Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c24cc83f-3ffc-4023-ad4f-42ebd1c265f1/d072b36e3dea0906d7a2804a53dd402d4633776f.roa
File:                     d072b36e3dea0906d7a2804a53dd402d4633776f.roa (raw, json)
Hash identifier:          /HxSr4lHGEPN15j+5jKRqMbO0Y/QFS3qKi98mXSqdV8=
Subject key identifier:   13:4B:7C:80:83:3A:A6:9B:C2:B5:ED:5A:87:BD:46:58:8A:26:B1:4D
Certificate issuer:       /CN=38f06920dcf8a8c8d06d7ce6911b82064078b63e
Certificate serial:       011F
Authority key identifier: 47:30:A9:8D:B2:84:C4:2D:4A:4A:60:76:03:79:28:71:04:FF:D3:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38f06920dcf8a8c8d06d7ce6911b82064078b63e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c24cc83f-3ffc-4023-ad4f-42ebd1c265f1/d072b36e3dea0906d7a2804a53dd402d4633776f.roa
Signing time:             Mon 19 Sep 2022 13:50:23 +0000
ROA not before:           Mon 19 Sep 2022 13:45:31 +0000
ROA not after:            Thu 19 Sep 2024 13:45:31 +0000
asID:                     52387
IP address blocks:        168.232.96.0/22 maxlen: 22
                          190.97.120.0/21 maxlen: 21
                          2800:d10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38f06920dcf8a8c8d06d7ce6911b82064078b63e
        Validity
            Not Before: Sep 19 13:45:31 2022 GMT
            Not After : Sep 19 13:45:31 2024 GMT
        Subject: CN=d072b36e3dea0906d7a2804a53dd402d4633776f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:e6:c3:a4:72:5d:4e:0f:71:a0:54:9f:60:
                    d4:18:99:34:45:66:70:c7:66:c3:c3:6a:1f:30:ea:
                    92:27:3d:45:a4:51:5e:93:dd:09:87:86:2e:d9:59:
                    15:9f:39:bc:df:3a:22:8c:f3:b9:ec:7d:aa:75:64:
                    26:f5:71:57:fe:3b:b6:44:f8:20:d4:66:24:25:60:
                    6c:8f:7f:83:80:e7:a3:26:f7:b6:13:3b:33:44:e2:
                    8c:ce:8d:ef:47:0a:18:21:09:1c:e5:70:8f:e8:ef:
                    7d:0a:1c:66:77:f2:9d:8b:c5:de:55:bb:82:e0:32:
                    9a:76:f7:32:78:21:b6:49:0e:e3:7d:eb:61:86:66:
                    9f:1d:9a:36:26:d9:9b:c2:67:82:39:5e:95:9d:c0:
                    82:68:ad:6a:5e:14:bd:1c:09:c0:5d:c6:2a:ca:8f:
                    32:9a:8f:8b:b4:2d:e4:0e:e6:d2:b9:d3:fa:20:be:
                    2e:27:0b:4a:a5:e9:83:d3:1c:a7:a1:44:c0:b5:c3:
                    9a:12:b4:fb:92:d7:20:a2:6a:99:d0:e9:e2:9d:7c:
                    06:00:3c:41:a6:30:5a:9b:fe:c2:43:6c:2c:74:88:
                    c2:39:b6:26:70:9f:b2:2d:75:b7:31:a8:e7:6e:4e:
                    a8:54:ca:3b:7b:1d:38:6a:dd:14:42:e9:7a:99:92:
                    68:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4B:7C:80:83:3A:A6:9B:C2:B5:ED:5A:87:BD:46:58:8A:26:B1:4D
            X509v3 Authority Key Identifier:
                keyid:47:30:A9:8D:B2:84:C4:2D:4A:4A:60:76:03:79:28:71:04:FF:D3:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38f06920dcf8a8c8d06d7ce6911b82064078b63e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c24cc83f-3ffc-4023-ad4f-42ebd1c265f1/d072b36e3dea0906d7a2804a53dd402d4633776f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c24cc83f-3ffc-4023-ad4f-42ebd1c265f1/38f06920dcf8a8c8d06d7ce6911b82064078b63e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.96.0/22
                  190.97.120.0/21
                IPv6:
                  2800:d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:9a:91:34:81:5b:37:89:23:39:9c:60:fa:b1:51:d2:6b:bb:
         c6:6b:f4:6c:69:6f:ab:fa:94:d4:61:98:d2:81:47:92:87:29:
         2f:7b:7b:3b:1b:67:98:a3:58:0e:7f:21:96:4f:a3:75:95:af:
         a0:c0:5e:fc:b7:03:8b:87:fc:c2:be:03:00:7d:60:c9:6c:32:
         f5:ac:8d:8a:c5:b1:5d:2c:0b:bc:15:f0:71:3e:a3:34:cb:9c:
         25:8a:6b:e2:c3:98:d0:5a:12:ee:e7:d7:7a:76:76:d7:1e:4e:
         f2:76:f5:62:81:5b:1a:eb:c4:f4:33:98:3a:5c:fa:ee:78:be:
         1f:7a:06:fa:df:36:67:fc:35:07:1c:2e:74:d8:bc:e6:29:d3:
         cd:47:6a:8f:4f:2d:8c:d3:3d:ae:7a:7a:f1:52:93:e4:82:e3:
         7b:d8:ec:90:79:0f:2f:46:6b:71:88:7e:77:b1:76:09:dd:29:
         85:05:05:e1:38:55:ba:ac:21:a7:b8:2e:ed:42:37:cd:77:b1:
         7f:8c:17:21:1f:fe:04:e2:cc:7f:4b:b8:b8:46:31:d9:e4:bd:
         ba:7e:5f:cb:b6:2e:34:56:12:4b:5b:37:38:79:c7:7a:b6:5a:
         41:38:6d:1d:db:e5:42:7d:d9:da:c0:bd:dd:f8:6f:48:0b:b1:
         ee:0a:8e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----