Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2a2a195f-9a10-4da5-ab47-8017c0248796/4c6bffe8afd7c4ca1833bb31bc8896fb6552a3be.roa
File:                     4c6bffe8afd7c4ca1833bb31bc8896fb6552a3be.roa (raw, json)
Hash identifier:          bq7XQ/zcZmHyDRLvjyLtdY3s8bxhynIlVwVH/Ps+MFk=
Subject key identifier:   94:ED:B0:3A:5D:D8:D3:E7:0C:BF:3E:9C:13:A7:C5:BA:E4:E0:5D:F0
Certificate issuer:       /CN=d15243f77872a9cf9a82497af9ff36a4dbe75c02
Certificate serial:       0D8321
Authority key identifier: 43:13:CF:10:94:D6:DA:54:68:9E:CD:E7:E3:48:00:61:D7:2D:A7:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d15243f77872a9cf9a82497af9ff36a4dbe75c02.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2a2a195f-9a10-4da5-ab47-8017c0248796/4c6bffe8afd7c4ca1833bb31bc8896fb6552a3be.roa
Signing time:             Wed 24 Mar 2021 14:47:24 +0000
ROA not before:           Wed 24 Mar 2021 14:47:24 +0000
ROA not after:            Tue 24 Mar 2026 14:47:24 +0000
asID:                     3549
IP address blocks:        201.130.82.0/23 maxlen: 24
                          2801:11:a000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 885537 (0xd8321)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15243f77872a9cf9a82497af9ff36a4dbe75c02
        Validity
            Not Before: Mar 24 14:47:24 2021 GMT
            Not After : Mar 24 14:47:24 2026 GMT
        Subject: CN=4c6bffe8afd7c4ca1833bb31bc8896fb6552a3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8c:8d:a1:4c:a2:db:32:c7:87:c6:a6:92:bb:
                    56:34:17:45:ad:a6:8d:89:be:f2:42:b1:88:46:ba:
                    58:61:5b:c2:09:ba:ac:32:eb:d2:3f:c3:c2:b6:93:
                    3a:56:76:0a:60:c6:04:f2:86:9e:28:e2:6b:fd:22:
                    2e:90:71:ca:4a:ce:70:a3:3f:04:05:f9:58:95:4f:
                    8e:09:83:28:85:89:29:4c:67:23:25:fa:87:39:c8:
                    a5:73:b9:ba:66:74:1d:25:5c:81:3a:de:8b:db:d7:
                    72:f8:0d:91:43:cd:5a:79:48:1c:bf:f3:c2:0c:d1:
                    16:ed:5f:d2:be:48:0a:bb:1c:0a:37:3f:f6:24:8f:
                    cb:18:ab:2c:44:e8:d0:92:6b:b6:b4:c6:47:58:81:
                    18:ce:e8:15:7e:79:9f:de:2f:3b:76:05:86:ad:7a:
                    f8:8f:97:04:d0:a3:04:22:14:e4:16:48:bb:43:6d:
                    44:99:65:c9:7d:8e:5a:06:df:de:a8:aa:70:6f:5b:
                    32:64:5d:97:0b:d0:ee:d8:5f:fd:f0:2c:71:ef:09:
                    02:c6:f7:97:2a:12:41:fe:46:bf:c6:21:9e:09:f9:
                    bf:eb:b2:bf:a8:42:31:0b:db:23:b0:8c:00:b5:76:
                    35:61:31:cd:94:a5:c3:e2:04:3f:0d:35:0e:ed:d5:
                    fc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:ED:B0:3A:5D:D8:D3:E7:0C:BF:3E:9C:13:A7:C5:BA:E4:E0:5D:F0
            X509v3 Authority Key Identifier:
                keyid:43:13:CF:10:94:D6:DA:54:68:9E:CD:E7:E3:48:00:61:D7:2D:A7:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d15243f77872a9cf9a82497af9ff36a4dbe75c02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2a2a195f-9a10-4da5-ab47-8017c0248796/4c6bffe8afd7c4ca1833bb31bc8896fb6552a3be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2a2a195f-9a10-4da5-ab47-8017c0248796/d15243f77872a9cf9a82497af9ff36a4dbe75c02.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.82.0/23
                IPv6:
                  2801:11:a000::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:4b:73:77:e5:2a:39:3a:9f:14:81:ca:aa:11:4c:c5:82:05:
         cb:62:2e:59:01:12:40:4d:e7:ee:45:4f:c4:e6:60:77:d3:4b:
         e4:00:24:ee:0c:ac:25:2e:84:8e:63:d6:85:75:9e:50:8e:ec:
         c4:d5:36:95:49:1e:0f:92:72:c8:13:b5:cb:e1:f0:81:64:28:
         79:f8:b8:0c:cf:14:18:85:1c:d7:34:33:a7:60:41:25:2b:0a:
         51:6e:f1:0b:18:c3:90:74:67:ac:68:47:3f:d1:52:f5:a8:64:
         57:20:05:93:86:52:db:1f:28:78:e1:2f:d3:62:50:f6:1c:c4:
         62:e0:40:49:0e:ed:d2:78:a0:dd:54:93:ad:da:80:1e:47:53:
         f9:3f:2c:e8:ea:85:1a:76:13:7d:05:e9:8f:d2:2d:59:82:ba:
         b7:dd:16:d8:1f:26:80:e3:44:7d:16:72:48:e0:11:e4:20:2e:
         92:6f:ff:dd:c4:30:13:0b:17:3d:01:be:78:98:56:c5:2f:19:
         db:6c:4e:37:c5:07:02:97:30:3c:d8:c8:f4:da:42:81:2a:26:
         44:d2:ed:81:6c:dc:ae:7d:9c:fd:36:a5:5b:85:35:26:89:1a:
         0f:04:dc:05:f0:7e:8f:02:bd:10:85:02:42:3e:b0:6d:0d:a9:
         cb:2e:7a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----