Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/28fed3d9-f6e7-41a2-9098-4ea7601a1c87/9993971fe83ff2d206932accb4a06051168d29a4.roa
File:                     9993971fe83ff2d206932accb4a06051168d29a4.roa (raw, json)
Hash identifier:          QIL/t4NO+R6E96ldXPbcLCrNSWgFm862Ko/U1RdMGww=
Subject key identifier:   C5:72:6F:DA:8C:13:74:40:54:7E:78:0D:16:B0:B8:FD:4E:D2:31:2D
Certificate issuer:       /CN=cdf56eaa9e8778aad15a7016aba7936155400219
Certificate serial:       0D6BBB
Authority key identifier: 3C:73:EA:E5:07:24:35:B5:BE:45:6A:66:92:E7:2B:C2:ED:6B:AE:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdf56eaa9e8778aad15a7016aba7936155400219.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/28fed3d9-f6e7-41a2-9098-4ea7601a1c87/9993971fe83ff2d206932accb4a06051168d29a4.roa
Signing time:             Wed 24 Mar 2021 14:28:56 +0000
ROA not before:           Wed 24 Mar 2021 14:28:56 +0000
ROA not after:            Tue 24 Mar 2026 14:28:56 +0000
asID:                     27971
IP address blocks:        186.5.176.0/20 maxlen: 24
                          200.63.112.0/21 maxlen: 24
                          2803:e100::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879547 (0xd6bbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdf56eaa9e8778aad15a7016aba7936155400219
        Validity
            Not Before: Mar 24 14:28:56 2021 GMT
            Not After : Mar 24 14:28:56 2026 GMT
        Subject: CN=9993971fe83ff2d206932accb4a06051168d29a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:92:6c:be:91:19:88:2f:89:88:81:b3:53:b5:
                    08:8e:4a:02:56:c6:13:da:3a:d3:03:58:46:05:2a:
                    ea:87:4b:34:99:e7:df:8a:1d:ef:12:c5:08:8c:6d:
                    0d:ad:fa:d5:44:c9:b4:2e:2b:19:78:7d:27:bc:92:
                    33:94:83:ba:9e:7d:10:d5:4a:dc:b5:ad:78:33:a6:
                    65:46:ed:c0:a6:aa:e3:cc:92:99:0e:23:7c:2b:79:
                    6f:4f:6d:ba:65:bc:e3:19:a0:de:28:d8:10:9b:d9:
                    f3:05:36:ff:4c:77:d5:c3:e6:24:43:81:d9:33:75:
                    31:97:ad:a7:19:c9:e0:ab:6f:8e:cf:67:c6:5a:60:
                    fd:ca:69:1b:da:ea:89:e9:bc:45:43:61:a4:38:60:
                    8a:04:4a:10:59:8b:20:4d:65:c8:4a:0b:f7:18:26:
                    3f:23:d9:6e:88:e1:a9:da:4d:8f:30:ec:21:a8:bf:
                    f4:45:45:bf:6f:25:38:fa:cf:05:04:f2:d3:60:fa:
                    41:00:e3:4e:21:38:1f:b2:53:d5:eb:62:e8:f0:2a:
                    b0:f7:23:c6:95:b5:14:3f:41:40:6c:cb:cc:12:59:
                    66:ee:b4:57:d6:0a:0b:e4:be:00:b3:d0:40:18:0d:
                    ac:99:e0:26:4a:e8:c5:33:9c:71:13:98:1a:ce:36:
                    15:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:72:6F:DA:8C:13:74:40:54:7E:78:0D:16:B0:B8:FD:4E:D2:31:2D
            X509v3 Authority Key Identifier:
                keyid:3C:73:EA:E5:07:24:35:B5:BE:45:6A:66:92:E7:2B:C2:ED:6B:AE:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cdf56eaa9e8778aad15a7016aba7936155400219.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/28fed3d9-f6e7-41a2-9098-4ea7601a1c87/9993971fe83ff2d206932accb4a06051168d29a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/28fed3d9-f6e7-41a2-9098-4ea7601a1c87/cdf56eaa9e8778aad15a7016aba7936155400219.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.176.0/20
                  200.63.112.0/21
                IPv6:
                  2803:e100::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:14:be:49:25:ae:6f:90:32:dc:86:3d:cb:d9:f9:98:86:ac:
         3b:5d:7c:c5:5f:52:ec:27:ea:20:ad:1a:1f:59:09:10:27:51:
         cd:18:6c:87:a7:b4:63:c4:c9:63:14:d3:5e:1b:c6:80:1e:30:
         0e:b6:38:b5:d5:68:64:9b:f3:ee:f1:94:b1:eb:d7:d1:d3:5e:
         c5:44:b0:88:ae:e9:37:43:c6:59:d4:0e:23:74:74:07:84:09:
         ae:51:01:54:ee:ca:f5:ba:da:a3:8e:d6:fd:0b:9a:0e:d3:77:
         f0:bb:60:37:cf:08:45:cb:26:5e:1d:d2:e5:cc:e3:3f:e5:b9:
         3c:98:72:57:37:74:92:11:a5:77:5c:64:79:ed:ef:2f:9c:26:
         a3:7b:ae:df:b2:89:4a:4e:60:d4:58:47:01:d9:5f:68:e6:1d:
         98:dc:70:5f:05:31:07:b4:79:0c:04:7e:d5:9a:c3:65:8c:ee:
         12:88:a7:c9:6d:e0:5a:1b:39:ed:3a:d4:28:b7:22:df:87:4d:
         61:c2:af:7e:fc:0a:7e:1d:0f:84:4f:82:c5:f8:7d:cf:13:ca:
         4c:32:02:0f:a8:5e:8a:a0:e8:3d:95:fe:b9:84:f6:85:ef:0b:
         85:34:57:ef:2b:01:ca:e7:5b:f1:7f:91:b1:98:20:b2:39:4d:
         a4:f9:dc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----