Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/9730c94c71a54b928567736fc140bcb06be7f04e.roa
File:                     9730c94c71a54b928567736fc140bcb06be7f04e.roa (raw, json)
Hash identifier:          ArLLb73CXIYXT6PJehO1JnDgXV5YpV+uZIRp2rMLOJc=
Subject key identifier:   BB:F0:D6:6B:13:FB:78:5E:48:9B:DE:8F:EE:E1:57:D3:AD:FB:4F:E8
Certificate issuer:       /CN=6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c
Certificate serial:       077CF5
Authority key identifier: 0E:C8:8E:FC:D0:A1:EA:3A:BE:3C:74:8C:C7:B4:DF:51:DA:07:17:E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/9730c94c71a54b928567736fc140bcb06be7f04e.roa
Signing time:             Sat 27 Nov 2021 03:15:52 +0000
ROA not before:           Sat 27 Nov 2021 03:00:00 +0000
ROA not after:            Mon 27 Nov 2023 03:00:00 +0000
asID:                     270065
IP address blocks:        200.114.64.0/20 maxlen: 24
                          2803:9e80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490741 (0x77cf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c
        Validity
            Not Before: Nov 27 03:00:00 2021 GMT
            Not After : Nov 27 03:00:00 2023 GMT
        Subject: CN=9730c94c71a54b928567736fc140bcb06be7f04e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b0:56:1b:9a:74:fa:46:d5:7d:ee:08:e0:36:
                    56:f6:20:85:ff:eb:ed:c3:c4:10:d5:df:07:68:e1:
                    34:bd:9d:2a:28:b8:fb:12:2d:fe:bb:4d:0a:dd:2f:
                    81:df:0b:95:43:a5:14:2f:8b:d3:3d:e3:7a:f3:c1:
                    30:34:9c:47:7a:c7:56:ff:f7:3b:fe:b5:a1:75:a7:
                    66:1f:bf:37:b4:ad:a8:b4:47:d9:13:a0:cd:a3:28:
                    5a:52:2a:2a:8b:21:1e:c2:1c:ea:8c:8b:6f:b6:84:
                    05:92:c9:72:d1:9d:70:aa:2b:97:9e:9a:1d:6d:f8:
                    44:65:7e:b0:66:97:8c:2e:7f:b0:6b:f6:bd:b7:c1:
                    67:90:fc:dd:aa:f6:b5:e4:a5:a3:00:d7:ca:0c:3f:
                    99:6b:52:ad:33:aa:7d:ca:5d:13:97:be:75:a8:14:
                    ee:6c:41:28:00:ff:06:ba:68:19:7f:f0:e1:78:b3:
                    f9:24:ea:d0:fa:c0:13:27:8f:52:e5:b4:82:11:c0:
                    ba:41:bc:67:27:3f:fa:a0:2d:52:e7:1a:1b:ca:60:
                    0c:22:6d:98:e0:66:0e:1d:14:00:f6:b3:bd:3b:4c:
                    6e:58:cc:14:eb:0b:b8:ae:a2:3e:be:61:bd:9b:7b:
                    9f:35:5f:70:6f:d5:b2:85:ec:de:26:5c:87:36:67:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F0:D6:6B:13:FB:78:5E:48:9B:DE:8F:EE:E1:57:D3:AD:FB:4F:E8
            X509v3 Authority Key Identifier:
                keyid:0E:C8:8E:FC:D0:A1:EA:3A:BE:3C:74:8C:C7:B4:DF:51:DA:07:17:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/9730c94c71a54b928567736fc140bcb06be7f04e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/22f492fd-52f3-4478-a110-af40eb51f62a/6e7b552bfbb8693f0a7bac69364d2d4e7eb7e85c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.114.64.0/20
                IPv6:
                  2803:9e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         4c:e7:c2:dc:03:e8:c1:0a:9b:87:d1:3d:41:a9:ae:36:7a:4c:
         01:93:f6:39:97:19:46:12:f2:eb:9e:97:99:9a:8a:2e:19:a6:
         51:7a:5d:df:f1:24:98:0e:6c:01:d7:4c:7a:2f:c3:92:6c:fa:
         e6:37:a1:28:b7:aa:c9:11:90:df:62:7e:ec:1c:af:39:22:ea:
         d6:96:00:5e:06:36:21:47:4a:ad:93:04:ba:99:4e:3f:9c:e9:
         df:e4:ca:d4:8a:ec:0b:c3:22:30:9b:8f:08:16:d0:0e:28:85:
         1c:f5:90:9c:ec:4c:17:38:5d:d6:63:ce:8f:a7:09:15:5c:f9:
         f0:4a:dd:8d:b3:c9:2f:36:89:7d:60:76:2b:3b:95:4f:7f:dd:
         48:ef:ca:bb:33:a2:3c:b9:1c:a0:e5:a5:af:5f:b3:a1:77:b2:
         56:11:e7:26:15:1a:04:d5:00:81:d3:1d:73:b8:51:e9:57:97:
         a8:83:c4:17:39:a8:e2:53:c1:a9:53:13:55:66:17:f1:0e:3d:
         79:a1:27:84:fb:fb:83:2e:34:5c:4e:e8:0e:44:44:66:96:1f:
         25:c4:8c:45:58:12:03:15:b9:b1:8f:9e:6b:1f:0b:b2:a4:9e:
         fd:c1:45:35:33:a7:d7:4a:34:ef:75:b0:b6:cf:e0:b4:9f:ad:
         9a:20:4c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----