Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ff6c6bd2-fe78-4c60-85c1-322090cd95bf/2a1f2c491c592d22547c487f54fbab4b0b40af63.roa
File:                     2a1f2c491c592d22547c487f54fbab4b0b40af63.roa (raw, json)
Hash identifier:          l3LJtbrRv5Yw9+aM+NXZkuJ5453KCwnbvvAAQWr0VHo=
Subject key identifier:   FD:11:8D:E3:53:E9:05:A1:85:62:BA:7D:36:66:FF:6C:0A:C3:3C:AE
Certificate issuer:       /CN=ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0
Certificate serial:       10C9FF
Authority key identifier: 02:A5:56:3B:A0:72:3F:25:B5:F3:32:14:81:3D:C5:B9:9E:6D:7A:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ff6c6bd2-fe78-4c60-85c1-322090cd95bf/2a1f2c491c592d22547c487f54fbab4b0b40af63.roa
Signing time:             Mon 19 Sep 2022 16:49:37 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Fri 24 Mar 2023 03:00:00 +0000
asID:                     15236
IP address blocks:        148.213.0.0/18 maxlen: 18
                          148.213.112.0/20 maxlen: 20
                          148.213.128.0/19 maxlen: 19
                          148.213.160.0/19 maxlen: 19
                          148.213.64.0/20 maxlen: 20
                          148.213.80.0/20 maxlen: 20
                          148.213.96.0/20 maxlen: 20
                          148.213.127.0/24 maxlen: 24
                          148.213.208.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100287 (0x10c9ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2023 GMT
        Subject: CN=2a1f2c491c592d22547c487f54fbab4b0b40af63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:16:56:15:6f:03:dc:5f:e4:ea:c2:80:82:e3:
                    ab:09:b9:58:06:11:13:43:ce:98:1d:63:df:43:aa:
                    84:1c:cf:19:9b:7b:90:ec:79:bf:a9:53:65:75:f4:
                    ac:2d:a1:f0:dd:25:d0:ce:de:20:3b:8b:15:b3:31:
                    1e:8c:65:2c:09:f1:b7:05:22:6f:7f:fe:d3:44:c5:
                    6e:91:20:b1:e3:3a:24:2d:1c:a8:fc:d7:94:b2:70:
                    4a:b2:2b:48:d3:2c:0a:b3:eb:f8:b1:d3:5e:75:a0:
                    33:6d:9f:18:b2:c1:d0:5c:b1:f6:a0:2e:21:1f:97:
                    87:67:03:f5:dc:d4:b3:8c:37:a6:16:63:24:91:f6:
                    7f:c8:57:d8:63:8b:15:f1:e3:e6:f0:db:ce:44:8e:
                    3d:1f:00:e8:31:cc:6c:43:6d:76:2f:fb:7c:33:6b:
                    f2:89:14:03:65:f2:b5:91:c9:55:a3:a3:2e:96:7c:
                    bf:4e:da:be:89:c5:ba:d6:db:b8:33:1f:5f:57:70:
                    74:f6:72:de:91:cd:1f:d3:11:c4:e1:c5:62:5e:7a:
                    67:02:ca:1e:57:c7:ed:c1:4e:39:c0:8d:d2:7d:e9:
                    50:96:27:85:43:17:8a:f8:c4:bd:99:c8:6e:f2:01:
                    58:93:47:7e:d0:36:7d:05:8c:ad:5d:aa:d3:c2:11:
                    7b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:11:8D:E3:53:E9:05:A1:85:62:BA:7D:36:66:FF:6C:0A:C3:3C:AE
            X509v3 Authority Key Identifier:
                keyid:02:A5:56:3B:A0:72:3F:25:B5:F3:32:14:81:3D:C5:B9:9E:6D:7A:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ff6c6bd2-fe78-4c60-85c1-322090cd95bf/2a1f2c491c592d22547c487f54fbab4b0b40af63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ff6c6bd2-fe78-4c60-85c1-322090cd95bf/ac47c6b4a5cf5ccce546ba5c3b5d0ee96fec7dd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.0.0-148.213.191.255
                  148.213.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:df:56:b1:40:2d:42:7e:1b:db:75:cb:99:df:6f:60:8d:99:
         97:7a:78:a4:e9:da:e4:05:38:35:88:ee:eb:c5:88:47:02:49:
         a9:d7:4b:71:4f:7a:56:9c:3a:24:14:36:25:2f:05:7a:07:f4:
         63:ed:92:62:88:02:93:dc:eb:ce:3b:c1:b4:e5:73:ce:fc:85:
         1d:02:43:20:f4:c9:15:de:d3:66:ea:71:b0:6b:8b:27:13:12:
         6c:d1:f7:64:6c:ff:60:43:bd:1b:ff:c0:29:d2:a5:46:fa:83:
         4b:6d:54:e1:15:13:5c:c5:5c:aa:c4:86:9a:b8:ff:8e:84:c4:
         39:ac:38:38:b9:d4:5c:2e:fc:2e:79:5a:3a:67:7d:26:5a:18:
         b6:92:7d:17:3a:55:b1:62:f6:cb:01:cf:67:75:24:11:c3:72:
         d1:a0:36:5e:38:d5:f9:db:99:2c:70:98:b8:a5:94:c2:72:ab:
         14:72:d9:7c:65:8d:4e:95:f6:f9:60:b7:c0:07:0c:eb:df:d2:
         d4:65:5f:11:6a:91:19:9b:5c:2a:83:78:6b:e3:99:50:1f:a7:
         e5:d7:35:23:5f:2e:3a:45:50:c5:ff:2a:97:40:35:68:cb:ae:
         36:2e:ee:3d:52:b2:4f:e9:3d:d1:24:1b:47:b5:97:6f:35:64:
         0a:7f:12:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----