Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e6c28a90-6df1-4e3a-aea1-5288ea579c54/28b8cbd40e2bf746f6f1fbe4691ca15a823534c9.roa
File:                     28b8cbd40e2bf746f6f1fbe4691ca15a823534c9.roa (raw, json)
Hash identifier:          3hEbt5a3asKe0gpkos2bB9gADtn6W+whdAM1xbh/jjs=
Subject key identifier:   B1:59:A5:7A:04:E8:6D:A2:8E:07:7C:9C:D3:7B:92:9E:B9:18:BE:B0
Certificate issuer:       /CN=ce0912528b97c919a76319567c2e68b8d44d0cef
Certificate serial:       0AAFEB
Authority key identifier: 6A:7D:93:D4:F2:2A:E8:93:2A:D1:35:49:73:9F:3C:AE:73:75:16:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce0912528b97c919a76319567c2e68b8d44d0cef.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e6c28a90-6df1-4e3a-aea1-5288ea579c54/28b8cbd40e2bf746f6f1fbe4691ca15a823534c9.roa
Signing time:             Wed 24 Mar 2021 14:35:39 +0000
ROA not before:           Wed 24 Mar 2021 14:35:38 +0000
ROA not after:            Tue 24 Mar 2026 14:35:38 +0000
asID:                     265652
IP address blocks:        170.83.59.0/24 maxlen: 24
                          2801:1e:d000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 700395 (0xaafeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce0912528b97c919a76319567c2e68b8d44d0cef
        Validity
            Not Before: Mar 24 14:35:38 2021 GMT
            Not After : Mar 24 14:35:38 2026 GMT
        Subject: CN=28b8cbd40e2bf746f6f1fbe4691ca15a823534c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f7:4e:5e:90:86:c3:f1:8a:46:13:fc:7d:d7:
                    ec:bf:ae:08:24:5c:2d:06:3a:cd:57:8d:72:71:67:
                    5f:87:19:e1:68:f4:e5:50:f3:86:89:45:8d:72:b5:
                    dd:f5:2b:c0:c8:05:29:f0:b3:62:d5:53:15:9e:03:
                    6d:63:33:bf:b5:a9:f6:02:70:87:46:2f:ad:c3:11:
                    1c:2e:3a:ad:83:53:4e:47:01:00:42:30:a0:06:23:
                    a5:9a:91:69:71:d3:23:7c:4d:25:2a:1e:25:7e:65:
                    e3:33:07:61:fa:53:1e:a1:f3:e1:60:e7:30:4f:7a:
                    45:fa:bc:24:77:48:a4:88:d6:91:87:cb:a0:45:56:
                    46:f6:75:aa:02:ab:10:3c:67:0d:54:02:ab:5c:f3:
                    f8:15:83:5c:af:69:2a:d6:9a:b0:ee:57:a2:9c:bd:
                    d3:c2:ec:c6:ac:28:dc:47:22:6b:3e:a8:0e:f1:c6:
                    9f:05:f7:8f:f8:9b:50:ca:a1:59:ca:12:66:92:fd:
                    48:fb:43:2c:68:d7:44:60:b2:de:4a:08:26:1d:01:
                    4e:c3:d8:05:03:65:fc:04:94:0c:be:ea:2c:0a:cd:
                    e3:48:f4:00:8d:dd:5b:14:68:a7:d2:15:ff:ee:66:
                    33:e2:5d:cd:64:b9:7f:ef:62:62:ca:50:cd:6f:25:
                    b5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:59:A5:7A:04:E8:6D:A2:8E:07:7C:9C:D3:7B:92:9E:B9:18:BE:B0
            X509v3 Authority Key Identifier:
                keyid:6A:7D:93:D4:F2:2A:E8:93:2A:D1:35:49:73:9F:3C:AE:73:75:16:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce0912528b97c919a76319567c2e68b8d44d0cef.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e6c28a90-6df1-4e3a-aea1-5288ea579c54/28b8cbd40e2bf746f6f1fbe4691ca15a823534c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e6c28a90-6df1-4e3a-aea1-5288ea579c54/ce0912528b97c919a76319567c2e68b8d44d0cef.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.83.59.0/24
                IPv6:
                  2801:1e:d000::/48

    Signature Algorithm: sha256WithRSAEncryption
         96:1f:69:d8:2b:be:29:7e:6a:76:ac:57:06:65:9f:fc:b1:4d:
         74:ea:7b:e6:fb:24:13:7a:53:25:03:7a:5a:73:98:02:8f:1a:
         d7:7b:6e:c2:c6:f9:db:ba:bb:28:f9:15:c9:b0:00:64:59:72:
         8c:bf:82:59:5e:4e:23:d5:b0:c7:b3:2a:5f:23:84:f6:3f:96:
         70:6c:c2:ec:4b:34:7b:da:2a:64:44:87:34:07:9d:fc:ef:50:
         0e:36:fa:d4:15:70:ff:d3:34:c9:01:5e:d3:1c:3b:b1:58:61:
         8d:01:16:23:4d:4b:67:31:d0:9a:5b:21:3a:83:23:19:b0:e1:
         2e:bf:b9:9b:ff:fd:cf:97:fb:4e:9c:3a:a8:46:91:51:ec:a9:
         ca:d7:0e:90:a3:a0:92:1b:17:ef:18:e5:69:6e:d3:70:12:ea:
         34:3a:b1:51:45:58:43:bf:aa:2f:83:8d:ee:1d:b0:82:b5:e2:
         50:b9:69:6d:d4:09:02:b1:34:b5:96:52:83:f2:c5:2a:a5:5a:
         16:f4:25:80:b0:67:32:b6:b7:e7:06:c7:4f:fd:e0:c3:25:c2:
         87:4f:79:6c:97:f3:c2:97:c1:a6:79:6d:c7:83:21:63:4b:85:
         65:71:3c:60:80:1f:94:f0:73:ec:a5:23:af:0a:cf:bb:15:d9:
         51:eb:40:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----