Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/df2324ef-0144-4645-ad85-5b24c433d9f5/57e39f0183d2dcaf35bfbe0cd8f928da5920dbb2.roa
File:                     57e39f0183d2dcaf35bfbe0cd8f928da5920dbb2.roa (raw, json)
Hash identifier:          cjuKWKstHk6X/fZReG7lYcJv4qpW6+kYS/dSdzXTKIc=
Subject key identifier:   42:32:FE:E8:C2:07:E3:B5:0F:B3:C6:7A:A6:B0:17:02:49:87:C4:59
Certificate issuer:       /CN=7aa2f4a764758cd626c2bdda9f67fa86e9e452c7
Certificate serial:       8F
Authority key identifier: D4:EB:9D:95:20:33:4D:14:6C:B3:79:7D:2C:0F:B0:EA:72:F9:22:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa2f4a764758cd626c2bdda9f67fa86e9e452c7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/df2324ef-0144-4645-ad85-5b24c433d9f5/57e39f0183d2dcaf35bfbe0cd8f928da5920dbb2.roa
Signing time:             Tue 27 Jul 2021 15:09:33 +0000
ROA not before:           Tue 27 Jul 2021 03:00:00 +0000
ROA not after:            Thu 27 Jul 2023 03:00:00 +0000
asID:                     265634
IP address blocks:        170.245.232.0/22 maxlen: 24
                          2803:dac0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7aa2f4a764758cd626c2bdda9f67fa86e9e452c7
        Validity
            Not Before: Jul 27 03:00:00 2021 GMT
            Not After : Jul 27 03:00:00 2023 GMT
        Subject: CN=57e39f0183d2dcaf35bfbe0cd8f928da5920dbb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:09:6e:32:66:7c:b9:5d:98:34:b5:e1:fc:2f:
                    99:4e:f4:b7:4d:03:13:a5:61:61:f8:51:6a:1e:9c:
                    c4:7e:e5:2f:a3:3b:0a:39:72:f8:cf:53:fd:b8:e0:
                    e4:4f:c3:bb:85:96:b5:03:6b:54:cc:b3:1e:3a:48:
                    12:75:40:91:f1:ce:4d:af:09:e1:01:29:ad:ee:71:
                    4b:db:34:7d:12:16:89:31:66:2f:f5:02:30:10:f0:
                    5e:95:7c:b3:0b:53:1c:a2:c6:e3:98:ff:ce:de:ff:
                    0b:5c:da:d1:11:3c:c4:c8:20:b4:9d:76:e3:1a:ce:
                    65:e5:d2:fd:2b:c3:86:0c:95:77:f6:3f:d9:5f:84:
                    47:a3:0b:af:b8:bd:18:c2:af:24:80:b3:e5:c9:92:
                    6b:c9:e1:2a:d7:4e:f3:fd:af:86:64:23:99:15:66:
                    de:6c:a8:64:5c:ef:56:a0:59:6e:48:09:4b:02:e4:
                    f5:32:19:1e:fa:f6:00:e6:d1:68:0a:4b:30:69:6b:
                    1e:da:b2:3d:69:7c:73:28:55:69:cc:e3:05:7e:b8:
                    35:a2:7d:a7:50:26:91:ad:1f:81:93:11:24:39:66:
                    2f:bc:28:f9:ec:fd:f7:50:e1:2b:03:ce:cc:8b:cd:
                    39:8c:1a:51:3e:3d:64:09:2e:76:53:19:e4:39:bd:
                    41:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:32:FE:E8:C2:07:E3:B5:0F:B3:C6:7A:A6:B0:17:02:49:87:C4:59
            X509v3 Authority Key Identifier:
                keyid:D4:EB:9D:95:20:33:4D:14:6C:B3:79:7D:2C:0F:B0:EA:72:F9:22:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7aa2f4a764758cd626c2bdda9f67fa86e9e452c7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/df2324ef-0144-4645-ad85-5b24c433d9f5/57e39f0183d2dcaf35bfbe0cd8f928da5920dbb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/df2324ef-0144-4645-ad85-5b24c433d9f5/7aa2f4a764758cd626c2bdda9f67fa86e9e452c7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.232.0/22
                IPv6:
                  2803:dac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:60:32:40:44:60:5e:5d:3f:df:f9:ba:fd:33:b8:27:1f:74:
         eb:9e:30:b3:34:98:0c:44:51:ff:f8:e9:b0:54:d0:a4:a0:7b:
         6b:43:14:67:2c:0c:80:c3:17:64:78:a9:88:f7:b2:1b:2a:ae:
         e1:d3:13:81:15:74:b8:06:fa:ec:72:23:7e:14:77:8b:3e:6c:
         97:7a:d8:d1:4c:e5:a0:e1:b4:9e:61:bf:24:33:48:ea:a0:76:
         d9:3c:78:72:4e:f9:f9:d1:3d:d9:3e:2c:8b:31:48:68:2c:de:
         95:19:cc:e9:01:b3:9c:95:52:52:2b:3e:bd:57:df:af:24:cb:
         3a:41:69:a5:f6:5c:1a:de:f8:4a:32:37:12:a4:69:a4:38:d7:
         3b:b9:46:dc:ba:4f:f4:aa:96:b9:e0:71:58:62:2c:78:f5:5b:
         64:04:d7:e9:f3:c3:6c:09:5a:ad:c7:05:ef:12:0d:09:77:40:
         f9:b2:81:8a:d4:6a:8d:4e:66:58:f9:8a:75:fb:0d:17:48:ed:
         62:9f:11:47:40:9b:97:60:bb:8f:8e:ab:e7:28:76:e8:98:94:
         e9:11:38:27:b6:c2:9b:45:5e:1f:f9:10:08:97:f7:a4:d9:e7:
         a4:b4:73:7c:96:c0:a5:a3:bd:c3:af:59:c5:60:3f:14:d6:45:
         f8:49:e9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----