Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/f6befe39cd475a7bfce5e26dec7362ed305f44ca.roa
File:                     f6befe39cd475a7bfce5e26dec7362ed305f44ca.roa (raw, json)
Hash identifier:          StQEuK4HMC2AGbSIdvoNv5OetrC90pOKTDK24DbccIA=
Subject key identifier:   42:4E:53:C1:93:13:36:81:7D:55:9E:A3:83:55:77:9D:89:F5:30:3E
Certificate issuer:       /CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
Certificate serial:       0B8047
Authority key identifier: 08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/f6befe39cd475a7bfce5e26dec7362ed305f44ca.roa
Signing time:             Wed 24 Mar 2021 14:31:57 +0000
ROA not before:           Wed 24 Mar 2021 14:31:57 +0000
ROA not after:            Tue 24 Mar 2026 14:31:57 +0000
asID:                     42
IP address blocks:        170.210.180.0/24 maxlen: 24
                          2800:110:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753735 (0xb8047)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec9334789d4fb97b0c0aa483563906a5d69b4c2
        Validity
            Not Before: Mar 24 14:31:57 2021 GMT
            Not After : Mar 24 14:31:57 2026 GMT
        Subject: CN=f6befe39cd475a7bfce5e26dec7362ed305f44ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:22:be:e1:38:9b:68:88:cd:64:a9:80:3a:32:
                    7f:25:b9:ae:e0:91:e7:c5:42:a2:17:1d:cb:6b:ca:
                    3a:47:f0:b5:83:b2:2d:17:5f:5f:49:6c:b3:57:ba:
                    11:91:4c:70:a2:b8:dc:25:03:96:3e:dc:89:97:52:
                    0b:2e:09:04:39:c2:b0:1d:b6:af:a3:c5:97:63:e4:
                    94:bd:6a:0d:56:29:b9:43:e2:f6:a8:e5:91:02:06:
                    2d:62:c4:a2:a6:53:c0:e9:4a:3d:23:f8:73:ef:f4:
                    43:15:14:a0:cf:64:a2:03:2b:0d:35:05:84:e7:de:
                    8e:92:00:c2:1f:b1:d7:e5:98:80:d0:a1:85:f8:7b:
                    7f:4d:22:b6:0c:fb:6d:b0:bf:80:80:1a:55:4a:c2:
                    af:55:06:d5:c0:39:bc:98:b7:e2:a7:e4:f1:23:7b:
                    22:cb:3a:ee:a5:e7:50:ab:96:a3:f4:4d:cf:2d:ff:
                    35:15:47:eb:d8:00:50:28:0a:fc:72:20:c5:ec:48:
                    17:65:d6:7d:56:81:ae:1a:07:b6:d0:b8:72:86:f8:
                    d3:57:b5:27:1b:c4:b6:8c:c6:35:90:6e:ec:7d:8f:
                    0e:5a:53:c5:08:2c:e6:9a:f5:7a:29:56:15:36:b3:
                    29:2b:0b:36:1d:c1:e8:85:1e:0f:2d:b0:c9:05:7e:
                    66:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:4E:53:C1:93:13:36:81:7D:55:9E:A3:83:55:77:9D:89:F5:30:3E
            X509v3 Authority Key Identifier:
                keyid:08:91:AA:C4:91:82:BB:0E:06:78:FA:DA:78:35:8C:58:DF:34:5C:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec9334789d4fb97b0c0aa483563906a5d69b4c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/f6befe39cd475a7bfce5e26dec7362ed305f44ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f8d5be4d-e751-4c70-966b-cff5ed7bf5be/eec9334789d4fb97b0c0aa483563906a5d69b4c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.210.180.0/24
                IPv6:
                  2800:110:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:20:cb:75:30:70:7d:a0:49:64:eb:1c:d0:b2:a3:c4:f4:d6:
         1f:0a:02:48:73:aa:a0:08:48:51:42:73:73:26:ef:4b:b4:a9:
         33:9a:3d:97:1a:59:ed:6a:6d:ac:0b:03:1f:f9:32:87:9e:8f:
         52:ed:c4:a8:b1:be:29:42:13:0d:7d:ef:7b:56:15:c1:5c:63:
         8b:30:29:f3:69:ef:20:b7:f7:39:d5:5c:92:c6:03:81:65:18:
         bd:5d:3e:92:1f:5b:ff:49:4a:cc:a1:ca:c2:54:81:53:c6:f0:
         37:f6:c2:bf:2f:f1:cd:f1:95:26:3e:2a:e2:c8:07:58:dc:61:
         fa:bb:87:03:27:60:c9:02:1a:54:e3:09:85:68:dd:5c:b2:b9:
         da:3c:d9:07:8a:c3:0b:8b:c6:28:82:6d:78:1f:f6:79:36:e9:
         c7:3f:8c:6c:82:76:33:19:ec:6f:19:95:10:aa:b4:87:b5:c4:
         74:42:a5:aa:48:80:9d:77:6b:26:37:24:ad:b2:34:67:08:9a:
         b8:22:d2:55:f9:25:f7:37:5f:1b:b8:8e:71:4f:7c:a1:14:19:
         08:4f:1d:1b:a5:c8:28:ca:30:e3:4a:8c:bd:1d:24:39:21:ab:
         55:46:ac:e1:1b:f4:a7:58:af:3a:c3:8e:ba:82:77:18:13:74:
         a7:26:6e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----