Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e83a8d1f-dd0b-4510-940d-0eb37249e40e/191bb611e8a75d984bc675ffdf0af1a3a47cd066.roa
File:                     191bb611e8a75d984bc675ffdf0af1a3a47cd066.roa (raw, json)
Hash identifier:          E8gXPUNDybJwB4lDgfgUWudfk/pkyVOpBufYzRwTQ64=
Subject key identifier:   53:E9:56:9C:74:9D:2D:C7:13:85:83:31:69:C0:9A:28:99:E8:72:D6
Certificate issuer:       /CN=6e9e4abea370f3c480263f6b769284e3b304bd76
Certificate serial:       0453
Authority key identifier: 9D:C5:95:C0:2B:88:16:C7:E3:F2:C1:14:22:58:5C:51:93:00:D1:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e9e4abea370f3c480263f6b769284e3b304bd76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e83a8d1f-dd0b-4510-940d-0eb37249e40e/191bb611e8a75d984bc675ffdf0af1a3a47cd066.roa
Signing time:             Thu 30 Sep 2021 21:06:18 +0000
ROA not before:           Thu 30 Sep 2021 03:00:00 +0000
ROA not after:            Fri 30 Sep 2050 03:00:00 +0000
asID:                     266767
IP address blocks:        181.191.36.0/22 maxlen: 24
                          2803:8fc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1107 (0x453)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9e4abea370f3c480263f6b769284e3b304bd76
        Validity
            Not Before: Sep 30 03:00:00 2021 GMT
            Not After : Sep 30 03:00:00 2050 GMT
        Subject: CN=191bb611e8a75d984bc675ffdf0af1a3a47cd066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:de:e4:34:be:3b:ef:f6:d5:7b:6b:02:2f:33:
                    c0:26:e7:e1:cf:f2:a3:88:7c:ec:07:d0:c8:44:a3:
                    0b:c8:76:be:99:dd:96:1f:d9:9f:5e:a3:5f:29:81:
                    bc:03:f5:b0:3d:f5:9b:b2:f2:eb:e3:11:04:7d:75:
                    d0:60:73:ef:f6:5c:95:d3:ce:16:a9:82:15:7c:ee:
                    02:bd:71:84:6a:aa:ab:ad:0a:41:e7:0c:d1:9b:6c:
                    0d:67:73:7b:50:04:08:db:01:be:bd:b8:60:f1:d0:
                    a8:0a:0b:d0:8b:ba:22:f2:c0:2d:a2:25:f3:61:2d:
                    6c:8c:43:05:55:1a:27:cf:a7:e9:a6:ef:63:2a:52:
                    9e:84:df:0a:c4:5c:87:37:3c:bb:10:ea:df:8d:da:
                    74:ad:58:63:6f:2e:ed:cf:18:15:a1:cd:94:9d:72:
                    c4:e4:e9:30:1d:4c:24:36:24:92:c1:f2:14:f0:8f:
                    92:42:ce:aa:3b:db:eb:f1:69:11:45:2a:e0:8a:9a:
                    56:11:40:89:76:bf:5f:79:32:f8:43:61:ec:02:5c:
                    9a:24:2a:cd:2b:d7:74:8f:b3:1d:6f:20:61:e8:a1:
                    f4:ac:ca:ab:bd:49:0e:a7:cf:4a:9d:b9:77:9c:43:
                    ca:1f:49:5f:b3:75:80:b4:ac:17:86:5f:4b:21:13:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E9:56:9C:74:9D:2D:C7:13:85:83:31:69:C0:9A:28:99:E8:72:D6
            X509v3 Authority Key Identifier:
                keyid:9D:C5:95:C0:2B:88:16:C7:E3:F2:C1:14:22:58:5C:51:93:00:D1:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e9e4abea370f3c480263f6b769284e3b304bd76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e83a8d1f-dd0b-4510-940d-0eb37249e40e/191bb611e8a75d984bc675ffdf0af1a3a47cd066.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e83a8d1f-dd0b-4510-940d-0eb37249e40e/6e9e4abea370f3c480263f6b769284e3b304bd76.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.36.0/22
                IPv6:
                  2803:8fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:78:77:c7:00:fe:bb:07:bc:c9:59:c3:91:bb:15:e8:c1:70:
         ba:8d:53:8b:40:ee:7f:f0:cf:25:7a:8d:86:5e:4e:3a:f8:67:
         37:39:dd:45:37:d3:63:81:6e:3a:95:54:5a:7b:d4:c8:ae:06:
         85:4c:32:91:a5:20:eb:8b:7b:af:31:67:29:b2:f3:15:17:43:
         89:0a:d8:38:ce:88:d7:13:73:49:3b:a0:0b:c5:33:a6:06:d3:
         be:7f:e8:cd:1a:aa:48:82:71:7d:d9:00:60:f1:94:ca:9f:fa:
         a2:82:91:81:14:1a:6b:64:c9:55:2d:84:7e:d6:da:5e:e8:ff:
         54:7b:ff:ba:ec:07:5a:3c:9a:0c:df:41:a9:50:41:51:39:74:
         be:5f:f1:62:0e:7f:38:80:67:59:ae:95:b8:f8:2b:61:3b:81:
         60:42:67:c9:d5:68:b4:86:c1:00:f2:0d:99:ee:4b:02:68:2f:
         4c:f2:60:d3:fb:c7:d3:82:2f:00:6e:c3:ca:44:1c:6d:84:3c:
         a6:5b:ec:d4:48:4b:aa:1d:57:3a:89:05:48:74:48:a4:c2:11:
         ff:e1:a9:95:14:4b:f6:34:ef:a8:c4:cb:f5:fc:d0:7b:22:da:
         a3:68:e8:53:40:fa:a0:66:b3:82:b4:8b:44:c5:6e:e4:1e:f9:
         08:60:99:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----