Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/75a2b201b45a8924e13b2f310ff02a9627fe2a2a.roa
File:                     75a2b201b45a8924e13b2f310ff02a9627fe2a2a.roa (raw, json)
Hash identifier:          HGbQMaPf6Zr2CfNNQKNNXkTu8I2GAWx70RylQUzGVeY=
Subject key identifier:   FD:BE:78:B0:95:E6:EE:F3:14:23:4F:8E:89:26:A1:09:35:9C:EC:87
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       15D458
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/75a2b201b45a8924e13b2f310ff02a9627fe2a2a.roa
Signing time:             Tue 25 Jan 2022 15:47:31 +0000
ROA not before:           Tue 25 Jan 2022 03:00:00 +0000
ROA not after:            Thu 25 Jan 2024 03:00:00 +0000
asID:                     28075
IP address blocks:        198.12.56.0/24 maxlen: 24
                          2803:6604::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430616 (0x15d458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Jan 25 03:00:00 2022 GMT
            Not After : Jan 25 03:00:00 2024 GMT
        Subject: CN=75a2b201b45a8924e13b2f310ff02a9627fe2a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:16:0a:ec:e5:8e:03:b5:de:c3:f3:1b:4c:86:
                    4a:c4:f2:6a:02:60:63:e6:42:ca:59:85:fb:9e:d9:
                    9a:93:b0:c9:1e:12:34:c0:be:eb:3e:98:35:1d:66:
                    1e:33:68:65:e6:31:bd:28:8c:05:57:02:1e:46:3f:
                    fe:89:d6:b0:18:95:5e:58:e0:c8:0d:ae:e6:6b:ff:
                    da:42:c3:5e:2f:0e:1b:99:d2:b3:03:fc:23:13:9a:
                    20:6b:99:28:6c:95:75:86:fb:13:81:0c:4b:60:a0:
                    30:a3:ed:30:d9:d8:f2:43:0e:69:c8:24:58:06:10:
                    30:d6:b4:fd:16:7e:e0:29:d7:c8:1f:1e:ae:d0:66:
                    2e:54:1f:a1:c7:d4:cd:06:c6:d3:a8:0b:74:9f:3a:
                    45:d8:16:6b:8a:0d:05:49:65:b5:47:d3:e6:d5:89:
                    64:bd:f5:5d:fc:c2:7c:26:78:5d:2d:98:5b:fe:88:
                    79:04:2f:48:91:6a:db:99:56:42:89:1b:0a:99:22:
                    6b:c3:8d:ca:0a:24:29:fe:a0:be:01:0c:f8:4e:2f:
                    0e:83:2a:56:e6:7f:f2:2d:ea:9a:5f:25:80:3d:f2:
                    f3:43:67:2b:2e:44:f6:5c:c1:b4:e3:80:95:33:c6:
                    8a:c1:32:1d:22:bc:ea:1a:f8:e8:47:6d:4c:61:fb:
                    3c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:BE:78:B0:95:E6:EE:F3:14:23:4F:8E:89:26:A1:09:35:9C:EC:87
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/75a2b201b45a8924e13b2f310ff02a9627fe2a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.56.0/24
                IPv6:
                  2803:6604::/35

    Signature Algorithm: sha256WithRSAEncryption
         31:4e:28:52:23:6f:01:1d:ce:25:78:88:bf:79:af:42:4d:e2:
         9a:34:f5:a4:e8:10:8f:6a:c9:90:4a:f6:4d:01:7b:f2:c2:ed:
         23:e8:86:49:00:19:b1:45:ae:ee:31:58:01:14:f6:11:ac:71:
         ca:98:71:a5:31:20:ed:b2:e8:50:7f:b6:fc:48:a2:c7:f0:df:
         a6:37:a9:80:94:66:d1:83:c6:f5:76:7e:f3:2b:90:28:9b:8a:
         cb:7d:98:a9:fc:43:7a:36:26:75:9a:26:3d:22:5a:19:37:c6:
         cb:d3:04:4f:7f:37:32:67:cc:2b:3c:e0:37:53:de:20:4d:c2:
         d2:60:a5:65:33:2f:f7:a9:c7:d1:01:81:37:8f:13:2f:e8:8a:
         6e:53:6d:0e:18:e4:c2:44:a1:7c:c9:af:0f:21:10:3d:2c:fb:
         5b:b7:af:18:f6:6f:4c:c6:b2:6e:7f:7a:db:84:ff:40:4e:88:
         83:74:c6:5c:01:09:8b:76:38:36:22:cc:4e:db:2b:8d:5c:44:
         b0:b9:ca:d1:4d:2a:6c:4d:fd:99:34:90:87:2b:35:d5:e2:88:
         4e:c3:5c:80:24:66:82:19:30:c1:ce:b7:f4:51:b5:6a:fd:72:
         48:33:0a:16:f6:59:35:67:d5:30:88:b6:5b:c6:21:d3:0b:d9:
         74:a2:03:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----