Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a2a195f-9a10-4da5-ab47-8017c0248796/206895a56aec32e63d772a0e3b83e126a7bcdb9c.roa
File:                     206895a56aec32e63d772a0e3b83e126a7bcdb9c.roa (raw, json)
Hash identifier:          hXP+pFLCGTL5ZBLNst8zRx8aCHPiz1RZshXygwBdtIw=
Subject key identifier:   2A:EB:D5:16:31:FD:76:BD:B7:72:01:F3:4B:89:04:25:28:69:A7:93
Certificate issuer:       /CN=d15243f77872a9cf9a82497af9ff36a4dbe75c02
Certificate serial:       0D8667
Authority key identifier: 43:13:CF:10:94:D6:DA:54:68:9E:CD:E7:E3:48:00:61:D7:2D:A7:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d15243f77872a9cf9a82497af9ff36a4dbe75c02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2a2a195f-9a10-4da5-ab47-8017c0248796/206895a56aec32e63d772a0e3b83e126a7bcdb9c.roa
Signing time:             Wed 24 Mar 2021 14:47:24 +0000
ROA not before:           Wed 24 Mar 2021 14:47:24 +0000
ROA not after:            Tue 24 Mar 2026 14:47:24 +0000
asID:                     8048
IP address blocks:        201.130.82.0/23 maxlen: 24
                          2801:11:a000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886375 (0xd8667)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15243f77872a9cf9a82497af9ff36a4dbe75c02
        Validity
            Not Before: Mar 24 14:47:24 2021 GMT
            Not After : Mar 24 14:47:24 2026 GMT
        Subject: CN=206895a56aec32e63d772a0e3b83e126a7bcdb9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e6:d7:7d:ca:56:23:bf:2d:cb:75:64:02:12:
                    e4:3c:23:c1:00:12:09:d8:95:52:4f:4f:96:29:ed:
                    2a:f5:70:d7:5f:f4:6c:d0:fd:c8:72:ec:13:be:d1:
                    73:ac:55:8d:66:38:30:11:e9:92:28:c4:7d:57:ac:
                    7a:de:e0:22:eb:b9:2b:7d:38:3e:fa:9e:c7:56:6e:
                    25:47:20:5b:e2:1e:83:67:fc:82:cd:ba:05:b5:e4:
                    d8:b3:1b:f6:ae:43:1f:2a:38:2f:0f:f0:7b:47:c3:
                    0e:a6:45:45:18:6d:c0:34:1c:a5:71:27:47:22:ab:
                    fa:f5:eb:e9:dd:cb:73:15:56:25:ce:ab:4d:c2:27:
                    37:11:bc:1a:10:2f:cd:2e:c6:ed:ee:93:3e:f0:8d:
                    22:50:7a:67:b4:70:ae:f0:ee:03:06:7a:6d:56:37:
                    92:dd:3d:5a:ba:af:00:6a:b2:cb:d1:48:61:38:99:
                    75:87:dc:21:2b:f6:09:09:b1:ac:ff:57:38:c8:c1:
                    d5:97:d2:56:56:66:c6:2c:68:b2:e1:be:62:2f:5c:
                    e2:a0:e1:19:cd:46:f6:37:b2:73:ce:fc:87:21:f6:
                    3f:31:9e:97:74:95:8f:64:de:2d:f3:b4:cf:7e:91:
                    5f:c1:f2:31:3e:c1:11:66:b6:3c:dd:f1:fe:0c:d2:
                    22:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EB:D5:16:31:FD:76:BD:B7:72:01:F3:4B:89:04:25:28:69:A7:93
            X509v3 Authority Key Identifier:
                keyid:43:13:CF:10:94:D6:DA:54:68:9E:CD:E7:E3:48:00:61:D7:2D:A7:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d15243f77872a9cf9a82497af9ff36a4dbe75c02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a2a195f-9a10-4da5-ab47-8017c0248796/206895a56aec32e63d772a0e3b83e126a7bcdb9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2a2a195f-9a10-4da5-ab47-8017c0248796/d15243f77872a9cf9a82497af9ff36a4dbe75c02.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.82.0/23
                IPv6:
                  2801:11:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         40:d1:be:f6:4c:24:d5:10:88:df:54:b8:07:28:26:fa:09:80:
         1b:12:15:65:0c:0d:1f:fa:6a:c7:24:76:a5:48:20:74:47:d5:
         bf:14:d1:29:0a:ed:08:28:d1:0f:49:8c:7c:b9:b6:60:1f:9a:
         d4:c5:66:dc:cd:d6:95:b3:50:3e:ed:9d:a5:2d:fe:da:f6:e0:
         27:b7:c6:52:9d:dd:97:44:fd:a2:f4:30:7d:97:68:6a:1e:04:
         43:ba:85:ea:3a:c9:9f:fa:42:8e:1a:24:44:59:ce:16:ab:29:
         b8:d2:e3:c3:a4:92:db:ed:6c:dd:f0:97:48:6e:59:4a:21:a6:
         30:6f:c6:df:fd:92:83:d5:a6:5b:b5:9f:22:91:6b:61:ff:8d:
         74:35:0b:27:05:91:4e:2a:b9:0f:9e:b6:77:63:f9:db:36:0d:
         2e:15:39:cd:47:f9:e4:1c:9f:66:33:a5:3d:4d:30:c4:4a:90:
         99:89:7d:53:20:59:be:ee:a3:5f:1c:fe:e0:40:37:1e:c7:f4:
         3c:b0:b5:af:29:45:ca:96:6d:2a:c8:fb:6f:d3:c4:e7:88:4e:
         10:40:85:da:8a:69:25:4e:c7:b6:d8:78:2d:fc:c3:ed:4d:51:
         0a:38:af:c7:a7:a1:ea:d4:04:e0:70:b1:2b:ec:9d:09:9c:14:
         91:94:7b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----