Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f81e7ede-c896-4679-a1ea-5539e38471e2/1675c63bc0f64e61336bdf39d952be8c209e5a34.roa
File:                     1675c63bc0f64e61336bdf39d952be8c209e5a34.roa (raw, json)
Hash identifier:          1JpMRr0qLVlxp7RSUzBe86jzAjpXfw/FqbgFV7Kt+eo=
Subject key identifier:   36:40:96:9A:1E:88:98:88:2C:11:28:13:45:81:14:98:3F:99:1B:B9
Certificate issuer:       /CN=f7557920befd2cb115a85e3e331f30ebd7d5004c
Certificate serial:       0D8E89
Authority key identifier: CE:F5:4C:B6:34:66:71:6B:0A:74:90:D8:C6:EE:C9:31:77:E2:B1:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7557920befd2cb115a85e3e331f30ebd7d5004c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f81e7ede-c896-4679-a1ea-5539e38471e2/1675c63bc0f64e61336bdf39d952be8c209e5a34.roa
Signing time:             Wed 24 Mar 2021 14:29:21 +0000
ROA not before:           Wed 24 Mar 2021 14:29:21 +0000
ROA not after:            Tue 24 Mar 2026 14:29:21 +0000
asID:                     262932
IP address blocks:        191.103.96.0/20 maxlen: 24
                          2803:ba80::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888457 (0xd8e89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7557920befd2cb115a85e3e331f30ebd7d5004c
        Validity
            Not Before: Mar 24 14:29:21 2021 GMT
            Not After : Mar 24 14:29:21 2026 GMT
        Subject: CN=1675c63bc0f64e61336bdf39d952be8c209e5a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1e:d7:28:cd:04:46:cf:cd:85:fe:95:94:b5:
                    f3:93:21:6d:ee:12:07:24:11:03:f7:4e:22:7e:40:
                    65:ee:86:67:06:b4:7a:e1:be:dd:fd:2f:14:3b:37:
                    6a:62:6c:d8:c8:4f:10:d3:7a:7b:75:e6:e7:4b:77:
                    4d:6b:15:dc:18:c5:ec:dc:01:b9:b0:27:ab:a8:54:
                    74:b4:bb:6b:c8:ce:e9:44:1b:1f:66:8c:bb:0e:51:
                    d3:74:c9:f4:11:da:52:9f:4a:39:bc:0e:77:45:99:
                    2f:3c:83:0c:d5:38:2e:e4:66:66:08:85:14:8e:98:
                    95:22:4b:40:ec:1e:8d:28:99:21:9e:6c:69:0b:e9:
                    5e:36:00:c1:39:8f:62:85:8d:6d:ee:1a:28:9d:4f:
                    5b:75:28:bb:44:5c:01:18:52:89:51:8f:e4:3a:6e:
                    cf:3b:97:2d:f2:a1:20:79:dd:0b:44:98:05:7e:68:
                    d2:4d:2f:81:c0:07:32:40:d5:23:b0:4a:2c:df:af:
                    1f:9e:ec:a1:78:fa:05:ba:7e:de:0f:66:7c:0a:02:
                    91:09:28:63:5a:9d:27:53:d1:8f:da:f5:c7:b7:db:
                    88:e8:02:61:83:55:aa:9c:03:93:7b:2c:c8:05:21:
                    d5:de:13:9d:2e:04:ff:0b:0e:71:26:cb:99:89:25:
                    74:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:40:96:9A:1E:88:98:88:2C:11:28:13:45:81:14:98:3F:99:1B:B9
            X509v3 Authority Key Identifier:
                keyid:CE:F5:4C:B6:34:66:71:6B:0A:74:90:D8:C6:EE:C9:31:77:E2:B1:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7557920befd2cb115a85e3e331f30ebd7d5004c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f81e7ede-c896-4679-a1ea-5539e38471e2/1675c63bc0f64e61336bdf39d952be8c209e5a34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f81e7ede-c896-4679-a1ea-5539e38471e2/f7557920befd2cb115a85e3e331f30ebd7d5004c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.103.96.0/20
                IPv6:
                  2803:ba80::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:7b:ec:e6:c0:f6:75:48:9d:f8:3f:86:06:f3:0f:c8:1a:f5:
         a3:20:ae:c2:4c:2b:f8:77:36:2e:45:4f:89:1d:ef:dc:f0:49:
         12:d0:70:05:1b:e6:f3:9a:e3:f8:d9:e4:dd:09:26:aa:9d:81:
         d8:f7:59:80:3b:bd:9e:5d:81:a4:76:af:1f:75:43:8d:77:f0:
         71:86:9a:4d:88:09:84:25:2a:3f:f2:b6:04:7c:7e:0d:22:f3:
         a8:13:12:cf:6d:0b:e4:8f:72:20:6d:e7:5c:10:73:34:91:7e:
         3c:3f:13:f0:89:b7:25:56:2b:27:6b:64:5b:a0:7c:de:fc:c0:
         d6:3f:e5:1c:1a:8b:68:7c:af:22:58:a9:45:f9:f6:f3:ed:c0:
         c8:c9:d6:b8:92:f8:73:9d:ba:36:1a:e2:91:54:93:33:60:3c:
         4c:53:a0:21:9e:fa:80:fd:94:38:8c:c5:d9:5e:ce:b9:95:1c:
         26:a2:19:d3:11:b3:5c:5d:4d:9b:94:dd:3a:f9:da:5e:72:b9:
         ea:4f:8f:e7:47:cf:48:f2:40:f8:1b:b8:0e:1f:34:14:6c:03:
         88:ee:b9:a5:62:17:a6:7a:67:be:a0:e2:14:de:22:2a:0e:5a:
         e3:37:b2:83:75:fc:bd:b0:4d:69:0c:53:34:aa:16:9f:cc:2a:
         c0:82:ab:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----