Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f99a0a2e-e1ba-4ae1-baa1-db925e16c72b/a2050b381630777f8fc1f5589d7ee4dc90dac237.roa
File:                     a2050b381630777f8fc1f5589d7ee4dc90dac237.roa (raw, json)
Hash identifier:          lQVt2rbmQ5zFVNoBgt4A6+1EDrJW9zUmA1y+vkJztj4=
Subject key identifier:   71:E0:03:F5:95:5D:7C:19:0D:A9:94:2B:26:C8:1E:88:1D:AE:42:01
Certificate issuer:       /CN=f03afcbfee5c0471b8510f9a21ac665a485757d2
Certificate serial:       033248
Authority key identifier: 3D:7B:96:3B:73:4F:77:0A:4E:17:DE:31:E3:B2:61:0A:8E:53:A5:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f03afcbfee5c0471b8510f9a21ac665a485757d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f99a0a2e-e1ba-4ae1-baa1-db925e16c72b/a2050b381630777f8fc1f5589d7ee4dc90dac237.roa
Signing time:             Wed 24 Mar 2021 14:28:57 +0000
ROA not before:           Wed 24 Mar 2021 14:28:57 +0000
ROA not after:            Tue 24 Mar 2026 14:28:57 +0000
asID:                     52428
IP address blocks:        170.238.240.0/22 maxlen: 24
                          200.115.48.0/20 maxlen: 24
                          2803:1900::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209480 (0x33248)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f03afcbfee5c0471b8510f9a21ac665a485757d2
        Validity
            Not Before: Mar 24 14:28:57 2021 GMT
            Not After : Mar 24 14:28:57 2026 GMT
        Subject: CN=a2050b381630777f8fc1f5589d7ee4dc90dac237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:41:75:9e:b1:d0:c8:ea:6a:99:3e:26:21:45:
                    77:a8:24:d6:09:e0:7c:87:5b:20:6b:a0:bd:7f:10:
                    8d:24:ea:b2:64:55:fa:03:0c:cd:f7:61:d0:dc:84:
                    6e:57:63:35:cf:7b:8a:cf:70:07:43:ea:db:f6:fd:
                    63:08:86:ae:ea:ca:da:5a:84:3e:f3:7c:c7:45:23:
                    b7:7a:5a:cb:00:3a:a0:da:dc:3f:14:c1:86:61:0e:
                    72:d4:6a:d9:79:fb:41:4f:87:25:21:36:b4:06:01:
                    e6:31:cc:52:f5:31:e0:45:3b:2a:1d:4a:0c:71:20:
                    22:92:ea:d2:21:13:57:17:e6:1f:83:f2:24:c7:6d:
                    27:47:fb:31:bb:cb:6b:90:2b:e2:6e:7d:9c:c4:8e:
                    7d:f3:25:7a:b2:ef:f2:08:76:da:85:75:17:e0:0c:
                    64:13:a8:c8:68:c1:3e:71:94:c2:59:dd:0d:a6:cb:
                    d8:ff:b5:5f:00:a8:c4:08:55:84:df:ba:9e:dd:de:
                    ed:ec:e8:ba:19:c1:6d:a7:7a:0b:d4:d5:34:d2:7a:
                    a6:c1:01:4c:c6:86:9e:ce:f6:e3:ec:6e:1f:e5:38:
                    8a:40:a9:b2:5d:ef:26:71:d9:65:27:94:85:3b:ae:
                    5c:09:46:5a:00:0d:dc:5c:45:68:8d:1d:7d:dd:2d:
                    1d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E0:03:F5:95:5D:7C:19:0D:A9:94:2B:26:C8:1E:88:1D:AE:42:01
            X509v3 Authority Key Identifier:
                keyid:3D:7B:96:3B:73:4F:77:0A:4E:17:DE:31:E3:B2:61:0A:8E:53:A5:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f03afcbfee5c0471b8510f9a21ac665a485757d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f99a0a2e-e1ba-4ae1-baa1-db925e16c72b/a2050b381630777f8fc1f5589d7ee4dc90dac237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f99a0a2e-e1ba-4ae1-baa1-db925e16c72b/f03afcbfee5c0471b8510f9a21ac665a485757d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.240.0/22
                  200.115.48.0/20
                IPv6:
                  2803:1900::/32

    Signature Algorithm: sha256WithRSAEncryption
         56:f3:7c:5f:9a:5b:e4:d3:c2:fc:2f:37:cc:a7:9f:f1:df:da:
         52:17:6f:7b:32:cb:e7:46:53:f4:ab:07:22:c9:80:3f:40:e0:
         8c:26:e3:4c:7c:2e:36:8d:c4:1c:01:08:00:b5:27:a3:e1:cc:
         b7:81:a4:c0:b6:73:7d:3e:30:b9:3b:23:0c:64:46:9c:88:9c:
         7d:87:49:09:59:ce:6d:6a:4d:93:8e:c2:ea:a0:80:01:74:38:
         4e:7c:71:e3:6b:4c:ba:bc:2b:f4:62:79:7b:5f:a8:02:9a:2b:
         37:a4:45:12:3d:90:55:b2:9b:37:3b:a1:fb:f1:a3:50:61:ae:
         d3:34:a1:99:ca:9c:c5:59:b9:69:14:54:06:ca:d8:6f:58:c2:
         7c:1a:82:ed:9f:e5:4c:65:6a:4e:4b:45:0b:1f:b2:af:6b:a9:
         98:6c:b9:55:6f:4e:d8:51:11:15:87:8b:f3:e0:2a:cb:4f:ca:
         f0:fb:bc:5d:70:cf:75:83:02:52:72:63:ea:c1:56:22:f0:92:
         a9:74:ee:e4:ce:90:72:d1:ff:2b:cd:06:93:97:d2:5e:cd:38:
         bd:1c:8d:ae:66:76:ba:bf:77:70:97:f7:66:89:d5:8e:59:a1:
         19:39:bc:ea:40:ee:df:07:a4:b4:16:67:58:33:7c:d6:45:5e:
         59:c0:d1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----