Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/0c8f8dbbe0be9d2f3ebc20dc5038a5bdcc05ce7f.roa
File:                     0c8f8dbbe0be9d2f3ebc20dc5038a5bdcc05ce7f.roa (raw, json)
Hash identifier:          iWPw+g3Wo1t4eunhcRCG3JE4UQQhMteP9XPPCnH9TgE=
Subject key identifier:   BF:6D:2F:FE:D1:B1:6C:17:EF:80:18:77:7C:ED:F2:14:26:60:0D:37
Certificate issuer:       /CN=a8e12cca2129bde3aeb4d1487df86eba9960d067
Certificate serial:       17F814
Authority key identifier: E9:2B:09:39:E8:2A:A8:A4:6C:8E:8F:E1:58:E9:0D:A2:33:D7:97:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8e12cca2129bde3aeb4d1487df86eba9960d067.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/0c8f8dbbe0be9d2f3ebc20dc5038a5bdcc05ce7f.roa
Signing time:             Mon 08 Aug 2022 16:04:23 +0000
ROA not before:           Mon 08 Aug 2022 16:03:32 +0000
ROA not after:            Thu 08 Aug 2024 16:03:32 +0000
asID:                     266725
IP address blocks:        128.201.108.0/22 maxlen: 24
                          2803:d7c0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1570836 (0x17f814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e12cca2129bde3aeb4d1487df86eba9960d067
        Validity
            Not Before: Aug  8 16:03:32 2022 GMT
            Not After : Aug  8 16:03:32 2024 GMT
        Subject: CN=0c8f8dbbe0be9d2f3ebc20dc5038a5bdcc05ce7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ba:8b:13:14:4d:2c:41:54:e0:2e:e2:cb:b9:
                    c1:d4:80:58:af:ce:34:5c:c9:91:3d:25:ee:65:27:
                    f2:cc:41:1a:0f:03:b5:e8:11:9f:62:25:db:75:73:
                    3b:32:9c:df:f4:ec:78:15:de:d0:2f:ff:dc:56:de:
                    e1:04:c7:a6:11:05:88:af:68:be:26:72:a9:44:39:
                    21:7d:d9:fe:f4:ed:63:ac:89:03:b4:20:07:cd:fd:
                    33:3b:4f:e9:11:15:68:41:3d:8a:e6:f8:07:b5:f3:
                    c0:c5:45:5f:54:ce:70:f5:96:2c:57:0c:ad:db:0b:
                    9e:6a:d6:02:5a:ac:a5:8c:91:e6:e0:b6:5d:e1:9a:
                    6d:1a:ba:92:09:84:4b:04:a6:35:c1:71:9f:31:ce:
                    ff:18:e2:f7:ea:1d:43:55:f2:39:28:80:9c:44:f6:
                    52:ec:97:3e:e4:56:f8:83:bd:b2:fe:cd:32:71:1e:
                    1b:75:97:a6:69:56:3d:27:b0:0d:49:fa:ef:08:07:
                    e8:e0:bd:6a:e8:3d:81:9c:dc:98:74:fa:ea:45:10:
                    4a:5d:1a:33:04:cc:76:b9:dc:29:c7:77:7b:a8:6b:
                    be:f7:08:10:75:33:c3:de:ef:01:a9:64:46:c4:90:
                    c2:9c:60:66:c1:d6:20:bb:5b:ae:b4:25:8b:27:39:
                    18:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6D:2F:FE:D1:B1:6C:17:EF:80:18:77:7C:ED:F2:14:26:60:0D:37
            X509v3 Authority Key Identifier:
                keyid:E9:2B:09:39:E8:2A:A8:A4:6C:8E:8F:E1:58:E9:0D:A2:33:D7:97:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8e12cca2129bde3aeb4d1487df86eba9960d067.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/0c8f8dbbe0be9d2f3ebc20dc5038a5bdcc05ce7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/a8e12cca2129bde3aeb4d1487df86eba9960d067.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.108.0/22
                IPv6:
                  2803:d7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:e0:bd:a8:45:f4:2f:7d:85:99:01:b2:7a:87:b0:47:27:16:
         9b:a8:08:21:2e:fb:30:b3:b6:99:3c:9c:32:dd:17:98:76:bf:
         e1:17:82:81:36:19:9f:bb:ff:cf:46:1a:82:db:c1:b7:0b:ab:
         92:b4:7e:3a:fb:79:ee:b2:39:10:c1:d3:6b:cc:d3:0f:3a:ad:
         60:c1:20:5b:82:31:e5:44:fa:a7:b8:23:9d:9f:34:8d:77:76:
         8d:a5:99:2e:42:c9:ff:37:97:5a:e4:a7:00:0a:7e:fe:4d:e4:
         58:e3:7a:0f:12:e8:d7:65:3f:20:a2:a9:10:d3:04:7c:49:53:
         1e:57:7f:c1:e7:c1:24:b8:6b:de:40:a0:14:b8:5c:b6:ff:25:
         73:72:9f:f8:d6:0d:c0:c2:fc:f3:39:15:64:8b:00:38:a8:49:
         70:91:a8:88:9e:4b:b0:0f:85:c4:68:55:ae:e7:06:b4:99:fe:
         fe:91:d1:1f:d0:03:0e:cf:1f:ad:e1:16:d4:34:e0:72:6a:da:
         7a:f3:2a:05:63:43:31:75:a6:39:56:e7:8d:6e:2a:57:e2:a8:
         34:36:43:bc:a9:6e:e8:ac:eb:ba:a8:4b:36:1c:b0:e0:1f:2c:
         76:5a:b2:7d:95:72:0e:03:71:54:8e:2c:a8:7f:6c:7e:e4:ad:
         7c:59:20:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----