Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/94f7b594362b218d40689090035560fe5369455a.roa
File:                     94f7b594362b218d40689090035560fe5369455a.roa (raw, json)
Hash identifier:          1+qa0W9dS2T+yASJbdxzh7JzXagkof5ZpZN3md0PjpU=
Subject key identifier:   F2:6A:97:94:4B:01:EB:D4:53:A1:49:08:50:6F:89:C5:D4:0D:B6:B1
Certificate issuer:       /CN=8f7555abd6f79519d0fd138e28d493df01d9cc7b
Certificate serial:       0D10D2
Authority key identifier: F8:AD:22:C7:0B:38:CF:89:94:F6:01:7A:63:5A:82:8D:38:92:0E:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f7555abd6f79519d0fd138e28d493df01d9cc7b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/94f7b594362b218d40689090035560fe5369455a.roa
Signing time:             Wed 24 Mar 2021 14:30:14 +0000
ROA not before:           Wed 24 Mar 2021 14:30:13 +0000
ROA not after:            Tue 24 Mar 2026 14:30:13 +0000
asID:                     61456
IP address blocks:        131.108.80.0/22 maxlen: 24
                          2803:8380::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856274 (0xd10d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7555abd6f79519d0fd138e28d493df01d9cc7b
        Validity
            Not Before: Mar 24 14:30:13 2021 GMT
            Not After : Mar 24 14:30:13 2026 GMT
        Subject: CN=94f7b594362b218d40689090035560fe5369455a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:98:3e:b4:aa:3a:75:bb:bd:df:bb:d4:1d:
                    d1:b3:6e:a3:90:2f:ad:e4:58:79:2b:3c:f7:36:b4:
                    25:31:5b:88:8c:bc:43:03:1d:0a:bb:33:05:5d:b5:
                    27:10:5b:f0:fa:15:13:11:6a:5f:d5:46:c2:1d:33:
                    33:63:5f:cf:d3:92:95:2c:e5:52:42:48:25:af:92:
                    c2:8a:9d:fe:57:05:d9:2b:bc:9d:34:64:35:e9:f0:
                    ff:e7:a3:48:fe:83:08:62:25:1d:ed:11:44:1c:b7:
                    b6:e5:8b:c6:ba:0a:77:36:af:f1:66:9f:34:22:9d:
                    3c:68:cc:95:4c:68:82:95:00:b7:d6:3e:18:e6:c1:
                    43:57:56:c8:3b:9a:d3:ce:04:ef:c4:77:ca:d2:3c:
                    1c:4a:79:44:85:05:40:0f:02:22:d0:74:d6:88:d4:
                    d1:4f:93:da:eb:e4:5a:83:90:d6:55:ae:52:2e:d6:
                    2f:c0:51:0f:cb:a2:c6:2c:7d:5c:34:f9:57:f4:b0:
                    0f:7a:a2:13:72:55:68:ef:b2:82:0f:69:57:11:dd:
                    c4:f3:d5:da:df:b7:f9:17:a8:5b:65:02:71:06:ae:
                    0e:15:27:31:39:88:82:61:9d:af:c4:86:9a:f5:86:
                    2f:3e:20:0f:09:04:ba:2e:12:df:48:a3:80:68:16:
                    f9:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6A:97:94:4B:01:EB:D4:53:A1:49:08:50:6F:89:C5:D4:0D:B6:B1
            X509v3 Authority Key Identifier:
                keyid:F8:AD:22:C7:0B:38:CF:89:94:F6:01:7A:63:5A:82:8D:38:92:0E:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f7555abd6f79519d0fd138e28d493df01d9cc7b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/94f7b594362b218d40689090035560fe5369455a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c147773f-5a4d-4ffa-9b78-5f24be481446/8f7555abd6f79519d0fd138e28d493df01d9cc7b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.80.0/22
                IPv6:
                  2803:8380::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:12:ee:7e:cd:ca:34:d8:db:c8:98:8d:83:ea:91:a3:da:09:
         f3:dd:c7:7b:62:15:01:26:10:ec:e5:02:ae:32:c5:db:e2:32:
         c9:80:48:b1:0f:54:30:76:85:d7:39:7e:6c:c9:ef:34:d9:ed:
         5e:da:c5:a1:77:2c:29:dc:ec:8e:8f:5b:8a:67:0d:f9:9e:b7:
         9f:27:be:0e:fb:5f:69:0a:c2:0b:0f:18:88:d0:56:dc:e6:99:
         5b:b5:cf:9a:01:1e:a3:47:4e:18:f6:29:fd:55:27:87:81:f6:
         2e:dd:4f:87:8c:fe:1f:9a:ee:36:9b:c9:5f:79:0f:c4:0d:a2:
         46:62:e6:c6:f9:4f:8a:88:53:ba:93:e8:d8:41:73:17:f6:6a:
         3d:93:5c:b9:42:50:e2:9a:10:57:9d:22:e8:c4:39:dc:0e:03:
         a6:10:e4:4c:1f:2a:46:dd:ad:fa:84:ce:27:57:45:3f:41:f0:
         a0:25:42:aa:31:42:59:19:a4:cb:63:85:5b:3c:4c:06:68:86:
         f4:ef:d5:8b:ae:c5:7a:22:9e:bc:1d:9b:eb:ac:03:92:ba:fe:
         fc:5e:10:bd:23:7c:a4:71:63:75:92:90:86:21:20:9a:04:4e:
         7c:cd:7b:d9:8e:b7:01:28:ae:4d:7a:42:cd:2b:47:97:78:8d:
         27:30:cb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----