Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/790323fb33ee31743c58b1e5cf3f9beec79f343f.roa
File:                     790323fb33ee31743c58b1e5cf3f9beec79f343f.roa (raw, json)
Hash identifier:          k1C2xKrYXO50r8Tgw6JBX4xENXBnMFg44WTwTb4ZHvM=
Subject key identifier:   FA:CD:EE:9D:48:AA:0B:7C:F6:96:6C:3D:30:EC:73:82:02:A3:46:F7
Certificate issuer:       /CN=5d8acf86c4ef1439f1fcdd22154481d770578f01
Certificate serial:       0D4AE4
Authority key identifier: 5B:14:12:EF:1D:15:77:FE:F4:9D:AB:8F:5A:81:C9:B2:01:96:A9:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d8acf86c4ef1439f1fcdd22154481d770578f01.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/790323fb33ee31743c58b1e5cf3f9beec79f343f.roa
Signing time:             Wed 24 Mar 2021 14:38:05 +0000
ROA not before:           Wed 24 Mar 2021 14:38:05 +0000
ROA not after:            Tue 24 Mar 2026 14:38:05 +0000
asID:                     27725
IP address blocks:        200.14.48.0/21 maxlen: 21
                          2800:910::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871140 (0xd4ae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8acf86c4ef1439f1fcdd22154481d770578f01
        Validity
            Not Before: Mar 24 14:38:05 2021 GMT
            Not After : Mar 24 14:38:05 2026 GMT
        Subject: CN=790323fb33ee31743c58b1e5cf3f9beec79f343f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:eb:ad:60:a5:e4:2a:44:f3:64:f5:0b:d8:af:
                    86:82:e8:5d:2d:96:ac:45:8d:36:6c:ab:5b:d0:4f:
                    ca:0d:79:b2:ea:76:b1:2f:01:98:0d:51:86:b4:bf:
                    91:e7:a1:d5:01:23:0e:d4:a5:b6:5a:73:55:4c:0e:
                    7e:34:ae:2f:89:b8:06:0e:03:65:27:76:5c:ef:67:
                    22:20:32:b9:96:75:e8:80:21:b2:87:29:13:61:4f:
                    87:0e:74:f0:a0:a5:b5:fc:89:b4:a5:55:94:1d:e9:
                    c5:9d:b1:97:f8:cd:3f:3a:1c:2b:87:98:71:86:2d:
                    6a:76:0d:c6:32:e9:1b:2e:ba:99:c6:40:59:ba:74:
                    42:5d:84:7e:d7:2a:6b:c2:c7:d5:ee:c0:ee:b5:11:
                    8f:37:b0:3a:3a:3f:d4:76:d2:9b:ab:68:c1:2c:fc:
                    5a:04:a7:e1:9d:bc:a6:b5:c2:45:a8:6a:67:3c:5d:
                    34:3e:82:d2:4d:cd:bc:0d:47:ca:2b:63:20:07:cb:
                    97:4e:d2:74:cd:c1:1b:ce:ad:d7:fd:00:e0:02:87:
                    a3:c0:ee:30:f7:85:d6:a2:e3:89:a1:88:d2:f1:ba:
                    67:2a:e0:30:1d:e0:6c:a0:d7:63:65:4b:79:dc:54:
                    aa:de:dd:d8:2d:1b:07:f5:59:7b:ce:a2:67:e6:67:
                    64:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CD:EE:9D:48:AA:0B:7C:F6:96:6C:3D:30:EC:73:82:02:A3:46:F7
            X509v3 Authority Key Identifier:
                keyid:5B:14:12:EF:1D:15:77:FE:F4:9D:AB:8F:5A:81:C9:B2:01:96:A9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d8acf86c4ef1439f1fcdd22154481d770578f01.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/790323fb33ee31743c58b1e5cf3f9beec79f343f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e3cc602c-3003-4d9c-b2a9-57d6dbe15a76/5d8acf86c4ef1439f1fcdd22154481d770578f01.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.48.0/21
                IPv6:
                  2800:910::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:89:ea:59:9b:27:ae:cb:87:00:06:e4:ad:c4:83:65:3c:2d:
         21:60:b4:7c:39:4c:8a:e1:f0:0b:cf:8c:f5:56:8a:c4:9d:20:
         5b:dc:4c:7d:a5:95:6a:9c:90:db:ac:3e:04:90:7a:89:e1:b4:
         0e:f4:b4:aa:88:91:37:2f:eb:f0:91:0c:7f:93:cf:44:58:84:
         f4:21:29:3a:82:74:36:24:96:49:02:b4:0c:f0:a6:1b:82:90:
         d6:a2:c8:22:75:5d:fa:6d:4b:e1:18:2d:9b:aa:5f:46:cc:ab:
         87:b3:03:56:20:55:46:96:12:cf:f4:7d:ee:f7:3a:a7:e3:94:
         5f:c9:34:66:43:33:dc:be:92:8c:95:8a:d2:32:89:20:63:48:
         ca:92:4b:58:59:f6:06:65:4e:7d:d8:44:9b:f8:4a:90:53:9d:
         5f:6b:e5:b9:07:e1:1c:62:51:60:ec:3a:3a:eb:12:7c:ca:61:
         71:d5:ef:8f:f8:06:22:c7:42:2e:47:7d:fd:5f:91:8c:80:a9:
         aa:f9:b3:9e:52:17:13:a7:ac:5e:14:f0:cb:a9:1f:f3:6e:c6:
         59:98:19:cb:ed:fc:2c:c2:57:db:d6:8d:1a:ad:28:89:2d:5a:
         c9:11:21:ea:f3:3b:1c:b7:10:2e:a2:54:69:d1:1a:cf:c3:6c:
         c5:fa:0f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----