Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/93f4c10629056a28d947c064378f8e4d42b3a17f.roa
File:                     93f4c10629056a28d947c064378f8e4d42b3a17f.roa (raw, json)
Hash identifier:          ArUl34Yk4+0Z1M162q+Kwrwi9hfNj7q4bwqniYwETmk=
Subject key identifier:   6D:2C:9D:0A:B2:90:F3:79:44:E2:D9:07:E5:B5:1C:B3:5A:34:A2:30
Certificate issuer:       /CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
Certificate serial:       03DFBF
Authority key identifier: EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/93f4c10629056a28d947c064378f8e4d42b3a17f.roa
Signing time:             Wed 24 Mar 2021 14:47:12 +0000
ROA not before:           Wed 24 Mar 2021 14:47:12 +0000
ROA not after:            Tue 24 Mar 2026 14:47:12 +0000
asID:                     30133
IP address blocks:        2001:13c7:7005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253887 (0x3dfbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad45033c78c4f66de023e56ff03e177bf1bcb19
        Validity
            Not Before: Mar 24 14:47:12 2021 GMT
            Not After : Mar 24 14:47:12 2026 GMT
        Subject: CN=93f4c10629056a28d947c064378f8e4d42b3a17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:7f:5d:2f:9d:ba:5c:c2:1c:79:70:2a:90:
                    7d:5d:32:94:d1:d6:12:dc:9a:7f:5b:78:de:c7:69:
                    85:dc:80:44:46:0d:e7:ba:3f:e2:dd:b2:fe:94:7d:
                    72:ea:79:11:07:3c:f0:c7:da:db:75:c0:b0:50:22:
                    e3:67:fd:c8:a0:6a:c7:13:97:00:75:2b:f4:7b:30:
                    eb:45:7d:0e:26:b4:6a:75:52:ec:65:4e:88:99:54:
                    82:44:da:f7:81:26:b5:72:bd:96:e5:e1:d1:6a:1b:
                    0f:57:fc:84:a5:32:d8:8e:2f:16:79:15:17:2f:1c:
                    65:69:1e:d4:91:bd:c9:62:3e:74:bd:20:3a:72:bb:
                    ad:fc:46:cd:84:7b:66:19:a7:27:e3:0e:56:0d:49:
                    b3:90:da:d0:27:4f:7d:cb:be:e2:29:99:0a:66:5b:
                    e1:37:4a:f5:8f:92:38:f8:3d:f7:b9:6b:28:07:d8:
                    6e:aa:12:bf:09:08:75:99:96:84:fa:76:c5:8f:d7:
                    72:e8:c4:e1:40:1f:e5:fa:47:fb:d4:1c:5a:2f:bb:
                    8b:16:88:65:dc:28:3c:3c:15:a8:17:30:ee:bf:cb:
                    f4:44:6f:33:89:11:ea:08:5c:8b:85:f1:8f:37:67:
                    3e:4a:26:38:c3:e5:4d:95:40:cb:9e:23:5e:ef:3b:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2C:9D:0A:B2:90:F3:79:44:E2:D9:07:E5:B5:1C:B3:5A:34:A2:30
            X509v3 Authority Key Identifier:
                keyid:EC:20:E0:2E:BB:B3:A7:8D:AE:DB:78:95:96:E5:28:C9:63:B1:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ad45033c78c4f66de023e56ff03e177bf1bcb19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/93f4c10629056a28d947c064378f8e4d42b3a17f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/194a143a-facd-448a-998b-5a306ab784bc/7ad45033c78c4f66de023e56ff03e177bf1bcb19.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:13c7:7005::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:0d:af:f8:05:54:25:e3:7e:ef:f8:77:5e:2d:f4:a8:8f:94:
         70:e6:0a:ef:82:85:98:e8:9d:df:15:e0:14:ae:72:3a:df:95:
         4a:e6:cc:f5:b7:85:3f:f2:40:75:7e:e8:2f:4f:be:fa:45:1a:
         ce:c3:f5:36:60:29:8c:8e:40:a6:82:91:6e:77:b2:08:c5:6d:
         a8:cc:a7:70:35:27:9b:19:b8:6e:fa:ee:c9:01:34:04:6d:65:
         f9:8a:24:ef:85:3c:69:53:92:4d:53:87:82:f1:2a:e5:75:c4:
         b8:31:a9:30:0d:67:db:31:a7:16:05:d8:30:a0:fd:1a:b2:90:
         ff:10:34:45:2d:3e:ea:df:bb:41:f0:4f:aa:e4:c1:8f:c6:8d:
         bc:a0:e3:7b:c1:10:85:34:52:d4:5e:ee:3e:7a:a9:6d:c4:6d:
         f7:d7:66:31:69:2d:d5:2a:30:bc:54:2d:5c:6a:5d:d4:81:5a:
         8f:c0:31:18:03:de:52:2b:16:46:75:07:8f:d5:37:cb:52:7e:
         43:15:fe:72:2b:99:46:92:e4:d5:1c:10:34:06:70:10:b1:97:
         2d:15:4b:4e:66:21:f2:8e:d4:2a:d4:19:9c:a9:f8:b8:fd:2d:
         af:4b:4b:19:ac:5d:77:75:51:6a:c1:6f:01:ce:81:d1:b5:39:
         85:1a:fe:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----