Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/63551bb5e12caf6b309f554aa65d9beea53cea7a.roa
File:                     63551bb5e12caf6b309f554aa65d9beea53cea7a.roa (raw, json)
Hash identifier:          r5tMgc2CchGwca4vk2qgLXS2FzpKOUQYRozdoX1ZXVY=
Subject key identifier:   07:55:91:5D:E9:65:E7:76:93:55:1B:F5:D0:65:DD:65:78:77:0D:F0
Certificate issuer:       /CN=2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa
Certificate serial:       0D3394
Authority key identifier: 9A:F1:12:EB:F0:F3:46:BA:1E:F5:B2:E8:11:86:CA:DE:8B:F0:BE:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/63551bb5e12caf6b309f554aa65d9beea53cea7a.roa
Signing time:             Wed 24 Mar 2021 14:39:30 +0000
ROA not before:           Wed 24 Mar 2021 14:39:30 +0000
ROA not after:            Tue 24 Mar 2026 14:39:30 +0000
asID:                     265629
IP address blocks:        170.239.204.0/22 maxlen: 24
                          2803:9cc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865172 (0xd3394)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa
        Validity
            Not Before: Mar 24 14:39:30 2021 GMT
            Not After : Mar 24 14:39:30 2026 GMT
        Subject: CN=63551bb5e12caf6b309f554aa65d9beea53cea7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:e1:6e:4c:4d:9e:ac:fa:39:b4:08:11:25:
                    a0:e5:70:8b:97:cc:54:4c:ae:17:0b:fe:e8:ab:73:
                    39:92:46:7b:7a:d6:88:ee:ab:af:43:cc:81:ff:a4:
                    0b:23:28:90:11:28:96:0c:30:f0:2a:f5:60:e9:0e:
                    68:c0:8b:b7:8e:ab:66:29:33:e5:06:df:34:9a:d4:
                    de:2a:27:fd:11:b4:59:2f:38:ac:ae:a8:88:a3:0e:
                    a0:5f:5e:fe:c0:4e:f0:31:0a:ee:5d:65:9b:30:3d:
                    7c:f0:97:a2:68:e7:da:7a:14:62:29:3c:df:80:46:
                    30:81:38:18:e1:da:e1:ba:b2:65:64:fd:47:a3:08:
                    b0:4c:5e:00:ac:d1:ef:4c:d7:4a:78:bc:55:a9:07:
                    8f:67:a8:70:a6:90:2c:d7:79:34:b8:8b:db:5c:43:
                    62:31:fd:18:11:e1:c3:55:49:67:5e:6f:1b:6e:1b:
                    7c:bd:f5:a0:28:e5:08:f0:e9:c3:b3:0a:92:f3:22:
                    75:a0:4d:7c:32:a4:7e:f2:dd:12:0f:9b:b1:02:a7:
                    39:34:71:6a:ef:cb:9f:8b:09:23:7a:c4:59:04:15:
                    60:45:67:80:c2:18:14:df:ff:f7:21:c1:e8:38:c7:
                    09:f1:cb:13:c3:20:66:03:5e:a7:ab:d9:3d:7b:bd:
                    f7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:55:91:5D:E9:65:E7:76:93:55:1B:F5:D0:65:DD:65:78:77:0D:F0
            X509v3 Authority Key Identifier:
                keyid:9A:F1:12:EB:F0:F3:46:BA:1E:F5:B2:E8:11:86:CA:DE:8B:F0:BE:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/63551bb5e12caf6b309f554aa65d9beea53cea7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f354b74b-ad48-4186-9ac0-6bd9ff1150c3/2c75336bff08d2cb62d7bc0f0f48b4aa404f0aaa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.204.0/22
                IPv6:
                  2803:9cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:54:0d:6f:bd:3a:ce:fc:8c:f1:ce:e0:9b:d1:e1:0a:7b:f1:
         60:0f:4b:ec:f8:24:4c:19:2a:d4:05:98:2b:7b:8c:14:72:d8:
         c4:9e:5b:0a:36:7b:f8:41:17:5d:8d:d3:f4:6a:98:80:c1:7c:
         e1:33:45:9b:2d:78:97:63:52:b0:0c:44:31:e2:d6:a3:d7:3b:
         6d:f4:58:61:3c:5a:f6:7f:84:d1:f3:f5:b9:8d:52:03:8f:b0:
         48:47:d1:93:ae:86:7b:e0:12:18:af:98:7e:4a:4f:c7:4e:45:
         cc:73:12:53:d7:e9:dc:1e:3c:3a:99:4d:ad:aa:5d:af:58:3e:
         60:0e:ec:fd:f8:33:5f:23:55:b7:ae:10:14:6f:33:c4:f9:0d:
         79:56:6f:cb:1c:cb:6d:9a:60:b6:f1:50:64:ff:6c:05:a5:4d:
         91:26:13:4a:0f:db:0a:de:4b:bb:38:b9:e9:ed:34:81:97:27:
         96:88:8c:96:94:87:d7:b6:9e:74:9e:de:35:da:67:47:b7:c0:
         be:2e:79:c2:8d:b1:0f:e6:ba:5a:45:9f:b1:bd:1a:b4:96:04:
         c6:48:c1:64:a6:fc:13:c2:d3:ea:ae:98:8e:c8:44:93:df:58:
         b8:e4:99:11:a6:0b:b7:7e:8c:f0:16:7a:a6:d9:9a:9d:f6:12:
         38:1f:6a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----