Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b54d7797-c1bc-432b-b661-cee1d6fbe1c8/d429a6c1a715b152a262a722323ee3ab9e18b1d8.roa
File:                     d429a6c1a715b152a262a722323ee3ab9e18b1d8.roa (raw, json)
Hash identifier:          H53g2hxekqeUeFHqLls73GeY6oFSo9yb43HmttZUhRM=
Subject key identifier:   DC:8B:56:22:0B:8C:B5:3D:E3:81:88:06:66:07:15:50:1F:68:BE:A5
Certificate issuer:       /CN=24c048f3546dd8a392fac67dfcdb588dcc5216ec
Certificate serial:       0E4EEE
Authority key identifier: 36:DE:1D:E6:78:0A:AC:7D:E8:86:34:61:B0:8D:B4:90:28:F0:C5:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24c048f3546dd8a392fac67dfcdb588dcc5216ec.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b54d7797-c1bc-432b-b661-cee1d6fbe1c8/d429a6c1a715b152a262a722323ee3ab9e18b1d8.roa
Signing time:             Wed 21 Apr 2021 11:28:27 +0000
ROA not before:           Wed 21 Apr 2021 03:00:00 +0000
ROA not after:            Thu 21 Apr 2050 03:00:00 +0000
asID:                     264791
IP address blocks:        170.78.44.0/22 maxlen: 24
                          2803:78c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937710 (0xe4eee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24c048f3546dd8a392fac67dfcdb588dcc5216ec
        Validity
            Not Before: Apr 21 03:00:00 2021 GMT
            Not After : Apr 21 03:00:00 2050 GMT
        Subject: CN=d429a6c1a715b152a262a722323ee3ab9e18b1d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:36:7b:77:a7:37:3f:a6:20:da:02:24:d6:85:
                    16:03:bc:d7:12:75:52:76:34:9c:49:a0:3c:30:92:
                    4b:6a:68:d3:61:34:68:c0:0c:a7:5c:b5:2f:0c:46:
                    39:b5:21:ed:df:8b:f1:3d:87:f2:3f:bc:57:f0:97:
                    99:27:c3:dd:e8:85:53:d4:29:1d:ae:4a:4f:e1:9d:
                    31:f0:7f:64:49:6a:49:93:fa:c2:f4:a0:ee:c3:9e:
                    69:4e:f1:45:fa:cd:10:c7:e6:3e:77:37:e5:7f:40:
                    32:be:ae:a4:e5:7c:19:dd:12:63:06:e9:6a:27:90:
                    50:f9:1f:29:eb:bd:e3:cd:b6:58:be:38:3b:93:33:
                    42:34:05:49:dc:8e:17:0b:2f:6e:3c:92:f0:6a:c1:
                    15:8f:79:ff:63:64:07:d7:50:1a:36:af:c9:6f:18:
                    3e:52:47:e4:5b:6f:fd:15:41:d0:eb:84:6f:45:e7:
                    4e:26:13:c9:bc:0f:16:a2:87:57:50:1b:8a:3e:47:
                    97:8f:71:bf:24:10:f9:74:b8:e5:7d:fa:af:5c:60:
                    5f:45:2b:50:8d:25:dd:18:60:dd:9c:98:d5:a7:32:
                    39:35:68:20:be:90:39:de:f6:09:47:7e:8b:7c:68:
                    c6:34:01:4f:7a:2f:65:9d:43:fb:67:0d:f4:3e:8c:
                    c2:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8B:56:22:0B:8C:B5:3D:E3:81:88:06:66:07:15:50:1F:68:BE:A5
            X509v3 Authority Key Identifier:
                keyid:36:DE:1D:E6:78:0A:AC:7D:E8:86:34:61:B0:8D:B4:90:28:F0:C5:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24c048f3546dd8a392fac67dfcdb588dcc5216ec.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b54d7797-c1bc-432b-b661-cee1d6fbe1c8/d429a6c1a715b152a262a722323ee3ab9e18b1d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b54d7797-c1bc-432b-b661-cee1d6fbe1c8/24c048f3546dd8a392fac67dfcdb588dcc5216ec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.44.0/22
                IPv6:
                  2803:78c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:ea:ad:7d:f4:37:c9:1c:89:92:85:e1:97:0e:22:08:0d:de:
         17:b2:87:46:10:95:c1:bc:5c:a9:12:5f:74:18:d8:6c:58:cd:
         3e:a1:3c:50:be:48:db:db:0c:da:71:50:7e:77:92:2f:c2:ff:
         98:11:5b:79:a4:8d:37:c4:0c:45:05:7d:e9:cc:60:ca:d9:0a:
         69:b1:28:ac:99:25:38:d9:ec:4a:fd:a3:f1:15:b4:6e:ad:e7:
         e6:d2:90:e5:44:18:f1:82:3e:71:8d:ba:53:27:81:74:e8:db:
         39:3d:d8:6f:c2:f5:c8:f0:c1:22:fe:2d:d5:61:28:7d:12:06:
         98:a8:e9:99:91:07:db:32:e2:a8:45:dc:35:cc:5a:92:a9:ba:
         a4:d6:9c:6b:c9:0f:21:6e:1f:12:8a:50:c7:2b:69:48:4d:4b:
         5f:bc:8e:be:f1:d2:24:60:f7:7e:53:7e:e0:b5:c2:77:f8:13:
         b8:3e:7d:83:00:a8:47:26:44:fa:13:44:26:6c:4e:0c:ca:d5:
         a7:72:16:7d:0e:25:ca:ef:46:d9:40:07:54:2e:0a:66:fb:92:
         fe:24:ec:4f:fa:87:5e:ba:96:90:42:06:9b:a4:43:b4:0a:f8:
         83:f8:99:a6:af:56:6b:46:5b:79:f4:10:bb:5f:4c:3b:83:02:
         74:32:18:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----