Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/16c39061dbf999e0dc6b31cd473733f14cccbb07.roa
File:                     16c39061dbf999e0dc6b31cd473733f14cccbb07.roa (raw, json)
Hash identifier:          D1tRNN02y0MCYM+cSnTf2GuihO7e9ngUverYpV2EVwM=
Subject key identifier:   A9:B3:F6:58:D0:23:A0:3A:4C:D0:D4:1F:95:B8:A8:51:B6:CF:1D:27
Certificate issuer:       /CN=b7f1296c01cda2bce364cd2e1662759a0dfc92bd
Certificate serial:       0D860C
Authority key identifier: CB:8E:5F:B1:CF:1C:FC:20:81:36:1B:EB:51:E0:A2:36:F6:EB:87:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/16c39061dbf999e0dc6b31cd473733f14cccbb07.roa
Signing time:             Wed 24 Mar 2021 14:37:26 +0000
ROA not before:           Wed 24 Mar 2021 14:37:26 +0000
ROA not after:            Tue 24 Mar 2026 14:37:26 +0000
asID:                     23456
IP address blocks:        170.84.108.0/22 maxlen: 24
                          200.192.236.0/22 maxlen: 24
                          2803:980::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886284 (0xd860c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f1296c01cda2bce364cd2e1662759a0dfc92bd
        Validity
            Not Before: Mar 24 14:37:26 2021 GMT
            Not After : Mar 24 14:37:26 2026 GMT
        Subject: CN=16c39061dbf999e0dc6b31cd473733f14cccbb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:c0:ce:3a:48:3b:fd:18:0e:9f:e6:62:3c:
                    38:ff:6a:d9:6e:04:b4:21:09:5c:a6:fc:dd:d2:bc:
                    85:9b:53:a9:2f:13:18:e2:3e:07:f9:c5:67:72:65:
                    d1:23:89:a5:44:f4:d2:66:a2:90:6e:68:10:05:92:
                    28:2a:64:ff:a6:26:a9:0f:2e:32:c9:bd:8a:a2:fd:
                    1e:94:e4:1c:01:77:f2:55:4d:f4:e2:6b:f4:62:14:
                    95:0c:32:ad:41:09:fc:06:6c:8c:02:e2:5d:a8:ad:
                    90:18:b4:fd:00:c5:4b:00:64:a4:14:f7:5c:f6:28:
                    6c:2a:22:23:12:c9:c6:92:a0:7e:62:02:7d:a3:7b:
                    51:c4:6a:f7:29:54:53:21:ca:32:0a:45:e0:ec:43:
                    44:2c:ee:e2:45:3d:e1:2d:95:2e:68:c3:b4:be:a8:
                    35:32:d2:b8:8e:3b:95:1e:cd:60:32:c5:bf:ed:b8:
                    ce:91:8c:dc:d9:e5:bf:a5:58:43:00:b3:29:2d:09:
                    aa:5f:57:0c:26:88:83:6c:33:b4:08:2b:0f:de:38:
                    06:09:e3:fd:a8:87:2b:7e:be:7e:bd:ab:0e:6e:12:
                    04:40:69:12:54:f6:40:94:0e:41:68:fc:c2:5a:8c:
                    3a:9a:a6:ca:70:d2:a2:c1:75:35:2a:03:06:b5:f1:
                    7e:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B3:F6:58:D0:23:A0:3A:4C:D0:D4:1F:95:B8:A8:51:B6:CF:1D:27
            X509v3 Authority Key Identifier:
                keyid:CB:8E:5F:B1:CF:1C:FC:20:81:36:1B:EB:51:E0:A2:36:F6:EB:87:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/16c39061dbf999e0dc6b31cd473733f14cccbb07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.108.0/22
                  200.192.236.0/22
                IPv6:
                  2803:980::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:18:0e:58:ec:eb:86:15:74:8e:75:85:36:2d:59:f7:9c:b0:
         e9:00:af:3f:62:e8:c7:ac:0a:34:59:20:8c:c2:8d:45:b6:3c:
         65:76:f9:1b:f6:7d:3e:b7:87:85:5a:7e:b4:45:90:cc:20:9a:
         f3:99:ba:64:cc:d9:9f:08:d8:22:a5:d1:be:a8:5b:2f:81:bc:
         53:ed:c5:85:97:c2:c2:b9:4e:be:75:e7:2b:e8:45:19:a7:b9:
         66:6a:31:32:4a:31:2a:e3:60:ef:e5:50:77:00:29:59:83:74:
         45:5e:e0:09:52:ee:ba:1d:51:41:b1:d1:6c:6c:77:dc:53:db:
         8f:d7:06:9e:72:84:d4:9e:56:58:02:ec:8c:6a:b2:25:f9:5f:
         c1:d2:18:f9:db:c9:65:64:d7:97:b0:04:ba:b9:14:b6:09:fa:
         78:f1:f5:13:5d:8a:2e:16:4d:53:de:0e:6c:63:2a:84:8a:29:
         b2:1b:92:35:78:3c:22:52:bf:56:f6:15:a8:91:d5:c4:00:7f:
         67:04:b0:22:52:25:95:84:66:1b:c5:e5:a7:95:7d:23:53:2f:
         f0:29:db:cf:ff:d8:25:3f:54:47:74:0d:fb:f9:a3:1b:55:3c:
         b0:07:d2:81:46:64:2c:27:3d:cb:ab:69:ef:6b:4b:ab:c0:ba:
         66:7b:b1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----