Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/fd4b51ec0ce077965de606b41675f778c05f731b.roa
File:                     fd4b51ec0ce077965de606b41675f778c05f731b.roa (raw, json)
Hash identifier:          Kgf0iA57FWIjeT50/CmCnDhVM3sSUxl9uPdeuc0TPzs=
Subject key identifier:   8F:8E:A8:FF:47:8F:74:E3:D5:F8:65:63:DA:F2:78:70:CF:92:3E:DE
Certificate issuer:       /CN=a8e12cca2129bde3aeb4d1487df86eba9960d067
Certificate serial:       156E4A
Authority key identifier: E9:2B:09:39:E8:2A:A8:A4:6C:8E:8F:E1:58:E9:0D:A2:33:D7:97:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8e12cca2129bde3aeb4d1487df86eba9960d067.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/fd4b51ec0ce077965de606b41675f778c05f731b.roa
Signing time:             Tue 26 Apr 2022 15:22:20 +0000
ROA not before:           Tue 26 Apr 2022 03:00:00 +0000
ROA not after:            Tue 26 Apr 2044 03:00:00 +0000
asID:                     265771
IP address blocks:        128.201.108.0/22 maxlen: 24
                          2803:d7c0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404490 (0x156e4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a8e12cca2129bde3aeb4d1487df86eba9960d067
        Validity
            Not Before: Apr 26 03:00:00 2022 GMT
            Not After : Apr 26 03:00:00 2044 GMT
        Subject: CN=fd4b51ec0ce077965de606b41675f778c05f731b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0e:ce:ec:46:ab:6d:67:ee:74:9b:4c:ee:c3:
                    30:6c:b1:b1:ff:0c:88:a1:60:6c:90:ef:82:e5:28:
                    96:e6:af:66:fc:af:1b:9d:5a:ec:59:06:61:e4:4c:
                    80:e2:ec:f9:59:45:46:a1:50:60:84:f3:d5:a8:85:
                    b4:69:e8:6b:d7:51:a9:45:38:e1:c6:06:fa:0e:bd:
                    f8:5e:67:a5:4e:36:d6:09:b0:2d:8f:16:36:29:a6:
                    3b:ac:6f:c4:e0:5d:8c:a8:63:fd:ce:c6:2b:05:ef:
                    c4:88:41:90:27:66:9e:99:02:db:7d:fe:30:d0:d6:
                    1d:92:06:64:cf:45:31:90:75:4e:77:ce:e5:8c:49:
                    58:66:1d:84:da:7c:6f:19:b6:01:18:be:a8:2f:19:
                    6b:4c:ae:87:51:c1:9e:c1:e0:39:2f:0d:17:f4:3e:
                    e6:c2:e1:8f:14:20:43:52:3f:12:52:dd:4f:66:8e:
                    71:ce:5e:29:91:23:43:eb:f3:3d:80:bf:52:57:cb:
                    0f:71:e4:53:19:41:cb:96:bc:97:bf:c2:01:8f:67:
                    40:18:02:bd:e5:45:d8:70:3e:91:84:f7:60:dc:6c:
                    d3:87:23:f7:5c:b5:b1:35:25:62:50:30:a8:9d:b4:
                    40:c3:64:05:3e:e2:7f:95:41:8a:c8:06:27:79:eb:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:8E:A8:FF:47:8F:74:E3:D5:F8:65:63:DA:F2:78:70:CF:92:3E:DE
            X509v3 Authority Key Identifier:
                keyid:E9:2B:09:39:E8:2A:A8:A4:6C:8E:8F:E1:58:E9:0D:A2:33:D7:97:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8e12cca2129bde3aeb4d1487df86eba9960d067.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/fd4b51ec0ce077965de606b41675f778c05f731b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9f5646e-3303-4eb1-80a2-dbecc5d9359b/a8e12cca2129bde3aeb4d1487df86eba9960d067.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.108.0/22
                IPv6:
                  2803:d7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:3e:e8:a7:16:41:f3:06:54:81:a6:31:b8:b5:f0:af:30:22:
         b7:ce:5c:d3:b0:7d:79:ad:5c:ee:cf:97:99:e1:d6:04:df:d6:
         87:c9:8f:98:62:0c:f1:7e:1a:ef:1d:18:88:58:e7:3a:72:8d:
         01:ec:54:e9:d7:6c:3c:75:62:68:fe:1c:61:c0:19:59:36:3a:
         8d:60:42:85:4f:eb:77:d2:50:03:ea:4e:65:de:f3:43:13:b3:
         ab:e8:a3:c8:c0:a2:97:2e:f1:ad:25:d7:43:4f:bc:ff:2a:cb:
         8f:cd:ae:90:af:b6:93:c8:fb:fd:0e:03:cf:d5:01:18:d2:a9:
         be:7c:6e:bf:69:1d:36:22:a3:5c:bd:23:2e:ea:bc:0c:7a:d6:
         9f:22:cc:db:b0:ec:e9:b5:64:df:9e:c0:4d:b0:2c:43:be:81:
         ce:0e:61:53:db:9c:72:e0:33:a3:ea:a6:95:06:30:f9:6e:28:
         7c:e8:54:32:21:e2:8c:f4:37:05:ba:8e:83:20:52:de:b4:ea:
         65:58:cb:61:cc:a2:42:9f:b4:2a:72:52:e0:5b:e0:1f:72:c5:
         a2:c3:4b:6c:95:8a:4b:66:b5:db:a1:72:29:c7:2d:7e:dc:c4:
         38:2a:f6:0d:09:ed:b9:ae:32:86:03:6a:34:2d:a8:9e:dc:1c:
         28:81:24:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----