Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/c4a6dbeffd0a446e506e482c1d6581d82a6f3035.roa
File:                     c4a6dbeffd0a446e506e482c1d6581d82a6f3035.roa (raw, json)
Hash identifier:          twsDWdJUWt4kqU3topd1gQ9JibBpwBY8nCff3aek7LY=
Subject key identifier:   A1:DF:66:74:66:96:FF:D0:F0:2B:7C:6C:2D:4F:2B:82:1C:73:4C:9F
Certificate issuer:       /CN=56c3a26bfe1f2ba89c0d10d235f8d546cb537932
Certificate serial:       0D2412
Authority key identifier: FF:D6:0A:3D:12:E8:DE:BE:61:82:65:33:ED:71:64:80:7D:B2:08:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/c4a6dbeffd0a446e506e482c1d6581d82a6f3035.roa
Signing time:             Wed 24 Mar 2021 14:34:00 +0000
ROA not before:           Wed 24 Mar 2021 14:34:00 +0000
ROA not after:            Tue 24 Mar 2026 14:34:00 +0000
asID:                     267848
IP address blocks:        190.97.168.0/22 maxlen: 22
                          2800:be0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861202 (0xd2412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c3a26bfe1f2ba89c0d10d235f8d546cb537932
        Validity
            Not Before: Mar 24 14:34:00 2021 GMT
            Not After : Mar 24 14:34:00 2026 GMT
        Subject: CN=c4a6dbeffd0a446e506e482c1d6581d82a6f3035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:77:5b:8a:63:3c:ea:bb:af:71:8d:c7:ea:a5:
                    f3:54:35:29:d9:44:83:88:8e:eb:22:b1:26:09:e2:
                    92:f1:84:51:53:a2:ab:b2:72:d0:bc:72:98:75:02:
                    47:c6:4f:dd:d5:25:1a:8d:7d:bb:21:63:cf:21:64:
                    17:32:89:13:5c:d4:06:f3:60:cf:3f:7a:1d:26:49:
                    88:fa:ce:cd:67:67:23:ec:64:c6:e8:3e:dd:9f:2a:
                    39:1d:d9:73:74:af:c7:79:ad:f1:61:bd:bf:39:96:
                    f6:ed:5c:70:98:e7:99:58:95:5c:1e:91:1f:46:b1:
                    b1:80:71:b9:a8:3c:b8:2f:6f:d8:f5:ac:1a:e7:83:
                    80:c8:10:95:49:9c:0d:44:bc:03:8e:80:d9:a0:23:
                    ad:08:06:33:91:32:59:7a:6e:50:76:d6:62:6b:63:
                    6e:77:0b:68:3f:60:e9:fc:6e:ea:5c:06:6b:b7:70:
                    07:fc:d5:51:3d:35:28:bd:86:98:b3:66:83:fa:4f:
                    2e:49:32:de:a6:aa:9b:d9:63:fd:45:cb:48:ac:0f:
                    26:45:1e:9b:d7:f6:cc:c5:4d:bd:04:1c:6d:e7:06:
                    f9:95:0f:c3:8e:80:f2:73:ec:9f:3d:a9:23:3b:41:
                    33:cd:52:56:59:f7:e9:c7:e4:11:8b:f0:47:5c:71:
                    fa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DF:66:74:66:96:FF:D0:F0:2B:7C:6C:2D:4F:2B:82:1C:73:4C:9F
            X509v3 Authority Key Identifier:
                keyid:FF:D6:0A:3D:12:E8:DE:BE:61:82:65:33:ED:71:64:80:7D:B2:08:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/c4a6dbeffd0a446e506e482c1d6581d82a6f3035.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bee6a1fe-c4e0-4236-8170-de0d77f4e292/56c3a26bfe1f2ba89c0d10d235f8d546cb537932.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.97.168.0/22
                IPv6:
                  2800:be0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:85:ed:7e:6d:08:1f:33:8d:a4:f8:96:4d:30:d4:2c:fc:6d:
         ff:a4:ae:14:da:95:ae:97:de:f1:af:30:74:fd:be:90:9c:a0:
         e9:36:29:63:0f:50:6f:5e:a0:f2:7e:39:d8:6d:6c:94:23:e9:
         f0:84:52:08:18:15:ec:d1:a2:c2:71:14:ab:75:80:e8:bb:1f:
         75:e9:b3:6a:f2:23:ce:04:0e:60:ce:49:52:30:0d:ca:b0:9d:
         b0:5e:19:b1:32:be:4a:13:a3:57:a0:ef:34:5c:b5:d3:fa:96:
         9b:a0:55:5b:3a:f5:20:95:61:e9:0f:95:cb:31:66:46:ba:2b:
         82:11:07:00:e7:bf:7e:20:58:45:eb:b3:55:31:b7:0c:84:aa:
         45:88:29:90:5a:6e:5e:82:16:41:16:e8:a4:50:c5:4b:9e:f1:
         d5:bf:40:7f:27:32:24:59:ea:ca:14:44:53:8c:53:98:3f:35:
         60:03:c7:5a:5a:ec:bb:35:51:d5:6e:54:b9:e1:2f:f2:c4:9a:
         5a:b3:1c:1c:6d:7e:2c:fb:6d:ab:20:eb:5d:74:1d:5c:77:d2:
         be:1c:ed:ce:7c:ba:0d:b9:cd:06:28:d3:2c:ae:da:07:02:82:
         a1:a5:35:32:e1:a1:3e:52:a1:cc:7c:7b:85:be:72:32:62:70:
         77:e7:ef:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----