Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b50935ad-283c-4c42-9e6f-5dd491ac4d2a/ffb741ae2682d4d288d52c69fd8077db2c160fe9.roa
File:                     ffb741ae2682d4d288d52c69fd8077db2c160fe9.roa (raw, json)
Hash identifier:          x/sOCa36jNfB9o/1+s6zOegNzgzcM5CtK5gDKzqrY/I=
Subject key identifier:   0B:AF:DE:00:D1:14:4B:52:A4:E3:EF:26:E4:92:D3:A6:6E:45:9C:46
Certificate issuer:       /CN=4c7a1a5f823077ae912851a92afe4585962f9901
Certificate serial:       189E2C
Authority key identifier: 6B:07:45:33:D3:C1:48:F5:DA:B3:30:A5:26:73:FD:93:21:27:8A:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c7a1a5f823077ae912851a92afe4585962f9901.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b50935ad-283c-4c42-9e6f-5dd491ac4d2a/ffb741ae2682d4d288d52c69fd8077db2c160fe9.roa
Signing time:             Wed 27 Jul 2022 16:13:51 +0000
ROA not before:           Wed 27 Jul 2022 03:00:00 +0000
ROA not after:            Sat 27 Jul 2024 03:00:00 +0000
asID:                     262931
IP address blocks:        191.102.240.0/22 maxlen: 22
                          191.102.240.0/24 maxlen: 24
                          191.102.241.0/24 maxlen: 24
                          191.102.242.0/24 maxlen: 24
                          191.102.243.0/24 maxlen: 24
                          2803:5a80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1613356 (0x189e2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7a1a5f823077ae912851a92afe4585962f9901
        Validity
            Not Before: Jul 27 03:00:00 2022 GMT
            Not After : Jul 27 03:00:00 2024 GMT
        Subject: CN=ffb741ae2682d4d288d52c69fd8077db2c160fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:af:82:dd:36:b5:1f:96:2b:24:bb:bd:2c:
                    02:a2:62:a3:14:6c:2d:63:28:18:a8:e7:d4:21:da:
                    7c:40:f1:66:75:2d:10:be:ed:d9:65:dc:ac:38:23:
                    31:c3:4f:fe:b7:f1:69:dd:ce:4a:bd:bd:a6:c1:f8:
                    8d:0a:c0:88:d6:67:03:0b:b3:4f:2d:79:1f:c4:74:
                    20:93:01:98:23:46:34:2c:95:a4:da:46:e7:38:1f:
                    04:2d:c7:ad:2f:bf:7f:2e:88:d3:4d:a8:57:ac:83:
                    88:2b:6f:9b:f3:dd:84:72:e4:f6:10:51:96:ea:ac:
                    db:b2:a3:fe:d9:15:55:22:6a:a9:db:fd:85:9d:32:
                    ff:50:cc:47:70:5c:2f:67:52:f9:53:e3:11:65:1b:
                    eb:3e:27:6d:49:d1:40:6e:b6:5f:15:2a:7b:87:0d:
                    65:da:45:9d:e3:82:77:6a:f4:4c:26:d2:00:22:89:
                    f0:f0:4e:3a:f8:ff:b5:3c:67:73:81:2d:2a:08:99:
                    fe:88:67:65:24:8c:db:6b:b6:26:27:ab:55:03:06:
                    c3:72:f3:51:b7:77:48:af:c8:37:0b:69:08:35:e3:
                    03:be:19:7f:3f:ee:02:d9:d0:66:e8:d0:42:a5:b9:
                    8e:5e:b9:3c:a2:b7:b7:cb:77:5d:5d:1d:ef:d6:e1:
                    9c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AF:DE:00:D1:14:4B:52:A4:E3:EF:26:E4:92:D3:A6:6E:45:9C:46
            X509v3 Authority Key Identifier:
                keyid:6B:07:45:33:D3:C1:48:F5:DA:B3:30:A5:26:73:FD:93:21:27:8A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c7a1a5f823077ae912851a92afe4585962f9901.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b50935ad-283c-4c42-9e6f-5dd491ac4d2a/ffb741ae2682d4d288d52c69fd8077db2c160fe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b50935ad-283c-4c42-9e6f-5dd491ac4d2a/4c7a1a5f823077ae912851a92afe4585962f9901.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.240.0/22
                IPv6:
                  2803:5a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:ce:dc:cb:59:ee:02:2e:5e:8a:af:bf:a4:98:a8:08:e9:2d:
         51:74:99:4c:95:72:55:f7:da:ba:92:ec:76:3e:ed:8b:f1:85:
         27:a4:08:9d:59:6d:0d:23:aa:89:3b:07:1a:60:fb:44:4b:34:
         aa:cc:4a:bb:43:cd:96:9b:ba:ad:7b:74:0f:66:18:6c:ce:2b:
         80:6e:e4:2d:8f:03:c9:a1:4d:c2:bc:49:1a:78:8e:1d:a6:41:
         61:84:5c:d7:36:bd:29:e4:46:6d:8f:93:13:f8:80:e2:6c:14:
         dd:95:3f:b1:cb:4f:ef:7c:a1:34:ab:aa:64:ca:c6:5c:51:60:
         17:0a:c9:bd:a0:f3:5a:67:fb:b8:e8:f8:00:7f:9e:d5:ba:af:
         b2:d1:0e:84:2b:b1:77:4c:e4:ed:ce:25:57:ea:4f:4d:29:82:
         ba:7b:a2:96:e2:c9:28:ee:fc:dd:2c:64:2a:d3:ee:ca:30:0b:
         99:05:e5:5a:22:3f:07:06:d3:ca:92:9c:ae:ed:87:9a:69:a3:
         c8:2e:f4:33:6d:6f:49:fc:c1:df:1a:d5:a3:66:8f:a3:23:7a:
         c3:bf:72:ee:ec:53:26:b4:30:bc:79:02:95:e8:4b:bf:17:44:
         f4:6e:7f:c5:90:ff:85:b5:20:c2:3a:28:4f:78:c0:f3:be:2b:
         f1:58:18:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----