Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d008c8-a975-4fa4-89b2-393f4285797f/a9d5762c3099e10ebeb4598f998c2c4e26ec3ff9.roa
File:                     a9d5762c3099e10ebeb4598f998c2c4e26ec3ff9.roa (raw, json)
Hash identifier:          1RKch6+0H7yMgTiydUxa3ryvxfW7K9M28zS1Cm/9k3U=
Subject key identifier:   CB:37:47:42:4B:0B:A2:99:D7:74:19:D2:29:EE:E7:A3:5C:80:2E:A0
Certificate issuer:       /CN=2216f730dc559b8b90421f5cdb654392e386eba6
Certificate serial:       165FDF
Authority key identifier: AE:BC:B5:40:D1:C5:F4:BE:16:C1:8A:18:26:76:BA:46:E1:75:5A:0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2216f730dc559b8b90421f5cdb654392e386eba6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2d008c8-a975-4fa4-89b2-393f4285797f/a9d5762c3099e10ebeb4598f998c2c4e26ec3ff9.roa
Signing time:             Fri 01 Apr 2022 21:39:50 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52470
IP address blocks:        179.0.20.0/22 maxlen: 30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466335 (0x165fdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2216f730dc559b8b90421f5cdb654392e386eba6
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=a9d5762c3099e10ebeb4598f998c2c4e26ec3ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6b:25:cf:b0:f4:be:8c:ec:a3:22:99:05:f8:
                    fc:a5:70:cb:44:8b:4c:e1:b5:da:b4:c7:6f:79:c6:
                    07:a4:ba:0e:e1:6e:18:a4:96:90:9f:e1:34:e0:f9:
                    5e:48:fe:81:5f:4b:99:48:1b:c4:d5:70:8c:9a:3e:
                    30:73:de:3c:9b:ca:e5:5a:38:c4:0f:ca:f8:e2:18:
                    00:10:2f:91:e1:b0:91:4e:c2:fe:40:75:db:cf:88:
                    58:b5:6e:47:ad:64:45:0e:8d:df:31:03:02:2c:f0:
                    f4:bd:56:70:5c:0b:24:7d:c4:fb:d5:91:71:3a:a0:
                    84:78:ad:d4:1f:83:97:88:d9:aa:01:5e:f9:df:d2:
                    be:39:84:40:2d:6d:52:42:c0:8a:01:05:97:e1:42:
                    13:42:3c:b3:10:7d:73:b0:2b:b3:64:81:4f:1d:17:
                    23:7c:eb:5c:d7:23:ff:82:3c:58:c2:b6:4e:d9:2c:
                    47:4a:56:4d:00:1c:3e:9a:3d:cb:4d:0f:37:9b:db:
                    33:78:05:65:0e:f8:9f:39:46:27:2a:3d:ca:b9:c4:
                    17:56:75:96:3d:06:b8:ab:ec:a2:1b:68:68:88:15:
                    92:27:19:24:1e:03:9d:49:3d:9a:1b:ca:37:e4:68:
                    18:9b:e4:b1:05:38:4f:73:ba:6c:dd:7c:28:68:42:
                    f9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:37:47:42:4B:0B:A2:99:D7:74:19:D2:29:EE:E7:A3:5C:80:2E:A0
            X509v3 Authority Key Identifier:
                keyid:AE:BC:B5:40:D1:C5:F4:BE:16:C1:8A:18:26:76:BA:46:E1:75:5A:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2216f730dc559b8b90421f5cdb654392e386eba6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d008c8-a975-4fa4-89b2-393f4285797f/a9d5762c3099e10ebeb4598f998c2c4e26ec3ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2d008c8-a975-4fa4-89b2-393f4285797f/2216f730dc559b8b90421f5cdb654392e386eba6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         42:27:59:63:47:d1:1f:8e:fd:be:8d:70:e9:bf:64:b7:50:21:
         29:b1:a2:ca:f3:d5:2c:ce:96:53:fc:4d:87:dc:d4:ab:98:17:
         8c:f5:25:44:d3:5b:76:96:fc:a8:da:b0:db:42:58:c6:d9:45:
         30:46:10:dd:28:67:d1:61:9b:8b:b3:5e:8c:15:c8:97:23:fb:
         7f:d2:a3:70:a9:d0:78:f2:0b:aa:52:24:8c:ac:8e:5e:08:39:
         2a:6b:60:ab:51:d6:f4:42:12:d0:9e:ac:39:03:0c:8b:4e:79:
         19:22:90:45:9e:52:cc:5c:6e:fa:3e:a3:2b:a7:5d:b9:de:38:
         87:8f:65:88:af:12:6d:c1:dd:6c:cd:87:07:26:62:4c:25:76:
         7d:b7:e3:ee:e4:72:c6:4b:5d:50:fb:d0:57:d3:52:a3:fb:3b:
         09:09:67:99:fd:c7:3a:e3:9f:ab:ef:07:fe:e9:8c:57:f5:e4:
         ca:b1:62:69:5b:35:81:0a:db:d3:22:24:82:da:19:e3:0f:02:
         58:6c:69:20:37:44:f6:22:f4:9a:46:34:73:c7:58:57:95:53:
         38:f9:e2:b9:60:5b:e9:4b:f8:fe:71:31:68:de:c2:00:de:c2:
         db:60:d6:f5:03:e8:d7:b0:de:b3:44:14:4e:1d:a2:96:a3:82:
         6e:ab:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----