Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/2d356c14ee235b31e0f248d3352e268634716603.roa
File:                     2d356c14ee235b31e0f248d3352e268634716603.roa (raw, json)
Hash identifier:          Abd8yu+9ZX5jFStoKwnTv+ymzIlWOcHdYQsBRXMCm6c=
Subject key identifier:   F5:DD:85:71:90:47:87:00:DD:D2:5B:5B:07:D9:27:69:69:AD:76:C3
Certificate issuer:       /CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Certificate serial:       194BE9
Authority key identifier: 21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/2d356c14ee235b31e0f248d3352e268634716603.roa
Signing time:             Wed 13 Jul 2022 12:18:17 +0000
ROA not before:           Wed 13 Jul 2022 03:00:00 +0000
ROA not after:            Sat 13 Jul 2024 03:00:00 +0000
asID:                     15169
IP address blocks:        179.0.14.0/24 maxlen: 24
                          200.13.42.0/23 maxlen: 24
                          200.33.82.0/24 maxlen: 24
                          2801:0:440::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1657833 (0x194be9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a9fce8cb929134f597a155d408f5064261fb6f
        Validity
            Not Before: Jul 13 03:00:00 2022 GMT
            Not After : Jul 13 03:00:00 2024 GMT
        Subject: CN=2d356c14ee235b31e0f248d3352e268634716603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1e:b7:c5:f5:43:fa:4a:c2:ce:ce:4c:03:b7:
                    59:e7:3d:ad:6b:0f:1c:31:4a:c8:61:6e:74:68:03:
                    d7:f1:ac:61:fd:3b:a8:c7:eb:ec:fa:b5:5b:d1:6e:
                    8d:fb:26:5d:d3:09:97:ee:22:29:99:59:2e:55:0c:
                    5b:5d:61:4a:29:16:24:61:60:58:10:4f:f8:46:3f:
                    dc:55:33:78:50:36:89:0a:71:71:de:11:8e:a8:19:
                    52:7f:7a:61:66:05:6f:02:d0:94:dc:d1:b3:88:82:
                    c3:e1:1d:57:3b:29:20:23:9f:cd:6c:2b:0b:7c:1a:
                    06:bd:d9:d5:b7:3b:30:bc:99:72:b3:95:48:54:ac:
                    ef:3c:30:66:b2:fe:13:4b:98:41:45:ac:78:67:1c:
                    ef:15:2c:ce:c3:fd:35:3a:28:da:c9:b2:d5:f2:b6:
                    cc:1b:d1:6c:88:97:9e:c7:e6:16:42:5a:26:c4:b5:
                    67:5c:ae:32:40:82:24:1b:1c:9b:da:3f:4e:2e:01:
                    21:9b:6f:71:de:02:91:5f:42:92:14:65:77:d1:23:
                    22:1e:a6:f9:a4:d0:f6:47:35:8b:fc:9b:09:47:3e:
                    53:1a:71:ee:66:42:39:c4:a7:21:c6:57:4b:c4:ca:
                    26:af:52:db:c3:a6:24:ec:dc:4d:3b:e3:9a:72:ba:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DD:85:71:90:47:87:00:DD:D2:5B:5B:07:D9:27:69:69:AD:76:C3
            X509v3 Authority Key Identifier:
                keyid:21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/2d356c14ee235b31e0f248d3352e268634716603.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24
                  200.13.42.0/23
                  200.33.82.0/24
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:cf:49:78:2c:88:12:5b:a6:b8:e3:fa:9e:6d:84:fa:ef:33:
         1d:c1:34:84:8b:90:cb:d5:62:d6:7c:9f:7e:f7:db:0e:1a:49:
         16:47:6d:4c:72:68:bc:18:57:0d:50:b4:95:e4:f0:89:ac:43:
         ed:81:fc:49:d7:73:2a:31:ac:a0:91:5c:43:b1:34:ef:09:05:
         1a:d2:66:80:f2:20:7e:04:de:16:c1:11:1f:ff:d6:e7:9c:83:
         68:1a:73:92:b5:32:2e:86:a5:89:cd:75:99:cb:67:3f:0f:4d:
         59:b1:44:a8:a5:a2:31:db:78:4c:4d:55:c9:38:b0:8a:57:db:
         52:99:4f:f2:ab:2d:30:f0:e3:90:93:c3:91:c0:62:e1:d4:8b:
         22:c7:2b:77:1a:a8:5a:cb:f5:b5:a9:3d:1d:f6:02:9d:07:79:
         c8:80:be:90:2c:02:ad:26:8a:14:81:7e:73:11:bc:f7:1d:bd:
         60:cf:62:76:e8:50:fb:e7:4f:48:fc:18:1d:56:d7:51:20:58:
         71:61:fa:e6:3d:fb:03:45:b1:6c:d9:e0:5a:02:ed:b0:82:11:
         20:a1:12:21:d1:3c:99:39:71:ad:d1:05:89:9d:dc:b8:a9:90:
         e1:ab:a8:73:59:0d:3b:22:ba:b0:ca:ab:3c:36:dc:9e:96:f8:
         06:c2:9e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----