Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b5b4b03d-0880-483f-b49e-94c939785d5a/c314f4bdf485dd65917529c5f4aefbc43ceae6dd.roa
File:                     c314f4bdf485dd65917529c5f4aefbc43ceae6dd.roa (raw, json)
Hash identifier:          kQ8PXZKCNDz9kYatf1QZp5wOv0p5kbXcyWvUiE/nFfA=
Subject key identifier:   9A:2C:7D:27:3E:B4:4E:3B:C8:0A:FA:14:AF:A2:CF:7A:FE:BC:B1:1E
Certificate issuer:       /CN=91d676ceb241b8e6b81173c637573a1e5a9f5482
Certificate serial:       FB81
Authority key identifier: B5:D9:DA:3E:A4:F0:C4:FE:E4:70:5D:1E:CD:E1:E9:61:6E:98:00:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/91d676ceb241b8e6b81173c637573a1e5a9f5482.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b5b4b03d-0880-483f-b49e-94c939785d5a/c314f4bdf485dd65917529c5f4aefbc43ceae6dd.roa
Signing time:             Wed 24 Mar 2021 14:29:43 +0000
ROA not before:           Wed 24 Mar 2021 14:29:43 +0000
ROA not after:            Tue 24 Mar 2026 14:29:43 +0000
asID:                     64099
IP address blocks:        143.202.144.0/22 maxlen: 24
                          2803:1e40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64385 (0xfb81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91d676ceb241b8e6b81173c637573a1e5a9f5482
        Validity
            Not Before: Mar 24 14:29:43 2021 GMT
            Not After : Mar 24 14:29:43 2026 GMT
        Subject: CN=c314f4bdf485dd65917529c5f4aefbc43ceae6dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:d8:a1:8c:04:20:a3:70:1c:18:9a:a5:3f:11:
                    2f:70:85:a7:f5:a2:0d:a4:3d:01:a1:4d:92:ac:d9:
                    4d:81:79:70:a4:c4:a5:45:64:21:14:dc:fd:95:7f:
                    3b:3b:60:eb:15:6f:ed:67:08:6d:c8:2d:e3:08:04:
                    2e:4a:cc:88:a4:c8:7b:34:08:73:96:c6:92:7a:ae:
                    f5:86:92:5f:ad:b7:d1:4c:d8:d8:59:8b:68:e0:7e:
                    9d:78:a1:1a:0c:54:77:15:01:f7:4e:a8:9d:ff:ac:
                    89:96:ef:29:11:68:01:5c:9a:b9:e3:be:65:ea:cb:
                    85:83:b8:4d:4d:af:9c:1d:b0:fd:65:78:04:1c:18:
                    88:23:cc:74:e7:40:98:e9:cb:f0:0c:24:82:9e:60:
                    16:14:a3:99:ec:1b:6c:dd:e5:b8:45:54:08:f4:21:
                    f8:47:86:95:7c:f9:80:28:24:e4:31:8f:40:a9:07:
                    36:0a:76:b2:05:c5:aa:fa:46:3b:ac:4b:d0:05:74:
                    34:78:fe:5a:aa:66:85:23:12:43:2a:e9:40:e1:47:
                    64:66:2d:8c:01:ab:11:e3:1b:7e:8e:35:8b:b4:2e:
                    34:bb:d8:e8:63:1a:a4:4f:3e:ad:34:06:31:2d:89:
                    c8:c4:8e:09:30:f1:29:c6:18:9b:e5:e6:1e:c2:90:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2C:7D:27:3E:B4:4E:3B:C8:0A:FA:14:AF:A2:CF:7A:FE:BC:B1:1E
            X509v3 Authority Key Identifier:
                keyid:B5:D9:DA:3E:A4:F0:C4:FE:E4:70:5D:1E:CD:E1:E9:61:6E:98:00:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/91d676ceb241b8e6b81173c637573a1e5a9f5482.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b4b03d-0880-483f-b49e-94c939785d5a/c314f4bdf485dd65917529c5f4aefbc43ceae6dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b5b4b03d-0880-483f-b49e-94c939785d5a/91d676ceb241b8e6b81173c637573a1e5a9f5482.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.144.0/22
                IPv6:
                  2803:1e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:f3:94:fa:4d:91:5b:cc:54:d9:0c:99:8f:d7:96:c4:a0:99:
         f2:49:e5:38:65:b0:2f:97:21:86:29:af:c9:91:d5:c9:55:6c:
         60:b4:5c:05:8d:64:f2:41:4f:1c:9e:e8:9b:2a:99:46:89:71:
         1b:03:59:9e:68:e9:51:3e:fc:16:e5:8e:f2:9c:cd:4c:10:95:
         43:10:a6:94:d0:e5:bb:1f:ba:a4:20:a3:cc:1d:55:ee:0a:23:
         d3:a3:25:bd:ef:24:b7:0e:63:b8:31:90:6d:f2:06:f6:be:02:
         46:0a:3f:f3:62:66:99:b5:b7:22:83:e5:54:d3:b9:8c:66:8d:
         8c:37:f8:4f:2f:7e:f8:81:1b:5a:e4:0d:1d:66:51:57:60:6d:
         b0:c7:48:a2:0b:86:30:6c:fc:c0:95:c0:c2:ac:48:ea:07:cf:
         75:1c:8f:94:50:bf:6a:bb:9d:6d:5c:85:c6:9b:aa:34:13:e4:
         2c:41:bb:87:09:3d:a5:1d:ca:ef:ef:3c:47:9a:b4:02:32:32:
         08:95:fc:6e:7d:6f:b2:85:e7:f5:85:6f:22:4d:52:44:f7:2a:
         9b:37:ab:b9:0c:d1:05:47:38:e1:a4:98:dd:a8:19:00:07:ec:
         1a:bf:a7:d4:e3:df:bb:f3:f4:68:d8:99:a4:19:95:f3:f9:f1:
         7e:89:4f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----