Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/6f3b6f12a0222023fe3875464c97b689ffc07e91.roa
File:                     6f3b6f12a0222023fe3875464c97b689ffc07e91.roa (raw, json)
Hash identifier:          Xf8l3rBdpIR/81KDkxcwWA7LsB6zNx8hxTUg2pmVyqw=
Subject key identifier:   35:96:F2:CC:E9:B8:9F:47:CA:52:91:22:46:BD:65:15:F2:1F:1C:CD
Certificate issuer:       /CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Certificate serial:       195008
Authority key identifier: 21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/6f3b6f12a0222023fe3875464c97b689ffc07e91.roa
Signing time:             Wed 13 Jul 2022 12:19:18 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     7303
IP address blocks:        179.0.14.0/24 maxlen: 24
                          200.13.42.0/23 maxlen: 24
                          200.33.82.0/24 maxlen: 24
                          2801:0:440::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1658888 (0x195008)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a9fce8cb929134f597a155d408f5064261fb6f
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=6f3b6f12a0222023fe3875464c97b689ffc07e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b2:2d:99:9f:e7:bb:17:44:54:eb:04:4a:18:
                    fe:02:7f:99:c7:85:38:f0:c9:51:ef:f4:19:19:a4:
                    b4:29:59:53:49:b7:96:7d:0a:2c:ac:43:1b:bf:e9:
                    df:50:4a:7e:83:76:ca:20:79:7c:f1:63:8a:dc:4e:
                    fb:fa:bb:fe:e2:0b:4b:ee:74:ea:8e:52:56:89:ae:
                    70:fc:72:6d:1f:a8:dc:f9:91:f4:a9:d5:46:f8:e4:
                    7d:88:61:05:f5:15:7c:0a:30:eb:d0:5a:08:69:74:
                    74:e0:40:6a:5a:2f:5a:5e:cb:60:25:7f:c8:88:76:
                    c8:83:bd:df:52:95:50:ef:3d:35:b9:9c:5f:b0:5f:
                    61:7e:50:2a:c0:ff:f0:8a:eb:13:b9:0c:d4:d4:dc:
                    89:c4:f8:3f:ac:4d:56:b6:15:94:78:85:87:9a:ed:
                    7c:af:66:7f:46:ee:45:56:92:b2:0c:0a:8b:1f:23:
                    8f:b9:5d:0d:cf:af:b8:71:8b:fd:9b:5c:9b:39:39:
                    44:d3:74:30:5e:ce:18:59:c3:3c:60:2f:2b:b0:f4:
                    a6:d7:83:44:29:ae:07:a3:93:f6:1f:81:b1:6c:df:
                    79:db:48:f2:06:3b:dc:a5:e2:cb:ce:3d:d8:c3:91:
                    20:76:01:66:a5:08:48:38:18:0d:c3:d2:47:ba:89:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:96:F2:CC:E9:B8:9F:47:CA:52:91:22:46:BD:65:15:F2:1F:1C:CD
            X509v3 Authority Key Identifier:
                keyid:21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/6f3b6f12a0222023fe3875464c97b689ffc07e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24
                  200.13.42.0/23
                  200.33.82.0/24
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:db:32:36:03:da:ce:60:8a:b6:94:4f:5a:ba:86:7a:0b:
         4b:68:33:6d:60:3e:c3:60:39:11:81:b0:92:74:fe:b3:7c:3b:
         9e:e2:0d:cd:07:0f:3b:91:9a:9a:63:b1:2b:c0:66:0d:2b:00:
         fb:1c:78:53:59:aa:93:ba:6d:19:56:2c:dd:0f:aa:1a:1a:ef:
         ce:46:22:dc:e3:9d:21:da:1f:01:f4:77:a5:95:75:6c:cd:a0:
         d6:85:a6:90:ec:ff:06:97:4e:ea:9d:14:3b:9b:2b:24:1c:73:
         9d:ac:7e:8a:e4:c5:0a:62:0e:bd:f1:14:01:2e:e4:94:d3:93:
         6f:4a:e5:a2:8f:06:17:e6:bb:60:20:ae:02:2b:c5:0e:76:36:
         07:b3:9c:e2:cd:58:3f:f0:51:1d:c5:25:1a:08:f4:8d:7d:c0:
         ba:83:3e:fc:08:a5:1c:68:bf:75:7c:06:5c:11:89:d5:b8:5f:
         43:ba:fc:3b:42:99:ec:84:7e:62:02:9b:17:63:bc:6d:08:d8:
         67:bf:f3:59:3f:b5:95:61:1f:24:6e:63:cc:52:07:7b:92:36:
         4c:7e:c6:11:f3:0c:39:21:ee:74:a7:62:b9:2e:d0:5a:76:24:
         fa:54:d6:1a:63:78:fb:2f:d5:06:77:79:be:f1:9f:0f:00:bc:
         d9:d5:49:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----