Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/cf79dc3c9b241efd810fc11fa93120f370cb705b.roa
File:                     cf79dc3c9b241efd810fc11fa93120f370cb705b.roa (raw, json)
Hash identifier:          xC38vjJ1+fyTla5+3hdLRSBQ0BYm/lhjuOnyWVgGles=
Subject key identifier:   41:3D:21:50:59:0E:84:75:3B:B8:AE:97:9D:70:9F:20:F0:98:99:40
Certificate issuer:       /CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8
Certificate serial:       18AAB7
Authority key identifier: C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/cf79dc3c9b241efd810fc11fa93120f370cb705b.roa
Signing time:             Wed 15 Jun 2022 20:56:57 +0000
ROA not before:           Sat 01 Jan 2022 03:00:00 +0000
ROA not after:            Mon 01 Apr 2024 03:00:00 +0000
asID:                     11014
IP address blocks:        131.0.232.0/22 maxlen: 22
                          2803:f580::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616567 (0x18aab7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8
        Validity
            Not Before: Jan  1 03:00:00 2022 GMT
            Not After : Apr  1 03:00:00 2024 GMT
        Subject: CN=cf79dc3c9b241efd810fc11fa93120f370cb705b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6d:c5:4c:43:d8:08:36:ba:77:ea:7f:1c:87:
                    3d:e9:74:d4:2e:83:00:2c:d2:c5:5a:10:65:82:a2:
                    b3:f7:4f:e0:89:22:1c:df:d9:c6:a2:fb:a6:32:a7:
                    25:03:61:5a:95:f7:51:b4:9a:0f:c0:75:bf:e4:ce:
                    62:96:b0:87:fb:41:46:fe:06:a9:1d:78:50:1b:75:
                    37:e7:16:1a:18:f6:5c:1a:e5:04:4f:42:9b:61:4f:
                    8e:61:ea:97:d7:35:47:98:60:83:0e:e8:be:43:3a:
                    6e:fc:a2:40:4e:8c:4d:53:b1:42:b5:54:f4:92:f3:
                    19:b5:f2:65:fd:d3:1a:de:ec:66:5c:00:95:14:0a:
                    9c:f8:65:d7:f7:7a:dc:9d:69:df:72:62:00:51:a6:
                    3e:42:26:23:4d:64:23:12:5f:9c:d9:ce:ad:96:c2:
                    bb:91:1e:0f:d6:3e:87:40:06:3c:e9:cb:ac:c4:5b:
                    fb:18:28:17:25:fe:cd:e0:80:8a:cd:e6:bf:6c:11:
                    42:4e:f7:55:84:c8:9b:4c:8e:a7:54:36:74:cc:c9:
                    ec:74:33:4d:5d:0d:97:56:7b:5d:92:92:26:ad:bc:
                    fb:71:a7:f2:bf:05:76:56:5c:aa:f4:00:c6:05:42:
                    49:0a:19:99:1f:8a:cb:16:8f:fc:4c:55:f5:fe:13:
                    5c:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:3D:21:50:59:0E:84:75:3B:B8:AE:97:9D:70:9F:20:F0:98:99:40
            X509v3 Authority Key Identifier:
                keyid:C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/cf79dc3c9b241efd810fc11fa93120f370cb705b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.232.0/22
                IPv6:
                  2803:f580::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:27:ea:eb:87:16:90:2e:82:d5:d3:2b:7c:e9:02:a7:d2:b0:
         a2:07:51:ac:1e:92:b0:b8:ef:52:c3:c9:2f:47:35:fa:af:24:
         d5:1c:96:2b:83:a8:96:c7:9b:6c:77:5d:10:1a:84:57:62:6a:
         57:fb:38:cb:cf:50:13:39:70:d7:e9:6e:fd:5f:fa:8e:c6:04:
         e4:36:9d:96:be:ef:d3:c5:5e:0e:6b:af:c1:12:59:34:68:d3:
         a6:22:cd:44:f1:e4:44:1e:01:08:28:ca:8d:65:82:32:d4:db:
         90:31:52:5a:6e:68:32:a2:5c:f1:da:00:77:a0:ef:30:64:a1:
         df:56:59:9d:a5:75:49:65:c3:d4:62:57:7c:3a:59:c7:46:c5:
         f4:9d:18:08:d6:0b:71:bb:d8:2c:11:d4:5c:50:a0:c4:6d:c3:
         b4:f4:95:56:24:f7:59:40:18:6e:f9:f5:c0:e5:e6:6f:4c:8c:
         6c:b2:b7:8a:47:f8:61:11:59:dd:47:d6:9d:8d:fc:3e:9f:56:
         ca:5b:22:40:5b:73:13:74:a5:6d:f6:a4:3d:9e:b0:97:ba:f9:
         f0:c6:00:41:95:c3:4c:f3:b4:89:b0:b3:30:42:ba:3a:3e:04:
         da:3a:56:ea:b7:79:ba:da:e6:25:63:fc:42:bc:0f:79:be:8f:
         60:4f:d7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----