Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/6d6adb4bfde9533de6846e97f8ac6178d21596a9.roa
File:                     6d6adb4bfde9533de6846e97f8ac6178d21596a9.roa (raw, json)
Hash identifier:          hnFYHj9giPWhSB9j6o+ppDWL8bhMqStOt9KrCxBP5Ec=
Subject key identifier:   79:B3:4F:64:E1:8B:68:FC:29:00:C0:C5:08:EE:89:9C:E9:65:88:87
Certificate issuer:       /CN=3f7aac1ebb4a94b7e0894611ee24072627e16f9e
Certificate serial:       0D369A
Authority key identifier: 55:12:0B:90:13:D3:A8:DC:DD:47:B6:84:9A:E3:8D:91:F2:6B:12:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/6d6adb4bfde9533de6846e97f8ac6178d21596a9.roa
Signing time:             Wed 24 Mar 2021 14:34:03 +0000
ROA not before:           Wed 24 Mar 2021 14:34:03 +0000
ROA not after:            Tue 24 Mar 2026 14:34:03 +0000
asID:                     52305
IP address blocks:        200.7.5.0/24 maxlen: 24
                          2001:1398:276::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865946 (0xd369a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f7aac1ebb4a94b7e0894611ee24072627e16f9e
        Validity
            Not Before: Mar 24 14:34:03 2021 GMT
            Not After : Mar 24 14:34:03 2026 GMT
        Subject: CN=6d6adb4bfde9533de6846e97f8ac6178d21596a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:83:ec:f6:da:76:3e:69:86:7b:dd:ad:9b:48:
                    84:f8:3a:c2:d4:a7:b7:08:1a:c3:f4:bb:22:02:0b:
                    da:06:17:12:68:c3:6c:c9:ff:04:be:08:0f:7e:59:
                    4e:eb:cb:dd:df:5e:8b:50:22:e7:83:21:c6:c2:40:
                    d8:d1:5f:fe:d6:3b:47:f0:9c:c3:c6:a3:ee:9f:e7:
                    1c:ba:98:c1:17:7a:5a:57:8f:0f:dd:7c:c7:d1:b1:
                    ef:9f:ad:6f:90:34:d6:33:0b:30:bc:f3:16:16:cb:
                    80:39:23:ff:0c:c7:67:3c:63:08:f8:3d:50:f6:91:
                    dc:56:af:36:75:bc:b5:f2:89:78:a2:e0:52:1f:86:
                    3c:0c:c5:09:01:91:ab:fe:2d:63:0b:c7:84:62:71:
                    8f:99:14:3d:a1:b6:5c:50:02:47:e0:7c:0d:0e:ed:
                    36:f4:2d:d8:63:e6:7f:15:68:ed:c3:35:5b:fd:b3:
                    c3:08:09:0c:ac:30:1c:4f:7e:0a:34:f7:33:8a:19:
                    96:99:d9:f2:2f:7d:01:36:71:db:05:0b:c5:45:47:
                    7f:b3:e1:99:f9:da:21:4e:65:96:2b:d8:d9:aa:0f:
                    74:d0:62:cf:96:4e:28:f9:94:c2:07:83:f0:bd:ad:
                    46:af:5a:c1:0b:66:81:c5:42:2c:9e:9d:f7:f8:4f:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B3:4F:64:E1:8B:68:FC:29:00:C0:C5:08:EE:89:9C:E9:65:88:87
            X509v3 Authority Key Identifier:
                keyid:55:12:0B:90:13:D3:A8:DC:DD:47:B6:84:9A:E3:8D:91:F2:6B:12:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/6d6adb4bfde9533de6846e97f8ac6178d21596a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.5.0/24
                IPv6:
                  2001:1398:276::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:9c:33:f5:64:d8:8d:3b:38:20:72:16:b3:b0:19:53:d6:ae:
         0a:7d:af:f3:94:c6:bd:dc:5a:97:6a:ab:63:a3:32:4a:89:df:
         0b:34:a2:3e:63:8d:2b:b3:91:89:83:a6:2c:99:ec:1a:75:d9:
         f5:67:f8:19:92:06:2f:73:09:87:bf:3e:4b:13:24:0e:72:c6:
         1d:6c:cf:75:dd:b6:f1:ad:55:ae:89:56:85:8e:86:68:30:ba:
         05:b0:37:0c:76:f6:ee:8d:07:19:57:c1:87:66:89:3b:b4:75:
         14:8d:74:f7:91:db:e2:0e:ec:5e:8c:c1:b2:f5:df:a3:e0:d2:
         4f:63:38:1c:80:7d:e2:c4:8c:96:a0:5d:f2:b7:95:93:b8:45:
         2f:82:e1:90:9a:55:aa:92:21:ac:43:81:09:d1:91:e9:d0:b7:
         fb:4e:0d:9e:3d:97:35:1a:08:01:5d:40:90:3d:40:90:a7:bd:
         eb:d5:0a:19:9f:e2:15:bb:73:dd:1c:c1:f4:e8:ab:d0:2c:13:
         bc:1b:c5:71:a0:39:be:5e:07:df:f2:76:e4:65:73:bd:ef:88:
         b4:28:ed:22:b8:ca:d3:99:78:33:4e:52:ac:45:33:97:d8:d2:
         f7:bc:8d:66:0d:48:24:c0:37:48:78:a8:49:73:bd:c3:86:30:
         03:1c:61:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----