Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/1a8fc8f200ee4b00e0c0500db206e173753e1e7d.roa
File:                     1a8fc8f200ee4b00e0c0500db206e173753e1e7d.roa (raw, json)
Hash identifier:          SCmOpTDEBcPnR12p3NrT0udXmYfT/a9o/B4Wd75xu48=
Subject key identifier:   10:2B:EA:29:16:DC:EA:31:95:66:06:80:63:0E:AB:6C:6F:3F:46:3A
Certificate issuer:       /CN=312f25bb43cf12fb021669059d3a617d23ade269
Certificate serial:       079BB6
Authority key identifier: DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/1a8fc8f200ee4b00e0c0500db206e173753e1e7d.roa
Signing time:             Wed 24 Mar 2021 14:33:45 +0000
ROA not before:           Wed 24 Mar 2021 14:33:45 +0000
ROA not after:            Tue 24 Mar 2026 14:33:45 +0000
asID:                     17147
IP address blocks:        163.247.0.0/16 maxlen: 16
                          2801:2::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498614 (0x79bb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=312f25bb43cf12fb021669059d3a617d23ade269
        Validity
            Not Before: Mar 24 14:33:45 2021 GMT
            Not After : Mar 24 14:33:45 2026 GMT
        Subject: CN=1a8fc8f200ee4b00e0c0500db206e173753e1e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fe:e2:5d:4e:14:30:cc:c8:b0:bb:22:2f:5b:
                    9d:89:61:19:71:65:21:f4:56:4f:25:a6:0d:b7:c4:
                    c6:51:cf:ec:db:59:35:9f:4c:df:fe:0f:a8:9f:70:
                    fe:48:c7:b4:81:1a:81:49:9e:ec:5e:b8:9a:db:92:
                    31:26:62:73:57:cf:70:b2:e5:15:1f:79:eb:77:8c:
                    8a:60:e8:dd:c7:9c:08:29:bb:b4:bc:c0:83:f6:15:
                    29:5c:e2:63:a7:1c:a2:5c:95:5a:b4:84:22:af:4b:
                    70:bb:4c:37:d8:63:8a:a9:55:c7:a5:14:3a:e9:8a:
                    4c:a5:98:4e:f6:4e:dc:8a:66:af:85:ea:52:1d:99:
                    1a:da:14:18:b7:a9:5a:0d:99:0a:97:94:23:df:ef:
                    58:33:50:7f:24:e3:63:c7:f5:3a:b3:dd:2d:d7:f5:
                    17:ae:5c:28:59:92:cb:d2:34:c8:2a:e7:ad:95:cd:
                    a5:3c:46:6f:e1:4c:34:76:75:8b:ef:d1:7c:cb:f1:
                    89:e8:75:d6:67:cb:98:7c:b9:69:61:70:e7:f6:83:
                    10:7b:69:38:1f:84:d7:54:9c:a2:cb:d6:41:a8:28:
                    da:4b:b9:00:f2:c9:4f:35:ae:76:b1:1f:d7:bb:a7:
                    26:9e:f2:78:66:f2:5d:51:2a:eb:bb:16:06:5d:75:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:2B:EA:29:16:DC:EA:31:95:66:06:80:63:0E:AB:6C:6F:3F:46:3A
            X509v3 Authority Key Identifier:
                keyid:DA:FE:6E:3D:CD:8B:73:EB:36:C6:F3:FE:E9:CF:D5:65:F3:17:A0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/312f25bb43cf12fb021669059d3a617d23ade269.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/1a8fc8f200ee4b00e0c0500db206e173753e1e7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b6cc3e8e-5d2a-44c6-9fb5-6a58ca9c2c73/312f25bb43cf12fb021669059d3a617d23ade269.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.247.0.0/16
                IPv6:
                  2801:2::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:9b:81:b1:28:d0:4b:91:60:d8:72:63:c3:d6:1d:7a:6c:fd:
         73:a8:a6:9e:00:27:08:54:bb:0d:75:85:ae:65:b4:86:4f:ed:
         b0:d0:19:71:c7:82:5f:96:9f:a3:30:3a:58:c3:53:4d:78:f8:
         ab:8b:91:d3:69:2f:0b:37:f1:97:78:80:ae:c6:70:4b:ec:8c:
         a6:28:1b:d4:76:cf:4e:c8:dd:5f:50:26:d7:6b:5e:72:5f:ce:
         fe:c9:02:88:61:20:dc:44:01:0d:4c:77:24:6d:ba:f2:c2:e1:
         dd:19:6e:81:d1:61:13:cd:37:40:f3:10:e9:25:f9:02:7d:03:
         ef:10:e0:be:f0:90:ad:18:31:e5:f1:15:f2:5e:1e:7a:fa:df:
         97:5f:1d:18:d0:ce:5a:a5:8b:e5:be:c1:61:ec:79:3c:d9:28:
         bb:90:6f:fe:aa:2f:1c:52:9f:f4:59:ec:ab:84:0d:d3:43:04:
         22:e3:6b:8c:8d:e0:25:2d:ff:33:f3:2a:41:ea:18:d7:ec:7b:
         a5:74:5a:d2:79:49:e1:67:c2:70:fe:a2:b9:4f:75:d7:18:a9:
         4d:2c:73:0f:62:34:c2:65:40:9d:db:37:43:d5:d3:e9:7a:8b:
         78:0a:9c:b2:83:77:07:89:18:74:30:fe:e2:3c:6b:22:19:30:
         74:28:bc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----