Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/4bf353e3112e5bd5564df5d5cd8a6a4bacc7fbbf.roa
File:                     4bf353e3112e5bd5564df5d5cd8a6a4bacc7fbbf.roa (raw, json)
Hash identifier:          a0kHN/4wWKCuZ5THq4SWLT/I8SAfEDW54E595kuJgxU=
Subject key identifier:   B6:89:1A:5F:9D:5E:C3:17:2B:1A:57:22:C1:FC:A1:31:BA:1D:23:9F
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       1A171F
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/4bf353e3112e5bd5564df5d5cd8a6a4bacc7fbbf.roa
Signing time:             Tue 08 Nov 2022 20:23:42 +0000
ROA not before:           Tue 23 Mar 2021 14:31:57 +0000
ROA not after:            Tue 24 Mar 2026 14:31:57 +0000
asID:                     52442
IP address blocks:        170.210.96.0/21 maxlen: 24
                          2800:110:1018::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1709855 (0x1a171f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Mar 23 14:31:57 2021 GMT
            Not After : Mar 24 14:31:57 2026 GMT
        Subject: CN=4bf353e3112e5bd5564df5d5cd8a6a4bacc7fbbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:cc:aa:8b:04:c4:fe:9c:bf:f3:4d:b9:71:97:
                    0e:85:a0:ea:a4:02:37:5b:39:cc:4e:90:be:85:0a:
                    c3:b3:46:eb:78:a8:d6:bb:e2:69:2b:6f:5d:78:40:
                    d2:97:6b:57:d8:7f:17:e2:78:30:98:9b:a3:d1:bd:
                    24:2c:b5:c6:04:43:a1:e1:84:21:2c:7d:c0:9f:5e:
                    10:1c:2c:53:ff:55:8c:0f:e9:c8:20:72:6b:9b:41:
                    f8:ed:2a:14:06:9d:7f:e0:17:b4:5d:13:f3:79:60:
                    a7:80:e6:36:56:2e:b8:27:1a:2f:57:ed:87:2b:e1:
                    da:e4:2c:85:d1:c6:65:13:f0:55:ec:2e:0e:d8:fc:
                    14:49:0e:68:6e:91:60:41:2f:07:b8:61:a0:dd:03:
                    c2:c4:c0:ae:c5:da:b3:4a:02:a2:39:da:52:60:97:
                    92:e9:19:9a:7d:9d:0a:01:a7:88:ff:3f:b0:af:4a:
                    22:4f:db:f9:62:44:8c:13:4a:09:c6:2d:1d:5b:14:
                    d3:18:02:0f:1d:61:2c:11:c7:54:37:6f:77:81:7a:
                    66:2d:c8:c0:fe:a4:55:b9:82:9a:42:ef:b0:e6:34:
                    1a:12:42:d9:1e:f2:d9:71:63:ac:a5:b4:13:46:2a:
                    2f:89:45:39:cd:5f:82:31:79:3a:88:d6:44:98:94:
                    0c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:89:1A:5F:9D:5E:C3:17:2B:1A:57:22:C1:FC:A1:31:BA:1D:23:9F
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/4bf353e3112e5bd5564df5d5cd8a6a4bacc7fbbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.96.0/21
                IPv6:
                  2800:110:1018::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:a0:b9:9f:a1:83:af:1a:03:a4:df:8c:7f:f5:e2:73:04:d6:
         88:18:d8:5d:13:ca:f9:39:50:b2:dd:48:62:ea:32:50:36:95:
         a4:61:3f:86:70:84:6f:c3:ab:2c:04:1f:b3:6f:cc:3e:b8:65:
         dd:fa:49:3b:d3:5f:c4:34:cd:9e:25:b0:7e:6b:00:87:46:ad:
         2a:6d:cd:d2:54:99:8c:d0:63:83:b0:55:b1:3b:6e:9e:9f:9d:
         e9:81:c6:a0:73:cc:3f:04:cc:b3:58:b1:97:31:0d:87:09:46:
         3f:cc:ab:de:5d:16:80:90:62:80:72:c8:3d:24:21:07:3d:0f:
         7d:45:74:4e:da:5e:2e:b4:cd:40:37:59:01:7d:11:7f:74:21:
         26:ec:d1:eb:23:24:01:e0:a6:94:60:52:da:73:35:60:b9:f5:
         98:d5:9a:b5:88:a9:90:5a:f2:6d:7b:da:ea:90:6a:18:51:3b:
         14:4d:f0:9e:fa:e8:27:6a:5a:d7:b6:87:ef:97:46:14:7a:d9:
         2d:3c:93:a6:c3:76:b1:c3:ef:d1:84:3c:3e:08:ca:e9:ee:1d:
         f0:6d:33:46:68:18:e0:e1:79:c7:ba:92:e0:7d:78:a2:41:87:
         c6:bf:40:c7:e3:34:93:bc:8a:07:c1:06:4d:a2:9a:39:82:61:
         c7:f1:3f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----