Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d4b38365-94ac-40db-b2e6-33f366af5e14/6245874c51b9eff94b8393cc054f627e4e46578a.roa
File:                     6245874c51b9eff94b8393cc054f627e4e46578a.roa (raw, json)
Hash identifier:          FihYeOJxv/dVm6F092jsGtElRcaimef0PZHSQkSYpQw=
Subject key identifier:   94:A6:5F:C2:9E:40:2A:CE:34:F1:51:77:EC:43:12:CC:B7:6B:EA:C3
Certificate issuer:       /CN=e66e69c168fa853b7832b2beecb03a521b68d2b9
Certificate serial:       061ADC
Authority key identifier: A9:08:95:62:44:68:9C:C6:DB:C3:EA:7C:8E:C9:95:FA:CF:2D:1C:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66e69c168fa853b7832b2beecb03a521b68d2b9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d4b38365-94ac-40db-b2e6-33f366af5e14/6245874c51b9eff94b8393cc054f627e4e46578a.roa
Signing time:             Wed 24 Mar 2021 14:38:13 +0000
ROA not before:           Wed 24 Mar 2021 14:38:13 +0000
ROA not after:            Tue 24 Mar 2026 14:38:13 +0000
asID:                     64126
IP address blocks:        131.108.236.0/22 maxlen: 24
                          2803:6de0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400092 (0x61adc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e66e69c168fa853b7832b2beecb03a521b68d2b9
        Validity
            Not Before: Mar 24 14:38:13 2021 GMT
            Not After : Mar 24 14:38:13 2026 GMT
        Subject: CN=6245874c51b9eff94b8393cc054f627e4e46578a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:85:13:d3:f0:7b:1f:6b:5f:d2:ef:bb:22:cb:
                    83:72:71:be:af:65:88:df:cb:fe:f9:95:f1:c6:e8:
                    4c:a4:03:f6:8e:b4:5d:5b:aa:fd:f6:d3:44:a0:d9:
                    bd:44:d8:e3:fb:08:6b:b4:2f:2f:26:55:9e:df:28:
                    56:ad:1c:34:bc:81:fa:7e:d6:b3:63:8e:67:5c:46:
                    8e:24:84:af:78:b8:a1:72:0f:2a:f2:0f:5b:fe:0e:
                    73:5c:c3:91:64:d7:68:74:1c:25:98:b3:85:e0:8a:
                    24:50:02:b9:5f:55:f8:99:27:6a:8e:d9:f2:42:cf:
                    3c:61:22:cb:4f:a6:ce:10:aa:41:16:9a:46:34:d6:
                    45:79:5b:09:67:ac:5d:c4:9a:c9:d8:75:b4:28:3a:
                    bc:31:e0:41:c1:f4:b6:21:19:44:7c:25:a5:d4:b3:
                    bc:67:24:4b:1b:7d:6f:ec:d6:e3:04:85:b7:bc:c5:
                    b0:86:41:c8:15:ab:4c:28:cc:ee:b3:f2:6f:71:65:
                    ee:67:9e:7f:f0:c8:b9:8f:ad:21:bc:a0:af:69:76:
                    1e:2b:aa:d4:f9:87:78:f3:b4:38:f7:08:da:f2:d1:
                    4e:62:54:93:7b:f4:4b:b7:a1:c6:bc:8b:bf:6a:e3:
                    11:e5:99:77:d6:e5:c7:06:0f:d9:e0:a4:7d:10:df:
                    66:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A6:5F:C2:9E:40:2A:CE:34:F1:51:77:EC:43:12:CC:B7:6B:EA:C3
            X509v3 Authority Key Identifier:
                keyid:A9:08:95:62:44:68:9C:C6:DB:C3:EA:7C:8E:C9:95:FA:CF:2D:1C:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66e69c168fa853b7832b2beecb03a521b68d2b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d4b38365-94ac-40db-b2e6-33f366af5e14/6245874c51b9eff94b8393cc054f627e4e46578a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d4b38365-94ac-40db-b2e6-33f366af5e14/e66e69c168fa853b7832b2beecb03a521b68d2b9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.236.0/22
                IPv6:
                  2803:6de0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:34:14:c3:af:bc:20:2e:cd:cb:09:14:98:6b:71:54:7d:72:
         23:7d:68:64:bb:e3:a0:39:bc:0d:16:62:7a:56:c4:ff:fd:69:
         1c:76:27:88:da:cd:2e:4e:3f:9c:cd:ac:fa:b9:b2:53:b6:0c:
         a1:ce:2a:12:8c:c0:0f:aa:f0:0a:4f:c8:31:18:e1:d4:72:7b:
         5c:22:8c:03:4f:f7:d6:9b:89:3e:04:e0:95:7a:59:97:92:d4:
         94:0f:e4:03:52:3c:01:90:b2:27:7f:ff:e9:dd:03:59:8f:1c:
         c3:9b:f8:b6:92:f1:92:34:25:12:fa:bc:e2:1a:cf:ea:9b:fb:
         ad:1f:39:1b:2a:0a:46:72:45:22:71:fd:bc:a7:29:57:96:d6:
         33:af:3e:b0:3a:99:d0:cd:d5:68:5f:a9:9d:44:a1:5f:a2:ae:
         d2:e5:48:5c:1e:e9:ac:65:41:25:d9:ff:13:b4:fa:de:91:62:
         00:41:e9:b3:61:7e:52:56:e3:61:9c:0e:f2:bf:7a:9e:f5:b7:
         44:3a:a9:fb:e8:1a:51:8b:17:f5:5b:7a:e9:30:78:77:14:a4:
         c5:2d:72:31:c0:47:26:ec:61:19:5b:c8:52:7c:05:9f:83:87:
         ce:3c:86:79:87:57:47:19:37:5d:cc:1d:a6:a0:65:bf:69:dc:
         78:07:38:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----