Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3a4ba11-6b7d-49f0-8ea4-5d171fa0b1e0/54e9f038dd3e2d879e3f644a2ec587f90063fc3c.roa
File:                     54e9f038dd3e2d879e3f644a2ec587f90063fc3c.roa (raw, json)
Hash identifier:          P7QWUVKDYY/+0FjWsGiSqCorq4rSD0dfC+wfbWbnQx0=
Subject key identifier:   75:3F:E9:A3:B6:B5:14:BA:08:A5:D7:80:36:11:83:6D:C4:A7:F7:BA
Certificate issuer:       /CN=d9920ef560c886b3a15f2c2a41a3944ccf2a200c
Certificate serial:       03C5DE
Authority key identifier: ED:20:D9:77:18:FB:F5:C1:D9:CB:1A:A9:B5:E2:80:FB:DE:FF:44:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9920ef560c886b3a15f2c2a41a3944ccf2a200c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d3a4ba11-6b7d-49f0-8ea4-5d171fa0b1e0/54e9f038dd3e2d879e3f644a2ec587f90063fc3c.roa
Signing time:             Wed 24 Mar 2021 14:42:36 +0000
ROA not before:           Wed 24 Mar 2021 14:42:35 +0000
ROA not after:            Tue 24 Mar 2026 14:42:35 +0000
asID:                     271781
IP address blocks:        179.51.208.0/22 maxlen: 24
                          2803:2fe0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247262 (0x3c5de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9920ef560c886b3a15f2c2a41a3944ccf2a200c
        Validity
            Not Before: Mar 24 14:42:35 2021 GMT
            Not After : Mar 24 14:42:35 2026 GMT
        Subject: CN=54e9f038dd3e2d879e3f644a2ec587f90063fc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:90:d5:31:a5:2c:6d:de:87:96:4a:56:85:
                    42:61:3c:70:c9:6a:7e:ef:ff:52:fe:61:76:b4:76:
                    69:fa:94:58:d5:e0:c1:5d:53:77:49:5f:b5:15:88:
                    18:a5:27:aa:c2:b2:f0:af:9f:9a:3f:30:36:df:97:
                    f5:1e:8c:3a:93:ef:aa:2d:67:c4:11:57:b9:9c:da:
                    da:ac:ec:e3:26:0c:8b:70:0c:21:cf:db:db:88:61:
                    b2:3b:a3:f0:d5:cf:71:5e:cf:7e:f5:f4:19:d2:88:
                    a9:6f:d2:3d:78:09:1f:6c:5b:65:8d:ff:60:75:15:
                    b6:d8:18:0b:19:ef:ae:dd:45:84:5d:09:d9:c8:dc:
                    3d:84:8d:31:9f:7d:d8:e8:4d:a0:1a:dd:df:6d:91:
                    39:c6:00:b0:74:b2:93:c8:70:01:54:33:ed:cc:3a:
                    48:6c:e1:c0:d9:4a:9f:d9:07:65:22:59:56:56:11:
                    f5:8a:74:45:25:b9:43:c4:24:c9:c3:1f:ab:c8:7a:
                    bd:64:a4:33:cd:19:a4:16:a0:a2:4a:50:51:e2:4b:
                    d8:90:70:7f:d8:da:26:1d:0f:32:25:b3:3b:09:ac:
                    c2:4b:f3:bc:38:ae:66:db:0b:4e:11:94:09:75:0e:
                    9c:46:b2:70:5b:87:20:5b:db:05:50:94:73:30:26:
                    c6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:3F:E9:A3:B6:B5:14:BA:08:A5:D7:80:36:11:83:6D:C4:A7:F7:BA
            X509v3 Authority Key Identifier:
                keyid:ED:20:D9:77:18:FB:F5:C1:D9:CB:1A:A9:B5:E2:80:FB:DE:FF:44:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9920ef560c886b3a15f2c2a41a3944ccf2a200c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3a4ba11-6b7d-49f0-8ea4-5d171fa0b1e0/54e9f038dd3e2d879e3f644a2ec587f90063fc3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d3a4ba11-6b7d-49f0-8ea4-5d171fa0b1e0/d9920ef560c886b3a15f2c2a41a3944ccf2a200c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.208.0/22
                IPv6:
                  2803:2fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:41:7a:36:49:c1:81:9c:08:64:c4:ba:ca:20:14:24:a2:a2:
         79:12:88:be:fc:0d:ec:6b:2f:58:59:1b:85:4a:f1:c7:de:22:
         81:21:0c:f1:1d:15:89:33:9b:d5:23:9a:e8:90:f0:82:10:a7:
         24:64:fd:d7:c6:f3:3d:53:b0:86:9c:4e:d8:65:3e:8d:2e:07:
         30:46:44:5f:e6:b3:3f:e5:b5:73:7a:09:1c:47:92:39:dd:e4:
         35:9d:eb:2f:7f:f4:8c:ca:0a:4d:28:58:b3:0d:8f:6d:01:67:
         27:76:5f:b4:f2:63:2c:75:98:47:ce:16:37:6f:73:d3:12:af:
         34:d5:b9:7a:17:d4:ce:08:4e:5b:04:6c:3b:54:7d:24:e6:62:
         fe:bf:4b:32:53:98:41:43:4e:32:38:72:0e:24:d2:6c:2b:c1:
         f9:28:38:4c:c0:b9:52:d5:39:b4:a0:f5:43:43:49:76:fc:03:
         69:26:b3:64:f7:2f:57:40:6a:aa:00:7b:9e:af:17:ed:b3:20:
         ba:b9:81:10:82:f2:2a:d1:c4:42:db:25:3b:28:3b:79:9e:6d:
         99:09:0e:32:db:ae:96:06:28:ae:ae:ee:12:b9:f4:d8:10:7c:
         2d:94:65:f1:e8:9b:0f:af:1b:a5:88:68:8a:1b:e3:7d:93:7a:
         c2:ab:ae:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----