Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3a4ba11-6b7d-49f0-8ea4-5d171fa0b1e0/8c6eea77b387e261760e00d7be3967bf25998c1f.roa
File:                     8c6eea77b387e261760e00d7be3967bf25998c1f.roa (raw, json)
Hash identifier:          JNlHVKOT+LpRBsWtcd/N1JsPlz+3Rh3jqN9bhUdDIug=
Subject key identifier:   F4:CD:5C:4D:87:AF:71:86:E1:89:AC:28:AC:84:E6:CC:71:16:37:65
Certificate issuer:       /CN=d9920ef560c886b3a15f2c2a41a3944ccf2a200c
Certificate serial:       03C341
Authority key identifier: ED:20:D9:77:18:FB:F5:C1:D9:CB:1A:A9:B5:E2:80:FB:DE:FF:44:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9920ef560c886b3a15f2c2a41a3944ccf2a200c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d3a4ba11-6b7d-49f0-8ea4-5d171fa0b1e0/8c6eea77b387e261760e00d7be3967bf25998c1f.roa
Signing time:             Wed 24 Mar 2021 14:42:36 +0000
ROA not before:           Wed 24 Mar 2021 14:42:35 +0000
ROA not after:            Tue 24 Mar 2026 14:42:35 +0000
asID:                     271781
IP address blocks:        179.51.208.0/22 maxlen: 24
                          2803:2fe0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246593 (0x3c341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9920ef560c886b3a15f2c2a41a3944ccf2a200c
        Validity
            Not Before: Mar 24 14:42:35 2021 GMT
            Not After : Mar 24 14:42:35 2026 GMT
        Subject: CN=8c6eea77b387e261760e00d7be3967bf25998c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1b:6a:2d:9c:28:6a:10:e0:5a:89:ef:6e:38:
                    31:23:00:d3:a8:7e:a2:30:73:93:a3:fc:11:8c:bb:
                    5d:1f:57:58:49:ec:2d:38:22:06:99:46:33:8f:1e:
                    5f:13:2d:5f:55:7d:6e:c1:37:af:86:3e:71:ce:8a:
                    4f:68:c5:9e:52:90:7c:ee:1f:94:a5:34:84:b8:0f:
                    77:cb:14:ea:c6:af:59:f6:49:24:06:f3:dd:1f:37:
                    3c:0b:56:5e:50:0f:96:74:94:3a:07:ac:45:d8:ab:
                    4b:9d:4a:35:e2:c6:94:97:fa:3a:7d:72:dd:6c:b2:
                    11:c4:d6:e7:f6:2d:59:bd:3c:10:be:cc:2b:1f:61:
                    71:7d:a2:b1:03:4a:1b:af:0b:c0:69:da:1d:f0:c8:
                    7a:a4:b0:1e:da:b5:a8:f3:97:41:33:8f:55:6f:68:
                    52:ac:41:f6:27:4f:68:5c:66:7a:59:5e:13:37:37:
                    12:1d:65:7a:9b:be:bd:e2:a8:2a:8b:42:20:fc:f1:
                    4c:26:f3:56:25:bf:e8:fb:78:37:c8:5d:e3:72:92:
                    a7:00:74:4c:c2:d2:26:b9:74:07:6e:31:9f:c9:c2:
                    96:95:8d:80:db:02:91:02:60:ed:30:c5:bc:1b:8c:
                    2e:e4:de:70:fc:c1:dd:35:f6:44:b9:b7:55:5a:85:
                    02:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:CD:5C:4D:87:AF:71:86:E1:89:AC:28:AC:84:E6:CC:71:16:37:65
            X509v3 Authority Key Identifier:
                keyid:ED:20:D9:77:18:FB:F5:C1:D9:CB:1A:A9:B5:E2:80:FB:DE:FF:44:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9920ef560c886b3a15f2c2a41a3944ccf2a200c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3a4ba11-6b7d-49f0-8ea4-5d171fa0b1e0/8c6eea77b387e261760e00d7be3967bf25998c1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d3a4ba11-6b7d-49f0-8ea4-5d171fa0b1e0/d9920ef560c886b3a15f2c2a41a3944ccf2a200c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.208.0/22
                IPv6:
                  2803:2fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:bf:8c:a0:f8:bc:bd:05:00:f3:13:26:d5:a1:14:09:6f:a2:
         76:88:f2:ff:ed:a4:cb:d4:bb:36:5f:dc:38:13:a7:f3:5a:0f:
         03:fe:5b:c3:ba:4f:53:87:54:bd:e5:df:94:31:e6:8a:68:68:
         f5:44:c3:25:74:b4:f5:a2:bf:b9:a9:7f:c7:bd:c4:31:ea:c2:
         ac:de:be:a4:35:83:a0:7a:b9:ca:3c:bb:58:b3:d4:9f:be:9a:
         49:11:07:91:d5:28:b6:88:e2:c5:30:d8:33:fc:17:f8:34:97:
         92:2c:f8:cf:88:e9:6f:b2:0e:de:64:5d:e0:fc:4c:f4:15:8e:
         88:55:81:91:0d:8f:26:62:07:be:d4:39:9e:2f:3f:91:d3:11:
         2a:d1:0a:c9:48:59:cc:03:7b:16:f1:b4:b5:a8:de:22:49:b1:
         8f:52:f2:0a:02:d2:c8:fa:a8:58:5c:5b:7d:c7:29:f9:d1:48:
         e4:af:44:41:6d:5a:40:99:5d:74:c3:f5:08:d6:77:22:b8:21:
         67:ca:03:6f:ff:72:13:6c:ee:e5:39:fd:c6:c9:bc:4f:33:60:
         85:6d:96:24:5f:82:c4:08:76:6b:c7:59:01:4b:20:58:d5:87:
         03:ff:fe:fd:c1:cd:cf:e1:f4:e1:41:ce:e5:63:22:a2:19:69:
         09:43:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----