Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bf159588-e3e9-4901-b944-0c180b8b5198/fb53fcec194efdcb06c9dc32ff819c9706affc12.roa
File:                     fb53fcec194efdcb06c9dc32ff819c9706affc12.roa (raw, json)
Hash identifier:          lsfVtSOfcfVbZlXnQfkxsH3BqzQ87oZ0ImF1XfRv3AU=
Subject key identifier:   13:2D:52:E6:C2:B5:9E:40:34:FA:63:D1:2E:7C:8B:13:1F:2B:D4:CC
Certificate issuer:       /CN=291989210477451628cf9b30f2f0d12559c92730
Certificate serial:       018870
Authority key identifier: 6A:51:6D:D2:A0:83:58:5C:0D:E3:8A:2B:FC:8C:0C:00:26:93:B9:31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/291989210477451628cf9b30f2f0d12559c92730.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bf159588-e3e9-4901-b944-0c180b8b5198/fb53fcec194efdcb06c9dc32ff819c9706affc12.roa
Signing time:             Wed 24 Mar 2021 14:41:07 +0000
ROA not before:           Wed 24 Mar 2021 14:41:07 +0000
ROA not after:            Tue 24 Mar 2026 14:41:07 +0000
asID:                     64114
IP address blocks:        177.126.36.0/22 maxlen: 24
                          2803:a410::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100464 (0x18870)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291989210477451628cf9b30f2f0d12559c92730
        Validity
            Not Before: Mar 24 14:41:07 2021 GMT
            Not After : Mar 24 14:41:07 2026 GMT
        Subject: CN=fb53fcec194efdcb06c9dc32ff819c9706affc12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:9d:a7:c2:60:c1:15:cd:5a:97:fa:b4:39:
                    95:29:32:fa:06:9a:5d:be:dd:07:5f:9f:a0:1d:2f:
                    04:39:a4:ee:2a:08:ca:35:5c:0b:ad:33:6b:cf:38:
                    7d:06:e2:c6:60:ac:9e:d9:be:cd:3d:99:e4:e8:0f:
                    84:dc:9d:fb:64:30:27:56:45:a6:11:e9:15:fa:92:
                    e2:dd:60:dc:0d:3a:1f:2c:c7:a3:37:9c:27:f6:92:
                    e6:94:91:76:19:31:4c:13:f1:34:72:89:21:6c:dd:
                    b0:1a:76:f3:76:ad:37:56:43:67:ed:92:40:d9:e5:
                    83:ee:19:33:8e:4a:d6:e4:65:fd:86:b7:47:f3:3f:
                    7d:d7:25:ca:92:8c:09:83:20:03:d2:71:4a:b2:13:
                    ed:1c:d7:98:8d:9b:a8:1e:86:62:de:84:78:3a:25:
                    25:29:d9:04:6e:f9:f1:85:7f:6e:a0:35:55:e0:13:
                    73:6c:b4:13:19:fe:8d:d5:b0:63:67:9e:fc:4a:82:
                    42:bb:eb:36:0e:11:19:47:89:2e:bb:ee:ed:dd:70:
                    01:95:47:92:cd:78:e9:ed:26:5a:50:87:3a:ac:e1:
                    c0:2b:10:aa:87:22:85:14:22:36:ee:2f:e3:d4:3a:
                    e4:b2:67:40:9b:1a:42:00:b0:89:07:cf:c4:66:b5:
                    88:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2D:52:E6:C2:B5:9E:40:34:FA:63:D1:2E:7C:8B:13:1F:2B:D4:CC
            X509v3 Authority Key Identifier:
                keyid:6A:51:6D:D2:A0:83:58:5C:0D:E3:8A:2B:FC:8C:0C:00:26:93:B9:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/291989210477451628cf9b30f2f0d12559c92730.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bf159588-e3e9-4901-b944-0c180b8b5198/fb53fcec194efdcb06c9dc32ff819c9706affc12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bf159588-e3e9-4901-b944-0c180b8b5198/291989210477451628cf9b30f2f0d12559c92730.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.36.0/22
                IPv6:
                  2803:a410::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:c2:c1:88:d3:b1:3e:cb:18:92:96:11:c3:4e:17:e0:fb:5c:
         0b:b6:0a:1d:ee:ec:8c:b5:6c:88:64:5b:17:80:bf:02:3d:c7:
         ff:70:05:17:75:7e:77:89:38:49:b5:55:83:a9:1a:ba:e5:43:
         b9:5d:31:b9:90:3d:de:69:01:be:20:03:78:22:34:90:61:69:
         9e:33:6a:7e:9e:7d:c0:e7:9c:b3:26:cd:90:51:d3:53:bf:24:
         fe:e4:91:4e:9b:55:80:6c:9e:ac:7c:a3:f8:a9:35:86:45:4c:
         4b:db:7b:4b:d0:1a:56:a2:8d:95:3a:43:44:78:9d:86:2b:bd:
         02:31:d9:f6:6d:89:4c:1a:a9:a9:f4:f2:15:67:f0:dd:52:41:
         78:65:c5:b8:8c:1f:77:d6:1f:6a:8a:00:32:47:86:91:2d:29:
         b2:86:b9:5a:6e:40:41:bc:b6:88:48:c0:00:f4:13:8d:d8:7a:
         26:0d:0f:5b:6d:5e:6f:c9:e2:5b:77:0a:55:4f:04:c9:06:61:
         75:28:ef:f3:44:b0:43:8d:8d:de:11:38:40:96:ee:d9:e8:98:
         ac:a1:50:0d:39:4b:33:97:a0:1e:ad:97:74:27:2b:33:22:a9:
         75:84:b2:c6:91:e2:82:41:5e:54:04:28:40:a0:e5:68:8e:e2:
         63:71:86:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----