Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/ea26553eef1060fb16b666ec78826927406bf7c8.roa
File:                     ea26553eef1060fb16b666ec78826927406bf7c8.roa (raw, json)
Hash identifier:          6EpFQlko33VynvGCpGZvDq87omOZN/Hgh9ku2imDZG4=
Subject key identifier:   12:F9:5A:48:49:6B:7A:10:37:28:6B:F2:F3:E3:8E:7C:6D:44:D8:27
Certificate issuer:       /CN=93e1045f9f659b040e2833d32618d562a29ac1fd
Certificate serial:       0D9DD1
Authority key identifier: 35:E8:10:82:8A:1C:42:6C:F7:05:78:05:76:89:34:30:47:56:00:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93e1045f9f659b040e2833d32618d562a29ac1fd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/ea26553eef1060fb16b666ec78826927406bf7c8.roa
Signing time:             Wed 24 Mar 2021 14:43:30 +0000
ROA not before:           Wed 24 Mar 2021 14:43:30 +0000
ROA not after:            Tue 24 Mar 2026 14:43:30 +0000
asID:                     22122
IP address blocks:        148.209.0.0/16 maxlen: 16
                          2801:c4:19::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892369 (0xd9dd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93e1045f9f659b040e2833d32618d562a29ac1fd
        Validity
            Not Before: Mar 24 14:43:30 2021 GMT
            Not After : Mar 24 14:43:30 2026 GMT
        Subject: CN=ea26553eef1060fb16b666ec78826927406bf7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5a:ac:43:94:a5:01:fe:b3:2d:fa:5c:2d:bc:
                    71:cf:13:ad:a8:43:57:85:c3:64:2f:a6:07:84:8a:
                    07:0e:1b:59:55:6e:f3:c5:9f:76:e1:d3:08:bf:dd:
                    20:ca:93:2a:e3:ed:ee:b4:25:18:0b:83:58:f0:5b:
                    6a:6d:fd:40:e9:55:42:a9:58:fb:44:82:e6:e2:e2:
                    e3:3d:c1:23:06:ff:1f:02:f0:6f:cc:e8:38:66:60:
                    d6:61:4e:e8:8c:05:9e:cd:55:d6:ed:2c:6f:c8:5a:
                    fe:17:3c:f2:49:16:5f:fc:69:fe:f8:62:fb:97:42:
                    25:80:b4:10:cb:7b:99:5a:c7:02:09:e8:16:2b:6c:
                    53:ef:47:63:9e:1b:b5:77:3c:79:38:4d:f0:39:17:
                    46:d4:88:45:58:3e:32:99:ab:73:46:a8:12:b8:1d:
                    68:c5:c7:06:ab:36:6f:94:57:65:37:6d:24:11:01:
                    41:17:c2:e8:7c:02:69:08:f1:50:15:91:1f:e3:ef:
                    04:ec:24:e4:54:4d:e6:7c:92:db:26:04:1b:3a:b6:
                    3f:82:2f:37:50:8a:df:d3:18:5e:f5:51:e8:42:a2:
                    ca:9f:43:57:e1:59:42:01:ea:17:5e:97:40:a4:85:
                    ed:93:ed:3c:ee:93:08:85:60:5f:22:6e:35:8e:d0:
                    96:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:F9:5A:48:49:6B:7A:10:37:28:6B:F2:F3:E3:8E:7C:6D:44:D8:27
            X509v3 Authority Key Identifier:
                keyid:35:E8:10:82:8A:1C:42:6C:F7:05:78:05:76:89:34:30:47:56:00:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93e1045f9f659b040e2833d32618d562a29ac1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/ea26553eef1060fb16b666ec78826927406bf7c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/133e3507-7055-4d3f-bb90-b9a5e1ee4f5e/93e1045f9f659b040e2833d32618d562a29ac1fd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.209.0.0/16
                IPv6:
                  2801:c4:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:a8:97:60:64:15:d6:5b:3c:70:ff:d7:88:66:87:d8:67:9c:
         dd:9f:91:ed:3d:45:25:fb:a7:c1:a9:93:f0:bb:8c:94:97:ed:
         77:ca:68:7e:3c:b7:78:68:13:17:22:cc:9d:bc:dc:49:06:e1:
         62:0c:ca:c9:51:a6:53:6c:3c:7c:69:3d:bb:7d:2f:5d:8a:0f:
         a1:9f:95:b7:37:a5:7c:f1:0d:ea:35:e5:c9:41:07:ea:71:0b:
         c2:c0:d7:2d:9c:7c:b1:91:21:c3:b3:b3:29:b9:40:59:bf:7b:
         c4:ed:f6:82:39:74:e1:a9:ca:ba:1a:81:ea:03:d1:cf:0b:6c:
         48:a9:46:fd:a5:4d:a1:53:81:94:e2:e9:5d:4b:59:bb:ce:ed:
         27:08:0b:22:e5:e6:17:cd:3c:ab:82:86:b2:78:6f:d6:5a:1a:
         88:e5:39:57:55:72:bf:f0:94:74:fd:34:d0:d0:a6:10:0e:76:
         e9:c4:93:fc:39:7e:b2:96:09:fc:bb:95:cc:fa:67:b6:d0:4e:
         ef:e2:a3:ad:34:db:22:51:3b:2a:ec:44:b2:c9:f9:6f:9d:8a:
         3c:28:e6:a6:04:82:a8:cc:21:a1:83:29:84:a1:ea:f6:bd:51:
         91:46:b3:8c:84:ae:a8:83:e4:62:44:c5:d5:5f:bd:da:72:52:
         df:27:3a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----