Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/3189b087a6154d868a79f8f2cddfb77303d4c168.roa
File:                     3189b087a6154d868a79f8f2cddfb77303d4c168.roa (raw, json)
Hash identifier:          Tu4eqE5rXJz+acxWgYQdrgZXmA62/AZfcNxK4dimhTk=
Subject key identifier:   34:10:B3:C9:24:AB:21:4A:DE:34:97:F1:E6:B5:6D:93:70:7E:88:F8
Certificate issuer:       /CN=26f72b79edb0cf7a212cac55ffae543643472e0d
Certificate serial:       19C5D8
Authority key identifier: DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/3189b087a6154d868a79f8f2cddfb77303d4c168.roa
Signing time:             Sun 31 Jul 2022 20:32:52 +0000
ROA not before:           Tue 28 Sep 2021 03:00:00 +0000
ROA not after:            Thu 28 Sep 2023 03:00:00 +0000
asID:                     264740
IP address blocks:        170.239.180.0/22 maxlen: 24
                          2803:f4c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689048 (0x19c5d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26f72b79edb0cf7a212cac55ffae543643472e0d
        Validity
            Not Before: Sep 28 03:00:00 2021 GMT
            Not After : Sep 28 03:00:00 2023 GMT
        Subject: CN=3189b087a6154d868a79f8f2cddfb77303d4c168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f2:80:f8:4a:1e:b9:8a:bf:77:fb:9f:88:55:
                    ec:da:e8:91:8c:52:06:aa:32:b0:22:6e:09:69:1d:
                    7c:e6:02:24:9c:ad:dd:3d:24:49:35:f6:37:bd:95:
                    ab:fa:fc:7a:bf:f2:6e:75:c6:89:22:2b:52:96:4d:
                    06:0f:15:e4:89:9f:03:07:f2:69:ee:81:25:39:d5:
                    f9:d9:1d:ee:fc:86:b5:45:b8:68:ea:87:cd:98:f1:
                    62:dd:16:0e:7e:89:56:e0:c3:e1:6f:e7:84:47:d7:
                    83:34:af:25:fb:17:ce:01:3d:31:48:58:1d:65:08:
                    0a:48:22:af:d7:ba:5a:d6:0e:4a:b2:95:70:6f:36:
                    f0:2f:da:08:1e:a3:65:22:48:53:43:18:a3:68:cd:
                    c2:f8:e7:84:86:4c:d2:89:c3:31:9e:9f:ed:57:7b:
                    da:dd:eb:50:a4:e8:c4:97:e7:5c:83:0c:07:10:ce:
                    70:1b:b0:13:95:b0:47:f7:db:74:c0:ca:af:94:a7:
                    4b:b7:f4:f6:b8:9c:63:49:5f:01:7b:2d:83:50:b1:
                    63:2d:b5:bf:23:68:8c:38:34:5a:a0:2b:31:2d:87:
                    a4:fc:e6:81:79:6b:2e:ae:69:63:d0:20:5e:17:64:
                    be:38:e4:c9:7a:fc:68:17:22:2c:ed:cf:dc:fe:9b:
                    cf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:10:B3:C9:24:AB:21:4A:DE:34:97:F1:E6:B5:6D:93:70:7E:88:F8
            X509v3 Authority Key Identifier:
                keyid:DD:C6:FF:4C:69:D0:B8:8E:D4:E0:EB:2C:3B:61:1E:38:8C:F9:10:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26f72b79edb0cf7a212cac55ffae543643472e0d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/3189b087a6154d868a79f8f2cddfb77303d4c168.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1bedc79-0a82-4bea-b621-8cd6dbc5b672/26f72b79edb0cf7a212cac55ffae543643472e0d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.180.0/22
                IPv6:
                  2803:f4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:72:ed:80:2a:d1:e2:03:7b:de:84:e4:6e:b6:74:18:53:d8:
         75:28:09:19:1c:14:1b:8d:38:95:6e:5e:3c:cc:81:e5:9d:2b:
         e2:fa:0f:4d:4b:d4:cc:c0:2b:31:3f:6e:13:51:c2:0b:2e:cb:
         96:6c:97:6b:2b:40:d8:d7:44:a9:a6:32:c7:87:22:cf:7b:d6:
         a6:03:55:4e:5b:a0:e8:cf:5d:05:d5:5f:0f:55:78:85:73:69:
         2c:7e:59:9e:b9:37:cc:85:e1:fd:bb:b5:74:88:b4:21:ca:d2:
         29:10:d2:34:7b:d0:18:82:cd:51:28:bb:34:bc:97:73:8e:2a:
         2b:25:e0:32:40:7c:38:b2:d8:7d:85:8a:14:c4:13:56:76:ae:
         78:2b:bb:0b:d0:55:39:f7:a8:db:49:a9:b3:e1:e4:0c:f7:f3:
         cc:5d:b5:80:95:6e:d6:7b:5e:ac:74:b0:b7:3e:16:3e:5b:00:
         21:98:e1:99:8f:c5:7c:12:5c:43:5b:c1:a7:8f:ce:8e:5d:dc:
         1d:37:eb:d9:b5:25:b3:df:7c:02:df:ad:a9:d4:d5:21:4c:95:
         05:5c:4d:58:4a:d1:85:f9:e9:67:e4:95:d8:71:ce:9e:43:5d:
         59:e7:39:52:25:03:7e:f6:22:7c:22:d3:db:ed:4f:96:3c:fc:
         96:04:24:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----