Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/efe138af-5aa9-475f-8a06-2fb603587a83/7962ea7bbf00195edbf62a8b67b89f0944bfb80d.roa
File:                     7962ea7bbf00195edbf62a8b67b89f0944bfb80d.roa (raw, json)
Hash identifier:          mPiiVDKkEHWXNFlHvPCbc3YjWgDrjoS7HbkhFpRSAWQ=
Subject key identifier:   EA:86:9F:B3:FE:E8:A8:7D:D0:DE:8A:7B:95:76:67:E9:8D:44:2A:43
Certificate issuer:       /CN=c62b0067bc875d5edcef5d88dd78683a8f95223e
Certificate serial:       0C260D
Authority key identifier: 02:31:4C:2F:02:E7:99:DB:D0:D2:EA:1B:11:45:7C:57:8F:52:EB:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c62b0067bc875d5edcef5d88dd78683a8f95223e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/efe138af-5aa9-475f-8a06-2fb603587a83/7962ea7bbf00195edbf62a8b67b89f0944bfb80d.roa
Signing time:             Wed 24 Mar 2021 14:42:51 +0000
ROA not before:           Wed 24 Mar 2021 14:42:50 +0000
ROA not after:            Tue 24 Mar 2026 14:42:50 +0000
asID:                     264828
IP address blocks:        170.80.248.0/22 maxlen: 24
                          2801:17:5000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796173 (0xc260d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62b0067bc875d5edcef5d88dd78683a8f95223e
        Validity
            Not Before: Mar 24 14:42:50 2021 GMT
            Not After : Mar 24 14:42:50 2026 GMT
        Subject: CN=7962ea7bbf00195edbf62a8b67b89f0944bfb80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:80:ae:0c:e6:4a:73:df:90:d5:e9:9b:24:00:
                    c8:39:2a:8f:ee:a7:2a:42:44:8a:28:b9:58:47:2b:
                    ac:ee:a1:f2:7a:f7:5d:ab:7d:dd:95:2c:b2:f6:99:
                    55:7f:14:cf:ca:16:66:33:66:48:67:7f:03:0e:51:
                    f2:44:f0:73:60:14:43:ac:4d:b3:79:43:32:55:4d:
                    79:58:7f:17:b7:18:d5:dd:66:b0:6d:c6:68:d2:c1:
                    98:6b:1d:cf:3c:90:6d:4e:05:fd:64:d1:c0:47:3c:
                    96:bb:3d:d8:8a:30:ac:d2:9d:50:09:03:8e:17:4f:
                    ba:76:5c:c2:fa:ed:3a:9b:94:26:6f:d5:54:21:b3:
                    3e:ee:1a:9e:1a:cf:15:be:4f:f4:f1:a1:a0:36:b9:
                    fb:ac:f8:29:63:1d:20:b1:20:f4:74:9b:f5:56:3c:
                    f7:3d:e8:62:73:19:bb:92:be:9b:ec:23:11:9d:b3:
                    4a:70:b3:76:12:e6:00:90:06:51:57:99:d4:28:7c:
                    b5:1e:55:3e:16:05:37:c7:bd:19:c0:b3:5a:f7:80:
                    f4:a7:e6:f8:25:dd:ec:f1:e2:96:e3:0d:1d:5f:a3:
                    43:bf:ca:db:47:cb:67:5c:9b:80:ef:36:2b:16:c5:
                    32:27:c7:ba:27:83:ad:7f:57:0e:a7:c8:33:04:49:
                    f0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:86:9F:B3:FE:E8:A8:7D:D0:DE:8A:7B:95:76:67:E9:8D:44:2A:43
            X509v3 Authority Key Identifier:
                keyid:02:31:4C:2F:02:E7:99:DB:D0:D2:EA:1B:11:45:7C:57:8F:52:EB:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c62b0067bc875d5edcef5d88dd78683a8f95223e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/efe138af-5aa9-475f-8a06-2fb603587a83/7962ea7bbf00195edbf62a8b67b89f0944bfb80d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/efe138af-5aa9-475f-8a06-2fb603587a83/c62b0067bc875d5edcef5d88dd78683a8f95223e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.248.0/22
                IPv6:
                  2801:17:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:ba:de:a2:b8:53:02:32:3f:6d:77:b0:56:79:1b:c6:72:fc:
         50:98:db:e7:8a:eb:35:a9:67:cc:3a:05:11:7b:e5:ad:ad:0b:
         6c:09:1b:f2:0f:05:44:43:4a:6d:cb:36:c5:73:7a:24:e0:26:
         05:ca:4a:43:d4:2a:11:9f:b6:5c:1f:ed:e2:52:0e:31:67:06:
         3f:c1:95:8e:38:63:05:9b:eb:bc:9c:70:02:01:77:06:b4:7c:
         93:22:98:e5:d2:82:cd:a5:b8:6e:d3:ee:09:f6:66:49:e0:a0:
         74:98:f3:fe:df:20:e5:27:a4:51:a5:6f:87:ee:10:01:85:77:
         e0:11:ed:ff:e2:b5:8c:61:64:bd:2e:4d:4e:42:d0:60:3d:ba:
         fd:8b:86:6e:4d:cb:0c:6b:0b:19:45:bb:ed:5f:d1:27:66:16:
         30:28:c8:8b:9e:08:be:08:68:f5:c9:a5:47:0d:63:35:3e:82:
         0a:ce:69:37:58:57:88:80:01:01:5f:ee:9d:fb:5c:2d:2f:c0:
         b8:65:d4:d7:54:f4:56:ea:11:16:ae:d9:8f:98:9a:c1:29:66:
         e1:3e:17:25:08:2c:41:59:a6:1c:a5:58:6a:00:74:5f:93:16:
         17:a9:66:a0:a0:d2:79:21:82:d8:d4:ae:5e:db:2e:2a:1a:17:
         8d:51:33:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----