Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/dd49a7b25fcac5ecc44956559a05bda743175b32.roa
File:                     dd49a7b25fcac5ecc44956559a05bda743175b32.roa (raw, json)
Hash identifier:          UIKr5l1bemQVBmvJcWUML/j3Tm9Ki+vzuxVSCBj/NY4=
Subject key identifier:   F8:41:03:B4:0B:C4:49:49:F2:B4:08:11:D7:57:93:FC:75:8B:5E:B4
Certificate issuer:       /CN=8fed3a03fcdc18750a4ae5c970d165b993a49009
Certificate serial:       0835C7
Authority key identifier: 7D:1C:69:1F:29:90:07:AF:FE:09:E0:67:23:68:18:03:C8:0D:CB:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fed3a03fcdc18750a4ae5c970d165b993a49009.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/dd49a7b25fcac5ecc44956559a05bda743175b32.roa
Signing time:             Sun 27 Feb 2022 07:16:21 +0000
ROA not before:           Sun 27 Feb 2022 03:00:00 +0000
ROA not after:            Tue 27 Feb 2024 03:00:00 +0000
asID:                     271862
IP address blocks:        177.126.48.0/22 maxlen: 24
                          2803:1410::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538055 (0x835c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fed3a03fcdc18750a4ae5c970d165b993a49009
        Validity
            Not Before: Feb 27 03:00:00 2022 GMT
            Not After : Feb 27 03:00:00 2024 GMT
        Subject: CN=dd49a7b25fcac5ecc44956559a05bda743175b32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:3a:56:4c:dc:b6:68:5c:9a:22:46:b3:f4:
                    10:5e:94:61:5c:5f:0b:67:74:85:22:5d:94:80:8e:
                    3e:f8:4a:91:11:5e:67:af:a8:26:50:d0:b0:09:47:
                    f1:51:ec:9f:08:29:23:a3:b8:86:b1:09:46:83:4c:
                    70:58:79:5e:f5:69:e5:59:ed:c2:fd:41:64:40:69:
                    dd:55:26:1d:ba:3c:4c:f1:71:85:e4:af:a8:0c:6f:
                    c6:22:db:d4:e4:42:dd:a1:fe:ec:a8:56:2d:fc:e2:
                    57:50:a2:38:ff:47:97:5a:75:cf:79:e4:1e:df:fd:
                    46:31:88:55:30:d9:2d:8c:a2:71:81:f6:08:d6:cb:
                    0f:aa:0c:37:1e:9a:7e:d0:71:5c:c1:05:76:d3:d4:
                    4d:c4:7b:03:0b:c4:72:4a:f8:a9:c9:ac:90:25:47:
                    14:2f:29:de:7c:c3:b4:c3:6f:25:bb:6b:26:f1:6b:
                    21:5e:45:1e:67:d0:5a:6a:3b:23:75:c1:a9:14:c7:
                    08:7b:48:97:3d:87:bf:25:e6:4b:79:e3:19:23:82:
                    32:61:8a:8a:95:dd:61:c3:95:14:7f:64:81:e9:bf:
                    26:00:1b:5e:a4:8c:bd:24:6e:6b:87:13:a2:47:b3:
                    40:e1:29:39:95:81:63:f9:cd:97:69:8a:eb:6d:6d:
                    80:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:41:03:B4:0B:C4:49:49:F2:B4:08:11:D7:57:93:FC:75:8B:5E:B4
            X509v3 Authority Key Identifier:
                keyid:7D:1C:69:1F:29:90:07:AF:FE:09:E0:67:23:68:18:03:C8:0D:CB:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fed3a03fcdc18750a4ae5c970d165b993a49009.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/dd49a7b25fcac5ecc44956559a05bda743175b32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3db18d5-1e2b-451d-8e15-0d0b5952f452/8fed3a03fcdc18750a4ae5c970d165b993a49009.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.126.48.0/22
                IPv6:
                  2803:1410::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:b4:42:f2:40:64:90:f8:65:7a:df:3d:a7:98:ba:3a:08:77:
         e2:d7:bf:b6:db:23:ee:23:11:e1:4f:05:c2:df:11:cc:51:fc:
         bb:99:43:47:6f:a4:82:89:2a:1d:d7:d7:41:80:76:b5:c4:80:
         e5:0d:96:47:5f:67:02:81:d5:e0:ba:41:5c:2b:9b:29:ff:bf:
         90:6f:79:08:7c:72:0a:e7:bc:fb:e6:68:b3:92:6b:0b:19:34:
         74:e7:11:22:d2:ac:fa:e5:27:1d:90:37:93:6a:48:6c:cd:8a:
         0d:20:dd:2e:4a:01:bf:fd:06:b3:cb:bc:89:7d:91:cb:7a:1a:
         6b:e1:7a:41:d5:1d:cd:69:57:9c:dc:02:b2:b5:b9:f6:aa:46:
         00:f7:c7:a4:db:0c:a7:e8:88:e8:3c:0c:1f:98:68:83:c0:22:
         58:8f:33:5f:4b:c7:25:d9:d2:20:2c:cc:c7:23:00:7c:fd:ff:
         ec:61:fc:ed:90:21:06:a2:88:f6:89:52:d9:d4:d1:0c:5f:3b:
         13:f1:03:f3:94:5c:60:2f:fb:c5:11:cc:95:c5:23:dd:75:0e:
         8f:89:42:5f:51:03:d5:00:e7:05:3e:cf:8a:e9:39:38:01:eb:
         36:e8:da:e4:b5:c4:45:10:e0:0f:ee:0b:5d:9c:05:65:20:b5:
         ed:77:b5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----