Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/a8e41ab18aaa60e489e7c55c2fed7946a143bf69.roa
File:                     a8e41ab18aaa60e489e7c55c2fed7946a143bf69.roa (raw, json)
Hash identifier:          km090u4pNAsJP2svCT261FCKLHljmEgQgfMf6QGyAA8=
Subject key identifier:   C9:24:4D:E3:E1:21:4C:63:D0:02:A4:77:53:CB:94:73:5C:5D:2E:28
Certificate issuer:       /CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8
Certificate serial:       18BA7A
Authority key identifier: C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/a8e41ab18aaa60e489e7c55c2fed7946a143bf69.roa
Signing time:             Thu 16 Jun 2022 14:18:30 +0000
ROA not before:           Sat 01 Jan 2022 03:00:00 +0000
ROA not after:            Sat 15 Jun 2024 03:00:00 +0000
asID:                     52363
IP address blocks:        131.0.232.0/22 maxlen: 24
                          2803:f580::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620602 (0x18ba7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8
        Validity
            Not Before: Jan  1 03:00:00 2022 GMT
            Not After : Jun 15 03:00:00 2024 GMT
        Subject: CN=a8e41ab18aaa60e489e7c55c2fed7946a143bf69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:98:8e:4b:75:60:95:b9:41:f2:e0:f2:18:3a:
                    c7:a6:97:fc:bc:98:b4:c7:9d:c6:17:d0:0b:94:f2:
                    ac:4e:52:33:7a:36:4d:b2:1b:84:20:6a:bb:5a:91:
                    bb:22:0d:2c:a4:da:b1:95:c5:2b:70:a5:dc:48:36:
                    db:10:40:2b:c7:35:79:dc:a5:a5:49:b7:02:4d:34:
                    32:5b:9f:1d:fc:ae:83:cb:59:3b:d8:73:0b:89:de:
                    56:d7:11:bc:7b:93:31:c8:44:d5:e0:f2:02:34:50:
                    c4:71:a6:83:22:36:34:06:96:3d:db:bc:fe:53:78:
                    bb:96:96:f0:03:a3:a1:e0:33:1a:b7:9c:0b:bf:9c:
                    46:ff:8f:98:d9:ad:36:24:9e:4c:42:f8:5b:7c:21:
                    7f:05:01:5e:54:1b:af:66:8b:3a:f8:88:1c:b8:2f:
                    43:98:3b:15:5a:cd:65:21:7e:d9:cf:ec:b9:b7:6d:
                    14:1f:9c:a3:56:6e:7b:01:f7:29:02:09:b8:3c:29:
                    91:96:79:13:3c:86:38:59:4d:3b:33:4b:4d:5b:6a:
                    75:45:0a:41:76:e4:0d:a0:bd:7d:a8:e2:44:b0:08:
                    9a:60:f2:e6:49:ee:0a:a8:94:16:4a:22:c4:12:c9:
                    12:9b:89:18:d9:cb:e3:00:14:35:1a:ad:c5:2e:7a:
                    99:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:24:4D:E3:E1:21:4C:63:D0:02:A4:77:53:CB:94:73:5C:5D:2E:28
            X509v3 Authority Key Identifier:
                keyid:C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/a8e41ab18aaa60e489e7c55c2fed7946a143bf69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.232.0/22
                IPv6:
                  2803:f580::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:ba:44:7f:41:b6:ec:be:c7:9a:4c:7a:6e:a7:25:e7:be:c2:
         17:cb:d4:c0:f7:c9:7f:6f:94:ad:b9:92:66:f8:70:44:44:df:
         c4:78:79:f2:03:9f:ae:7f:38:74:da:4b:d8:7f:7d:e4:e9:04:
         16:e8:35:24:73:03:e9:64:f4:81:61:6e:31:a0:6d:9c:54:4b:
         87:ca:a7:03:c0:9c:c8:5f:88:0a:e6:8c:11:b9:65:af:3c:d5:
         42:0b:51:cb:c6:71:a8:15:12:13:57:e3:64:1b:ee:17:ae:b7:
         e7:6f:fb:58:cf:97:35:79:e4:64:e8:e6:92:62:33:f8:a5:ca:
         15:88:81:38:e7:d3:4c:c0:d6:66:32:25:25:39:3d:15:14:8c:
         81:43:92:15:d3:0e:43:89:a5:33:0f:94:50:e6:44:c9:8d:4f:
         c7:f0:51:2e:6c:77:7b:68:a3:36:15:3b:e9:a2:1f:72:50:29:
         3e:dc:ec:28:da:36:fd:2e:61:b3:98:c0:31:50:00:1f:55:ba:
         63:64:19:5d:48:f4:5f:07:e7:f6:f7:6d:96:13:4d:ce:04:cf:
         31:de:2e:3c:83:27:b1:97:77:64:3a:6c:d4:09:9f:bd:ea:25:
         aa:00:1a:2b:d4:1b:81:c0:b6:bd:8e:66:1a:9e:75:eb:04:20:
         9e:b6:e5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----