Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/096ff1f1ad6da63d5f9f5d4321989b06f05d8711.roa
File:                     096ff1f1ad6da63d5f9f5d4321989b06f05d8711.roa (raw, json)
Hash identifier:          YXDvBzw7Z2y1m89b0ztuO9KVcqQt/iM5I/Xx3F/E4ck=
Subject key identifier:   96:5D:33:99:71:E3:94:F4:C3:52:03:53:DE:82:9E:2D:25:2C:80:1F
Certificate issuer:       /CN=7532aa9172d6c90589b8b3a606a5cf88114d35d8
Certificate serial:       060946
Authority key identifier: 15:7B:21:D6:77:35:5E:01:B6:92:84:2D:CD:BE:5D:FC:BC:89:58:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7532aa9172d6c90589b8b3a606a5cf88114d35d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/096ff1f1ad6da63d5f9f5d4321989b06f05d8711.roa
Signing time:             Wed 24 Mar 2021 14:32:09 +0000
ROA not before:           Wed 24 Mar 2021 14:32:09 +0000
ROA not after:            Tue 24 Mar 2026 14:32:09 +0000
asID:                     270002
IP address blocks:        200.59.212.0/22 maxlen: 24
                          2803:31e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395590 (0x60946)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7532aa9172d6c90589b8b3a606a5cf88114d35d8
        Validity
            Not Before: Mar 24 14:32:09 2021 GMT
            Not After : Mar 24 14:32:09 2026 GMT
        Subject: CN=096ff1f1ad6da63d5f9f5d4321989b06f05d8711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:19:e5:64:0c:6b:0e:2b:71:63:d5:55:11:
                    4a:b7:7b:db:a4:04:af:67:3b:8a:9a:a1:24:51:fc:
                    13:7c:b4:69:78:b3:5d:a6:45:70:8a:30:03:19:2e:
                    55:89:55:9c:ef:2f:92:dd:69:21:60:35:2b:6a:b1:
                    d2:ee:a7:ee:7c:67:88:49:de:c1:a0:12:2c:d7:2d:
                    f7:fc:98:8d:24:dc:50:e7:38:c7:9b:0d:bb:7b:32:
                    f4:e8:16:8c:39:b5:50:7e:a0:99:f5:39:0f:e5:2c:
                    3f:80:c6:6f:ee:88:41:42:46:7f:a6:72:43:2d:2e:
                    f8:f8:fa:8b:66:47:04:25:99:4a:01:4d:67:ea:2a:
                    b4:95:7f:fd:b4:34:4c:79:e7:a9:a3:2a:72:ad:87:
                    4e:8a:e2:f1:9c:31:00:4b:50:5b:bb:f9:4d:e3:6c:
                    45:49:a1:aa:64:f8:0f:08:35:f3:d9:c7:0a:3f:22:
                    a1:97:95:46:6c:d9:2d:b6:25:07:f2:ff:ab:3e:84:
                    dd:e3:41:3d:9d:b4:5f:78:e1:db:5e:bb:e8:5b:a1:
                    14:7d:32:f8:78:ef:5b:bb:3a:df:38:00:81:65:7b:
                    84:30:2d:fe:57:4c:f0:93:12:c1:e8:2d:81:44:0d:
                    aa:6b:02:b6:a9:eb:f0:39:54:f7:b4:3e:68:52:44:
                    7d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5D:33:99:71:E3:94:F4:C3:52:03:53:DE:82:9E:2D:25:2C:80:1F
            X509v3 Authority Key Identifier:
                keyid:15:7B:21:D6:77:35:5E:01:B6:92:84:2D:CD:BE:5D:FC:BC:89:58:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7532aa9172d6c90589b8b3a606a5cf88114d35d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/096ff1f1ad6da63d5f9f5d4321989b06f05d8711.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2a1c84e7-02e9-4beb-a206-6318f04880b5/7532aa9172d6c90589b8b3a606a5cf88114d35d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.212.0/22
                IPv6:
                  2803:31e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:b8:21:ae:86:2c:5b:23:0c:f7:f3:84:da:65:63:95:af:7a:
         85:da:2d:84:cb:dd:8d:7f:52:75:c5:9a:d9:5e:c4:d8:b9:ea:
         f0:e0:f9:3d:2e:c5:d1:cb:b4:37:9e:63:65:18:cf:f2:d3:cd:
         93:9a:1a:4d:50:52:56:68:e8:e9:ef:77:81:af:c1:bc:15:95:
         99:94:3f:5d:bd:cc:e1:ce:2f:27:8e:80:f9:77:cd:73:54:01:
         ff:80:54:65:c3:7c:91:09:6c:8b:90:12:bd:99:45:fc:f5:a8:
         1c:25:b5:c5:bd:4d:b0:1c:50:e8:0e:68:40:f7:d7:a1:2f:56:
         20:41:31:96:be:8d:3d:c1:be:ac:df:da:6d:74:59:a2:3d:c0:
         0d:8e:c4:44:1e:ba:ea:09:bf:8e:b5:6e:cb:0f:86:ca:5b:1f:
         cd:0e:23:45:a7:b1:fd:b8:a6:6a:6f:20:3c:46:7c:69:7c:03:
         1f:f9:15:ef:77:41:dc:bd:97:06:38:01:cf:d4:ab:77:c3:95:
         12:e0:df:10:d0:da:ee:09:0a:7d:f8:27:00:b1:20:06:a6:13:
         06:76:0b:0c:2a:63:e2:bb:35:43:37:77:39:a7:36:33:2e:1c:
         78:ef:76:52:71:ca:f7:65:47:9a:97:32:cf:b9:d8:1c:39:0b:
         3a:a3:dd:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----