f26435981e3475e818806d7b67a0c23d0d5.roa (raw, json)
Hash identifier:          juRI06QTqI+0nswBKJ3dSGIesDCRpfVDP8NVh1qGTKo=
Subject key identifier:   40:0D:D8:8D:21:19:B5:B6:03:62:55:07:F8:37:11:9E:94:3B:D1:D3
Certificate issuer:       /CN=e54bc3956d81b33eb49bda17274b51fc9913ebd7
Certificate serial:       F1
Authority key identifier: 67:B4:8A:CD:94:C0:43:ED:CE:84:A5:BE:6E:74:16:77:1C:6A:3A:FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e54bc3956d81b33eb49bda17274b51fc9913ebd7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/80669f26435981e3475e818806d7b67a0c23d0d5.roa
Signing time:             Sat 26 Mar 2022 15:17:41 +0000
ROA not before:           Sat 26 Mar 2022 03:00:00 +0000
ROA not after:            Tue 26 Mar 2024 03:00:00 +0000
asID:                     264776
IP address blocks:        168.197.248.0/22 maxlen: 22
                          2803:c8c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e54bc3956d81b33eb49bda17274b51fc9913ebd7
        Validity
            Not Before: Mar 26 03:00:00 2022 GMT
            Not After : Mar 26 03:00:00 2024 GMT
        Subject: CN=80669f26435981e3475e818806d7b67a0c23d0d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:96:26:15:38:ee:29:ec:fc:3d:8d:24:10:cb:
                    67:e3:d6:81:86:0f:bd:d1:4f:01:5a:fe:cc:c3:da:
                    c2:da:85:92:c4:14:b9:b3:b2:a7:ff:36:fc:f5:01:
                    46:64:d6:a4:7b:3d:fe:e3:d4:bd:92:40:33:7c:96:
                    f7:68:4d:51:d1:3d:09:23:88:f4:2a:54:f9:c6:56:
                    53:9a:41:27:99:28:c9:5d:0c:43:b6:5f:a6:f6:f4:
                    ea:22:cb:ad:a3:32:87:2a:db:d1:bb:27:c4:bb:88:
                    4f:66:54:80:10:f7:7f:e1:32:13:0e:66:82:4c:e2:
                    56:d0:b8:d5:50:70:7f:6a:84:30:f6:9b:49:3b:4f:
                    f4:d8:45:6f:ae:54:25:21:a3:9b:35:cb:e7:41:a2:
                    fc:e3:87:fa:fb:15:4a:d4:b9:32:b2:9a:97:72:37:
                    da:d2:36:9e:20:17:ac:7a:d9:a5:06:e2:3b:8d:03:
                    09:9a:73:c1:01:2d:53:8b:26:98:9d:fe:91:1e:e7:
                    92:58:ac:16:31:ac:29:c9:04:09:5a:d6:96:de:c6:
                    05:29:c3:66:71:88:0f:64:65:5f:89:4b:27:67:99:
                    71:de:b0:1d:59:d3:4a:6f:32:03:15:f7:6c:d8:fc:
                    12:fc:a7:eb:78:51:1c:42:ed:1a:df:0b:7e:70:ba:
                    c2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:0D:D8:8D:21:19:B5:B6:03:62:55:07:F8:37:11:9E:94:3B:D1:D3
            X509v3 Authority Key Identifier:
                keyid:67:B4:8A:CD:94:C0:43:ED:CE:84:A5:BE:6E:74:16:77:1C:6A:3A:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e54bc3956d81b33eb49bda17274b51fc9913ebd7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/80669f26435981e3475e818806d7b67a0c23d0d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b47efe98-5f57-4c06-ac1d-c9f961d9d521/e54bc3956d81b33eb49bda17274b51fc9913ebd7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.248.0/22
                IPv6:
                  2803:c8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:54:43:42:a9:a6:c5:ad:eb:22:3f:68:c3:9b:e2:db:b9:21:
         19:9c:3a:15:60:0a:18:d6:10:16:55:d3:65:67:76:20:76:64:
         ae:65:1b:d3:80:d9:ec:34:8f:d9:e2:2b:fc:d9:ec:8b:f3:b5:
         b4:9d:29:70:96:97:5a:79:6f:54:66:78:ec:b0:3e:3f:6f:d4:
         16:35:34:07:c5:cc:85:c8:09:65:ff:6c:9e:1c:d4:87:6c:0a:
         9e:2e:ac:64:d7:60:e4:03:e1:df:28:7f:67:1b:8f:43:77:40:
         0f:93:8e:a2:12:90:2f:92:a7:76:56:21:6a:8b:1c:e3:51:c3:
         42:27:f2:20:6e:90:68:e3:fa:fa:70:97:fb:26:4f:e2:de:2d:
         94:70:d3:39:65:c6:91:6b:20:7a:e8:9d:e8:c9:65:ba:5b:54:
         8a:48:26:64:30:20:5c:55:0d:f9:90:29:02:d3:57:cb:f1:ca:
         c2:07:79:03:7b:aa:3a:cd:15:8d:1b:62:ea:6c:30:57:13:31:
         c2:21:f1:08:37:4f:32:96:18:04:1f:d2:00:3d:45:4c:05:cc:
         37:dd:c7:7e:2f:db:4d:db:2d:00:14:24:76:a3:7e:ec:88:c7:
         40:69:25:f5:e9:9c:fe:18:b2:a3:14:82:f3:9a:ec:0f:1e:f8:
         ca:97:a1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----