Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/a0c4e661f4530ec4e426a72bccf3da3575d40923.roa
File:                     a0c4e661f4530ec4e426a72bccf3da3575d40923.roa (raw, json)
Hash identifier:          PsTlLdjSFhil4+B4q5Ld3F8JHdlrphGziqWscI18tNo=
Subject key identifier:   D9:CA:12:FD:C5:43:A1:08:DB:40:1C:B0:25:A5:89:73:F9:39:5A:8E
Certificate issuer:       /CN=b15724311c8f57527a6b499ef55d7b227a6142c3
Certificate serial:       0D31F1
Authority key identifier: 99:E2:35:A9:5E:82:7E:E9:25:69:E2:7B:20:38:B0:F8:22:B8:DF:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/a0c4e661f4530ec4e426a72bccf3da3575d40923.roa
Signing time:             Wed 24 Mar 2021 14:34:33 +0000
ROA not before:           Wed 24 Mar 2021 14:34:33 +0000
ROA not after:            Tue 24 Mar 2026 14:34:33 +0000
asID:                     264827
IP address blocks:        170.247.204.0/22 maxlen: 24
                          2803:36c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864753 (0xd31f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15724311c8f57527a6b499ef55d7b227a6142c3
        Validity
            Not Before: Mar 24 14:34:33 2021 GMT
            Not After : Mar 24 14:34:33 2026 GMT
        Subject: CN=a0c4e661f4530ec4e426a72bccf3da3575d40923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:52:c2:83:29:f0:6d:99:6f:b0:c2:23:8e:e6:
                    29:94:3c:a7:aa:28:1a:20:e1:c7:fc:09:dc:27:ad:
                    91:15:79:84:0f:19:3d:9f:ab:68:ef:02:dc:c1:ba:
                    34:d5:ce:77:22:9f:e4:c5:46:31:d0:21:69:1e:a2:
                    95:a6:aa:8a:1d:c9:fb:b8:57:8f:2a:da:c9:76:40:
                    e1:0f:79:99:47:30:03:8e:00:9b:e9:0e:ff:f6:c8:
                    f1:ab:87:d2:d6:b7:44:66:af:37:9e:6a:e2:9c:9b:
                    24:77:c7:7e:e7:e0:de:5c:65:8e:00:b7:cb:91:73:
                    42:cb:8f:aa:49:f5:c5:ed:df:4b:35:ef:1d:2c:71:
                    40:9c:55:c2:ac:de:50:9b:9c:92:60:9e:05:d5:9f:
                    cd:a6:cb:e0:c2:e4:20:77:60:49:ee:b2:63:9c:06:
                    75:5d:4c:13:ee:32:27:31:39:86:a8:26:e6:31:98:
                    61:86:d7:8f:1c:0b:ef:04:b5:5b:49:7e:62:37:cd:
                    1e:69:b9:7b:c4:dd:07:d6:92:52:7d:f6:22:93:00:
                    a2:db:c7:2a:dd:25:f1:f7:75:32:35:b7:36:09:a4:
                    e4:50:c9:d9:eb:d1:84:2c:9d:0d:78:bb:62:52:52:
                    65:20:2e:28:d7:3b:34:70:5f:0a:00:30:09:e4:e9:
                    ac:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CA:12:FD:C5:43:A1:08:DB:40:1C:B0:25:A5:89:73:F9:39:5A:8E
            X509v3 Authority Key Identifier:
                keyid:99:E2:35:A9:5E:82:7E:E9:25:69:E2:7B:20:38:B0:F8:22:B8:DF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b15724311c8f57527a6b499ef55d7b227a6142c3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/a0c4e661f4530ec4e426a72bccf3da3575d40923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4cf0349-c6d4-4dcf-b3f1-c28a5d45ca4d/b15724311c8f57527a6b499ef55d7b227a6142c3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.204.0/22
                IPv6:
                  2803:36c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:ff:5c:71:fd:de:98:1f:9e:27:21:55:63:9a:f8:85:76:b0:
         1f:6e:d6:c4:58:88:e2:e6:4b:07:1f:de:79:6d:d5:c4:aa:f5:
         fa:b3:8d:07:e0:7b:ac:43:26:85:f7:79:5e:3a:05:e8:af:ed:
         d7:3d:73:c3:c6:d4:4f:f0:7f:36:f4:7b:6f:94:e9:7c:82:db:
         cd:05:33:e5:98:4a:4d:7c:c3:8a:74:13:59:07:7b:ae:32:21:
         16:79:ed:50:ae:7f:6f:c4:b8:e3:7f:a9:e7:29:7c:77:3b:a7:
         51:24:f3:10:9e:4c:11:31:64:22:92:16:86:36:f2:a5:63:02:
         30:65:ff:77:a5:6c:e8:06:d6:1d:e0:de:3c:2c:75:74:54:48:
         60:e4:b5:0c:ed:8b:07:1b:e2:bb:10:2c:e3:c4:fd:c4:bf:8c:
         ca:e3:60:7c:54:84:6d:ef:ff:d4:fb:bb:6c:fa:4e:82:fa:04:
         66:da:59:e0:a7:50:00:f2:ef:8f:3b:dd:fd:bf:17:b7:e8:13:
         65:24:cc:b8:78:27:06:3b:1d:b7:9d:f3:4a:82:29:06:77:dc:
         21:a9:81:88:48:1d:7f:c3:dc:8b:e2:54:33:aa:a4:0a:9e:bd:
         bd:de:91:7d:c2:35:17:f4:66:0e:ee:1d:6b:26:9e:97:d6:12:
         b5:e7:5e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----