Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/50e94e154fe50eb6b283d5a61de5b195c095e528.roa
File:                     50e94e154fe50eb6b283d5a61de5b195c095e528.roa (raw, json)
Hash identifier:          u2JORl6SVnyzQ8+FFEI3/D9h0quNn9h1b9G1Mj+wk3A=
Subject key identifier:   D9:91:AD:49:2F:10:6D:99:15:08:2B:68:71:99:AB:85:62:5D:5B:C2
Certificate issuer:       /CN=491991f40dab281b295c3cc5d691493655fc7e8d
Certificate serial:       20A7B4
Authority key identifier: A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/50e94e154fe50eb6b283d5a61de5b195c095e528.roa
Signing time:             Thu 27 Apr 2023 12:47:14 +0000
ROA not before:           Wed 26 Apr 2023 12:47:14 +0000
ROA not after:            Sun 27 Apr 2025 12:47:14 +0000
asID:                     264830
IP address blocks:        170.80.228.0/22 maxlen: 24
                          2803:2c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140084 (0x20a7b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=491991f40dab281b295c3cc5d691493655fc7e8d
        Validity
            Not Before: Apr 26 12:47:14 2023 GMT
            Not After : Apr 27 12:47:14 2025 GMT
        Subject: CN=50e94e154fe50eb6b283d5a61de5b195c095e528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a7:f3:af:05:88:c9:ad:33:c4:2f:7d:6d:c7:
                    f0:bb:c1:7f:1a:f4:64:ea:b4:2e:01:06:4e:bf:9e:
                    52:9b:df:56:da:dd:20:0b:bf:54:22:d7:ac:a6:be:
                    38:00:ce:93:d7:c8:22:c8:06:0b:7e:fb:b3:fe:b4:
                    4b:eb:3a:af:f6:8b:7c:c2:67:ea:28:ee:a3:86:b9:
                    5c:30:4d:9c:93:0f:d7:3b:a9:9e:f2:f7:6e:93:a2:
                    3e:b5:e2:96:cc:9f:fe:44:72:52:e6:5d:83:cf:1b:
                    6d:28:da:38:7d:e5:8d:a7:fb:58:22:38:57:01:0a:
                    4d:41:92:71:cf:fd:ed:c7:0e:04:d3:25:b6:6a:54:
                    10:a4:a6:27:29:48:c4:da:20:1b:09:94:93:1d:72:
                    8b:3d:16:98:70:5b:49:d7:d3:c2:d0:63:d1:36:9b:
                    0c:a7:51:ea:ed:e6:22:ab:2b:86:0f:4c:f2:81:6a:
                    fc:16:c8:51:ef:53:f1:fe:f8:cf:af:ff:ee:7d:2d:
                    bd:7c:12:09:14:c1:c3:46:2b:f2:82:6d:7f:2b:57:
                    48:15:43:d2:2c:67:1f:23:57:fa:c7:20:2b:6e:45:
                    9b:9f:b7:94:be:70:38:e1:66:b0:8c:30:11:30:e7:
                    20:29:3d:96:2a:54:9a:81:6e:8b:02:15:17:4f:d0:
                    bd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:91:AD:49:2F:10:6D:99:15:08:2B:68:71:99:AB:85:62:5D:5B:C2
            X509v3 Authority Key Identifier:
                keyid:A3:F9:36:28:6E:C6:CC:E2:32:2D:F0:25:B1:C8:67:74:63:9B:B7:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/491991f40dab281b295c3cc5d691493655fc7e8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/50e94e154fe50eb6b283d5a61de5b195c095e528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cba978eb-8bb7-4328-b29d-839eefee3683/491991f40dab281b295c3cc5d691493655fc7e8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.228.0/22
                IPv6:
                  2803:2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:6f:6c:91:28:19:8d:84:88:5c:d6:85:bb:60:e1:50:4f:10:
         a5:f8:98:eb:82:80:c3:f2:61:65:af:b3:95:bc:34:af:8e:57:
         05:04:1c:8b:33:11:8c:c3:97:8a:4b:92:51:5f:34:e2:59:63:
         28:91:4a:f2:b9:de:c7:dc:c9:e4:73:9c:4e:dc:25:ee:e5:16:
         e2:29:5c:e0:1f:dc:3a:16:c3:31:eb:fa:2d:1d:06:1d:9e:b1:
         56:c5:06:f3:cb:22:17:ef:63:15:81:b3:08:2e:7c:8d:68:79:
         c3:b8:51:f1:d7:a4:a8:ff:4f:0c:0a:25:75:1b:0f:3c:d2:34:
         e1:c7:12:d8:bf:8a:3d:ab:d3:9f:d9:89:4c:dc:aa:c2:b6:52:
         64:c9:81:bc:8b:3b:d2:24:b0:9c:5f:06:73:b0:7b:6c:69:ab:
         f3:66:eb:38:d0:ee:1c:ca:dd:f7:99:03:44:a8:0e:f8:65:ca:
         79:85:2c:c7:bc:43:2c:d8:31:fe:ed:a2:c2:7a:67:7d:5e:84:
         83:56:29:2c:a0:b5:cd:3f:36:3c:13:8a:d9:a2:5c:73:5c:44:
         90:42:b6:18:2c:ab:3f:12:06:77:5a:56:6e:52:dc:a2:65:0e:
         66:17:8c:53:9a:c9:77:4b:a0:92:c7:9b:79:48:bb:5d:e0:6a:
         40:2b:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----