Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/2d5c3252c9a05044ce669c4b53c99552b8b9a110.roa
File:                     2d5c3252c9a05044ce669c4b53c99552b8b9a110.roa (raw, json)
Hash identifier:          7MiKEfXOz6kG8gfSzWXtuYYCwKp2LtmOc5DQ7LNvz2o=
Subject key identifier:   44:24:C5:56:E6:26:CB:60:A0:00:7B:E6:1A:96:3C:55:CB:68:C9:E0
Certificate issuer:       /CN=d0770ddd551675937607f1d9793d3dafd3873a04
Certificate serial:       D1
Authority key identifier: F7:47:78:57:17:EC:F0:3C:86:56:79:51:47:C8:1B:4D:59:F9:02:EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0770ddd551675937607f1d9793d3dafd3873a04.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/2d5c3252c9a05044ce669c4b53c99552b8b9a110.roa
Signing time:             Thu 30 Jun 2022 20:17:03 +0000
ROA not before:           Thu 30 Jun 2022 03:00:00 +0000
ROA not after:            Sun 30 Jun 2024 03:00:00 +0000
asID:                     7965
IP address blocks:        200.2.8.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0770ddd551675937607f1d9793d3dafd3873a04
        Validity
            Not Before: Jun 30 03:00:00 2022 GMT
            Not After : Jun 30 03:00:00 2024 GMT
        Subject: CN=2d5c3252c9a05044ce669c4b53c99552b8b9a110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9d:f1:f8:69:04:5f:67:77:ae:9f:c1:ac:d2:
                    01:ab:6f:bc:6c:97:41:80:4f:17:86:bb:0d:81:64:
                    e8:be:54:1b:1d:b2:d5:5f:90:85:b8:bf:4b:01:34:
                    1b:bd:85:f4:91:ea:3c:78:ea:4c:82:9d:93:c3:3c:
                    17:7b:ef:76:c6:46:8e:9d:9e:15:78:da:51:60:67:
                    dc:31:87:71:8d:01:6b:06:27:c2:e6:99:ab:45:05:
                    b3:79:be:88:68:3a:25:bc:04:82:73:61:5f:af:91:
                    3e:19:2f:fa:42:fd:4a:10:7a:4c:77:0d:41:25:c9:
                    11:47:5e:e2:7c:22:a7:77:cd:44:0c:fb:b6:d3:35:
                    fd:3d:62:f2:e7:03:25:4d:3a:14:4a:2b:4c:56:ac:
                    68:93:39:c5:ed:ae:5d:a0:55:7e:ab:22:6c:06:70:
                    39:58:fd:fd:f0:49:3b:69:00:59:c1:40:a7:01:01:
                    06:57:72:07:45:56:62:27:17:f4:e2:ff:9d:a9:fc:
                    73:9d:0e:a1:f4:60:b2:99:c6:c2:ae:83:07:81:47:
                    85:61:76:4e:f2:4e:94:a9:b7:d8:29:85:0f:9c:48:
                    34:37:5a:32:a9:c9:7a:db:58:c2:ca:22:17:46:b9:
                    eb:1a:41:ee:af:55:be:e3:8a:c9:6d:13:ce:8d:79:
                    31:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:24:C5:56:E6:26:CB:60:A0:00:7B:E6:1A:96:3C:55:CB:68:C9:E0
            X509v3 Authority Key Identifier:
                keyid:F7:47:78:57:17:EC:F0:3C:86:56:79:51:47:C8:1B:4D:59:F9:02:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0770ddd551675937607f1d9793d3dafd3873a04.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/2d5c3252c9a05044ce669c4b53c99552b8b9a110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/d0770ddd551675937607f1d9793d3dafd3873a04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:8c:0b:14:dc:8f:c9:cc:79:75:f9:df:0d:66:3d:38:b7:5f:
         69:e6:ba:4a:c4:67:70:ac:46:e0:5a:8b:16:34:9e:e8:d9:e0:
         d6:90:b2:63:24:d8:71:66:a8:e4:08:74:ae:fb:f5:63:52:d8:
         e7:5a:80:19:21:4f:3a:08:d4:05:cf:62:4c:17:ff:f6:56:4a:
         57:ee:7f:e0:c3:e6:20:bc:bd:e7:4f:d7:28:73:ee:b5:c6:f8:
         59:35:72:de:a5:2e:c3:dd:88:04:bf:7f:a2:d9:d5:85:31:4c:
         ce:0e:ef:18:ad:8f:58:19:36:dd:50:00:18:86:48:54:1d:18:
         65:a3:e5:80:9e:f3:25:8d:84:22:f1:65:13:00:17:97:c4:30:
         df:a8:06:39:6f:4d:c6:41:b1:d4:cb:b7:30:d9:94:c6:2f:30:
         93:e9:82:65:31:8d:4e:6e:84:1c:74:19:77:15:7b:92:e9:be:
         1b:8d:97:f2:d7:8b:3f:58:a4:4e:0b:8a:ca:e9:89:3c:7b:55:
         08:c7:4c:93:90:61:8f:47:fa:44:37:04:1f:89:84:79:95:67:
         04:8f:b1:68:9e:a4:26:42:f6:bc:e8:3f:cb:ff:68:74:5f:ae:
         9f:46:fb:d2:1d:c5:4f:f6:4d:4b:ed:54:2e:f4:7c:b4:05:5a:
         d3:9b:bb:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----