Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/2c62e937a756325b7c53339b4a78157265c5e41e.roa
File:                     2c62e937a756325b7c53339b4a78157265c5e41e.roa (raw, json)
Hash identifier:          WOY6GIjzGEvf6IOkuKGTeaT/sOkpBXaMMLTg0JrzkYQ=
Subject key identifier:   3E:C2:FF:CE:44:67:D1:3B:27:ED:7D:9F:89:C1:EF:37:3F:D8:ED:F3
Certificate issuer:       /CN=8f7555abd6f79519d0fd138e28d493df01d9cc7b
Certificate serial:       0D06AC
Authority key identifier: F8:AD:22:C7:0B:38:CF:89:94:F6:01:7A:63:5A:82:8D:38:92:0E:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f7555abd6f79519d0fd138e28d493df01d9cc7b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/2c62e937a756325b7c53339b4a78157265c5e41e.roa
Signing time:             Wed 24 Mar 2021 14:30:14 +0000
ROA not before:           Wed 24 Mar 2021 14:30:13 +0000
ROA not after:            Tue 24 Mar 2026 14:30:13 +0000
asID:                     61456
IP address blocks:        131.108.80.0/24 maxlen: 24
                          2803:8380::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853676 (0xd06ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7555abd6f79519d0fd138e28d493df01d9cc7b
        Validity
            Not Before: Mar 24 14:30:13 2021 GMT
            Not After : Mar 24 14:30:13 2026 GMT
        Subject: CN=2c62e937a756325b7c53339b4a78157265c5e41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:23:27:36:64:66:c0:ef:5f:eb:7d:b9:9f:c0:
                    5d:be:dd:58:c2:f0:50:f6:8d:c3:5b:9c:05:e3:05:
                    a3:a7:94:f1:44:11:0f:15:b4:a0:01:54:0a:b1:1d:
                    c1:e6:93:e1:e1:97:15:ee:6d:3e:d9:ad:68:d7:4e:
                    41:4d:d4:49:1d:f5:ea:e3:4c:29:45:11:c3:2d:79:
                    d2:a0:e4:1e:54:76:cd:37:8a:45:3c:08:fe:e7:46:
                    b1:4f:8e:de:9e:e9:cc:99:2d:fa:64:dc:05:d7:88:
                    4b:32:02:03:e5:da:e7:6f:21:e0:fc:cf:28:cf:5a:
                    e7:18:38:9a:2f:78:42:59:be:d8:0a:b8:d0:1d:9d:
                    26:68:b2:47:43:1b:46:91:da:df:a1:af:f1:48:87:
                    a1:ec:5b:56:a3:58:90:75:aa:99:e1:79:de:8c:e2:
                    08:07:0f:17:50:86:2f:e9:65:45:27:9c:bb:be:15:
                    a2:a1:8a:e7:ae:bf:8a:6e:d3:a1:46:5a:0d:da:b8:
                    39:92:7d:82:52:ce:42:a4:d9:9e:38:5b:6c:e3:7f:
                    1a:a7:ff:3e:0d:ba:3d:06:06:b9:c5:ee:5f:bb:eb:
                    a0:e9:9b:b8:f5:42:bd:e8:83:47:7d:f1:0f:3a:28:
                    52:ec:82:ef:18:fa:df:f1:7e:58:c6:0e:4b:33:bf:
                    71:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C2:FF:CE:44:67:D1:3B:27:ED:7D:9F:89:C1:EF:37:3F:D8:ED:F3
            X509v3 Authority Key Identifier:
                keyid:F8:AD:22:C7:0B:38:CF:89:94:F6:01:7A:63:5A:82:8D:38:92:0E:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f7555abd6f79519d0fd138e28d493df01d9cc7b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/2c62e937a756325b7c53339b4a78157265c5e41e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/8f7555abd6f79519d0fd138e28d493df01d9cc7b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.80.0/24
                IPv6:
                  2803:8380::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:8f:59:02:f9:fd:db:2d:0f:24:3e:0c:58:9c:f3:11:1a:6f:
         3e:ea:62:33:a5:4d:f7:49:3b:e7:eb:ac:3c:52:d8:01:f2:8a:
         af:28:6b:06:fe:37:d3:0c:ef:fc:66:bb:8b:c0:9e:55:09:de:
         d1:a7:4a:a7:52:11:a3:3f:7a:b6:2b:8f:cc:5f:65:e7:c1:85:
         fa:fb:4b:1d:cd:ab:fa:b8:87:c8:88:82:22:76:c9:a5:5c:72:
         36:aa:5b:fa:e6:73:6a:85:ef:9b:99:69:08:d0:f5:39:15:35:
         5e:8c:8d:48:29:fe:18:68:0b:24:3d:c7:ff:5f:bb:2f:4f:cb:
         05:ea:4a:df:e3:9e:77:74:af:9d:14:cd:88:01:70:ee:e5:fa:
         89:94:cc:7b:8b:d6:78:ed:4c:2f:4c:9f:a2:c7:d8:10:57:df:
         8d:16:0b:3c:f8:7f:90:35:f1:fc:4f:2d:aa:dd:b5:0e:4e:6a:
         df:9c:77:2d:71:a8:0b:ee:76:5b:fc:34:3e:ad:50:d1:4d:13:
         0c:ee:f8:fc:10:43:39:5a:b2:93:a8:a4:ec:d7:57:4f:ea:af:
         e0:10:dc:af:33:19:c2:76:ec:94:80:ca:9a:79:e8:81:4b:2d:
         20:29:72:f3:a9:13:94:17:15:af:55:4c:2d:22:93:d3:42:0d:
         7b:f3:e9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----