Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2003b5a1-5b60-466b-8d55-76b25f4bf711/94ab00f36ea6f6f44b261a2145bd4f2eb2c6f75a.roa
File:                     94ab00f36ea6f6f44b261a2145bd4f2eb2c6f75a.roa (raw, json)
Hash identifier:          A71yw3danfuoxHcLKwbM41gXpPu026J6PsXfTAYn72M=
Subject key identifier:   C3:A5:EC:80:D6:DC:65:01:E8:20:50:5C:A6:7F:8C:85:10:76:A0:83
Certificate issuer:       /CN=c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f
Certificate serial:       0C4666
Authority key identifier: 78:C8:8F:7F:6E:E8:D6:93:1C:0D:C6:18:92:23:9B:F8:65:9B:B2:A4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2003b5a1-5b60-466b-8d55-76b25f4bf711/94ab00f36ea6f6f44b261a2145bd4f2eb2c6f75a.roa
Signing time:             Wed 13 Jul 2022 12:28:47 +0000
ROA not before:           Wed 13 Jul 2022 03:00:00 +0000
ROA not after:            Sat 13 Jul 2024 03:00:00 +0000
asID:                     3132
IP address blocks:        200.36.156.0/23 maxlen: 24
                          2801:1f:6800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804454 (0xc4666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f
        Validity
            Not Before: Jul 13 03:00:00 2022 GMT
            Not After : Jul 13 03:00:00 2024 GMT
        Subject: CN=94ab00f36ea6f6f44b261a2145bd4f2eb2c6f75a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:10:d5:20:2a:1e:bf:2e:59:b2:aa:fe:d7:8f:
                    32:d2:e4:82:4e:f3:fa:c8:76:db:8d:e5:e7:e0:a3:
                    ff:9a:31:bd:48:26:e4:0a:29:18:b1:27:be:fb:3f:
                    44:04:8a:e5:b3:73:ed:e0:eb:de:3f:fc:0f:58:40:
                    b4:0a:ac:ac:7e:e8:84:ef:bc:e8:cf:72:86:11:c5:
                    8e:66:09:91:b1:19:3a:b9:75:70:a5:a9:05:3f:cc:
                    cc:ca:dc:4d:4c:42:85:87:48:40:19:f1:b0:28:71:
                    a2:81:62:41:e1:cc:31:e0:c8:ad:a9:5a:8a:cf:27:
                    aa:71:7b:f3:f8:e7:f0:d1:f9:b9:98:ec:cd:cd:8c:
                    e9:dd:3f:b8:2a:d7:71:91:8d:62:51:53:1d:7c:d4:
                    69:c0:85:7c:b4:97:06:dd:1b:50:29:bf:cc:ca:96:
                    9d:20:73:4e:ba:64:5b:f7:81:ae:04:af:de:04:f3:
                    59:4d:04:24:9e:c2:e7:08:ec:e6:69:78:12:af:61:
                    fd:44:2b:79:ac:fc:cb:23:72:4b:62:a9:05:1c:d7:
                    ed:c8:fd:00:e4:e9:9e:95:40:58:0a:99:46:c9:a4:
                    68:fa:8f:41:c8:74:95:2b:56:6d:b5:e3:1c:a3:b1:
                    9d:68:2e:64:04:05:8c:52:9d:de:84:47:37:d8:61:
                    df:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A5:EC:80:D6:DC:65:01:E8:20:50:5C:A6:7F:8C:85:10:76:A0:83
            X509v3 Authority Key Identifier:
                keyid:78:C8:8F:7F:6E:E8:D6:93:1C:0D:C6:18:92:23:9B:F8:65:9B:B2:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2003b5a1-5b60-466b-8d55-76b25f4bf711/94ab00f36ea6f6f44b261a2145bd4f2eb2c6f75a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2003b5a1-5b60-466b-8d55-76b25f4bf711/c53dc2ceb664276c79ecc2b92834e6e89c5c4b1f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.156.0/23
                IPv6:
                  2801:1f:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:a7:6e:2e:8f:d7:ff:eb:6e:74:1e:2c:40:ff:29:6f:a3:f5:
         92:a2:60:12:e0:95:65:3c:b6:14:32:d6:95:4c:ac:8e:c2:fc:
         62:7d:68:9c:d9:d5:00:d3:a0:e7:77:5c:3f:32:c7:db:d0:2f:
         b1:b9:dc:31:03:56:e0:76:56:88:22:bc:5f:76:7c:eb:f9:f2:
         e6:65:51:ee:fb:ee:ea:5d:51:11:9b:7a:52:6f:af:01:9a:63:
         21:8f:50:74:4d:c4:50:22:94:a6:4d:16:9e:ee:df:0e:6a:3d:
         3c:f8:e1:27:08:91:cb:17:92:6f:6f:b8:3e:ae:75:91:37:67:
         c3:4a:32:4f:cc:91:b4:79:8c:4c:89:d1:c0:ec:2e:58:95:77:
         a4:65:29:a1:22:7a:00:0d:23:b8:51:83:10:20:87:45:72:f3:
         b9:09:ea:52:4c:0f:01:25:83:14:90:13:0e:19:36:88:24:c2:
         f5:d6:5e:ee:34:1d:5c:b3:f8:96:da:54:94:5e:23:10:8e:ec:
         60:21:a3:9a:cd:c6:61:3a:61:58:fc:9c:3c:26:d5:9f:8f:02:
         1a:91:e2:c0:c9:b2:7a:83:a1:2e:d0:10:6a:2e:a3:a4:6d:56:
         a5:16:71:43:1d:51:e9:b0:b7:f2:3d:32:71:4f:10:59:46:1f:
         0d:a4:5f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----