Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/12e8d7c1-2758-45c8-8808-a74762a5a733/45fae6cc88719d17efe14ecd0e5eb651955861a8.roa
File:                     45fae6cc88719d17efe14ecd0e5eb651955861a8.roa (raw, json)
Hash identifier:          IEin8Q9nxv0s81qKVuAoExXCFGtRIwDK75s4fDsMyi4=
Subject key identifier:   87:B8:5D:AB:79:74:85:35:6C:4A:56:32:AC:FA:1C:8C:E2:9D:01:31
Certificate issuer:       /CN=967ad948e81b47f5e461f955c58db8da221c1b8f
Certificate serial:       0D3332
Authority key identifier: C3:ED:0C:B2:E4:DD:97:79:69:F8:9A:91:B1:C9:C5:68:4C:EA:26:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/967ad948e81b47f5e461f955c58db8da221c1b8f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/12e8d7c1-2758-45c8-8808-a74762a5a733/45fae6cc88719d17efe14ecd0e5eb651955861a8.roa
Signing time:             Wed 24 Mar 2021 14:35:16 +0000
ROA not before:           Wed 24 Mar 2021 14:35:16 +0000
ROA not after:            Tue 24 Mar 2026 14:35:16 +0000
asID:                     263804
IP address blocks:        200.9.94.0/24 maxlen: 24
                          2801:13:e000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865074 (0xd3332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967ad948e81b47f5e461f955c58db8da221c1b8f
        Validity
            Not Before: Mar 24 14:35:16 2021 GMT
            Not After : Mar 24 14:35:16 2026 GMT
        Subject: CN=45fae6cc88719d17efe14ecd0e5eb651955861a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3b:49:48:a8:2a:6d:6f:64:eb:b5:af:18:05:
                    36:d7:f9:29:45:73:d4:ce:a4:05:9f:16:03:a4:b2:
                    3f:ac:80:b4:20:dd:97:a5:99:37:25:a9:9e:c9:fe:
                    29:9a:af:09:6b:28:8d:6c:d3:b9:0b:88:ec:1f:46:
                    24:5a:4a:6f:13:57:57:58:25:35:a1:4f:1e:f8:0b:
                    68:64:6e:29:72:44:5c:41:d4:8b:f5:20:91:b1:07:
                    bb:e7:4c:3c:9c:75:59:fe:35:63:a4:1c:14:d4:42:
                    8a:d8:95:c8:25:2f:03:fc:3b:8a:0a:b2:5a:6b:af:
                    30:b3:e7:12:5d:4a:b2:c9:24:f1:f6:75:11:a6:85:
                    d9:c5:d0:ad:3f:c6:fa:29:ec:6c:42:ee:86:fc:e0:
                    a5:76:1b:7d:06:f0:6b:b0:e6:9b:a2:f0:80:1d:1c:
                    5b:a2:1a:3b:93:8f:31:60:b4:37:f5:2b:1e:34:59:
                    19:34:b6:67:48:1e:87:51:c9:a3:ff:87:53:ec:1e:
                    20:34:82:4e:9c:ae:1e:78:ef:aa:ff:8f:a3:e9:1b:
                    d5:c4:36:ae:15:79:37:59:7a:ed:47:20:f8:2a:3b:
                    f8:d3:67:83:ad:fa:b2:08:cd:e6:30:40:5d:cb:4f:
                    6c:12:4d:32:6b:0a:e3:1f:32:98:1c:bf:87:b0:db:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B8:5D:AB:79:74:85:35:6C:4A:56:32:AC:FA:1C:8C:E2:9D:01:31
            X509v3 Authority Key Identifier:
                keyid:C3:ED:0C:B2:E4:DD:97:79:69:F8:9A:91:B1:C9:C5:68:4C:EA:26:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/967ad948e81b47f5e461f955c58db8da221c1b8f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/12e8d7c1-2758-45c8-8808-a74762a5a733/45fae6cc88719d17efe14ecd0e5eb651955861a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/12e8d7c1-2758-45c8-8808-a74762a5a733/967ad948e81b47f5e461f955c58db8da221c1b8f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.94.0/24
                IPv6:
                  2801:13:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:9e:bb:95:dd:ee:b3:ca:75:05:fc:f6:c8:43:6f:f9:5d:26:
         0b:2d:7a:36:0f:c6:45:d7:2e:80:11:b2:7b:2a:b2:9a:d1:01:
         77:ed:5c:28:80:92:aa:e4:2c:c7:15:95:66:9d:fd:a4:98:b5:
         fb:36:ab:2d:48:a8:39:c0:64:66:4c:c2:c4:8f:75:fb:3f:8a:
         2e:85:51:a0:7a:c7:4b:10:9f:f2:8b:bd:2c:6b:b9:e1:39:3c:
         b6:2b:7a:09:2a:fa:5d:f9:ad:f4:2a:21:11:4b:6f:87:25:7f:
         f2:39:a9:a5:6d:66:0f:84:3d:bf:85:40:bd:e8:75:85:8b:c7:
         58:d1:2d:05:d6:f1:d2:17:3d:75:b1:b2:61:8a:04:95:ae:08:
         7c:02:b7:22:44:d0:70:1d:6d:f0:23:81:e5:12:59:47:56:db:
         11:8a:5e:08:52:bb:49:96:2b:fa:2d:37:cb:7b:92:98:1f:b2:
         b6:be:e0:eb:91:36:5a:2a:45:87:ff:d1:bd:5d:c7:7a:95:bf:
         dc:6e:56:45:60:98:40:fc:05:9e:75:b6:b8:d7:b1:07:22:18:
         b2:59:04:81:63:a3:7d:76:5c:80:e9:0f:35:0a:50:7c:95:02:
         02:6a:27:e4:38:e5:95:4a:b9:ec:dd:c0:a9:74:03:cf:5d:51:
         2b:df:0e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----