Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d8ec912c-89fc-42b1-9033-65a6cb69345d/753c32c883525f2d2b79806d4c853ce60b32ad3a.roa
File:                     753c32c883525f2d2b79806d4c853ce60b32ad3a.roa (raw, json)
Hash identifier:          kdtaRrmgupKgv8LP7eOk3F9QaALEEM8koXAQf+vd4y8=
Subject key identifier:   B8:E6:02:FD:D8:2F:26:54:64:81:37:FF:E3:69:28:5D:B2:EF:A5:73
Certificate issuer:       /CN=62b5c642468784bc32a5ea7e640836c3bbe109dc
Certificate serial:       05F6
Authority key identifier: 9D:0B:05:35:55:63:24:EB:16:92:9B:75:7C:AA:35:59:B1:1B:E6:8E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62b5c642468784bc32a5ea7e640836c3bbe109dc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d8ec912c-89fc-42b1-9033-65a6cb69345d/753c32c883525f2d2b79806d4c853ce60b32ad3a.roa
Signing time:             Wed 01 Dec 2021 11:18:00 +0000
ROA not before:           Wed 01 Dec 2021 03:00:00 +0000
ROA not after:            Fri 01 Dec 2023 03:00:00 +0000
asID:                     263712
IP address blocks:        131.255.248.0/22 maxlen: 22
                          2803:c780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1526 (0x5f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62b5c642468784bc32a5ea7e640836c3bbe109dc
        Validity
            Not Before: Dec  1 03:00:00 2021 GMT
            Not After : Dec  1 03:00:00 2023 GMT
        Subject: CN=753c32c883525f2d2b79806d4c853ce60b32ad3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dd:01:41:b3:4f:b5:28:a2:a1:cc:15:6a:e3:
                    5b:f5:9b:d9:6e:fb:41:bf:99:59:f8:63:af:99:32:
                    ff:18:d8:2b:ab:74:b4:22:41:0a:e1:aa:de:7c:10:
                    96:2a:2c:d1:67:08:84:d0:b7:b7:7d:47:9b:b6:63:
                    0c:b1:3c:53:81:ee:ff:14:d8:e0:29:1d:63:fb:b4:
                    80:ee:7c:1d:aa:36:fd:07:64:29:2e:97:f6:e8:87:
                    a9:79:50:e3:f7:2d:7d:18:74:89:dd:31:5d:9b:6f:
                    57:56:e5:43:e4:57:0a:e3:e6:cc:96:e3:c6:92:fe:
                    76:0f:c1:99:e0:b1:d2:9c:bd:b2:18:41:0d:c4:e2:
                    db:cd:fd:19:61:ca:3b:07:5d:5b:a5:47:2d:da:17:
                    c0:97:60:7f:42:f4:62:c2:9f:06:8d:dc:ef:12:ba:
                    42:9b:72:97:db:8d:7c:b4:5e:7e:89:a7:d1:9a:29:
                    f8:54:f3:03:fb:bd:53:6a:59:39:df:5f:2e:45:c4:
                    2a:ff:bc:3c:29:21:09:c1:31:5f:49:5d:09:4c:e1:
                    98:07:e8:a7:76:95:e3:1e:d5:57:4c:6e:8c:d3:50:
                    65:53:cd:82:9b:0d:42:d3:86:83:c5:b1:af:7b:58:
                    5a:59:70:d3:dd:4c:68:b0:01:c1:0e:47:62:98:20:
                    e8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E6:02:FD:D8:2F:26:54:64:81:37:FF:E3:69:28:5D:B2:EF:A5:73
            X509v3 Authority Key Identifier:
                keyid:9D:0B:05:35:55:63:24:EB:16:92:9B:75:7C:AA:35:59:B1:1B:E6:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62b5c642468784bc32a5ea7e640836c3bbe109dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d8ec912c-89fc-42b1-9033-65a6cb69345d/753c32c883525f2d2b79806d4c853ce60b32ad3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d8ec912c-89fc-42b1-9033-65a6cb69345d/62b5c642468784bc32a5ea7e640836c3bbe109dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.248.0/22
                IPv6:
                  2803:c780::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:7c:ca:18:b4:25:32:13:d6:7b:a2:63:3c:02:f8:67:cd:87:
         0d:7a:e2:3a:65:29:1c:85:bc:b3:fa:f9:25:fa:85:42:e6:da:
         c6:8b:06:c0:5d:f9:53:8a:ea:69:38:37:1c:31:83:aa:6e:34:
         be:d4:c0:08:57:b3:c6:04:69:57:1b:44:f9:7a:bb:b1:a4:93:
         a5:6d:b1:cc:c1:ba:25:51:91:54:4c:2a:cb:83:6f:04:1e:7b:
         63:8e:53:ca:1e:ad:d9:29:77:61:a6:62:2b:bd:5c:43:64:44:
         1c:b3:20:25:89:6e:14:a3:fe:6e:4c:2e:86:e2:56:4b:5d:23:
         a9:13:1d:a3:ac:c2:df:b2:6a:ef:e3:53:cc:8a:13:98:cc:4c:
         a1:83:bb:fa:8c:31:7d:a8:b2:8e:fc:73:1c:4d:87:a4:e2:fe:
         e5:dc:2a:2c:5d:84:3d:42:54:ab:1c:5a:e0:4b:ec:8a:08:ad:
         69:e3:94:0e:45:8d:2e:71:57:23:90:91:e0:e2:e5:9b:f0:f4:
         86:19:e4:ba:14:30:28:63:65:0f:ae:f6:23:31:cc:af:8b:58:
         ec:b1:93:df:6d:b1:68:b0:e1:19:f2:9f:e0:16:eb:da:08:ee:
         23:85:f4:5c:ef:ed:33:ad:45:05:ea:fd:77:1a:42:18:6f:6c:
         8d:1e:93:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----