Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/ab6370aa6c525bd727539334e51ee67f3f8ccc34.roa
File:                     ab6370aa6c525bd727539334e51ee67f3f8ccc34.roa (raw, json)
Hash identifier:          iVZnEHtkgnctNSGJ9Ioe66mSiq9xDTVbhNVBnpxHkVs=
Subject key identifier:   86:E0:46:0F:AC:F4:FB:91:F2:62:9B:9D:93:0D:5A:FD:59:89:37:26
Certificate issuer:       /CN=3f7aac1ebb4a94b7e0894611ee24072627e16f9e
Certificate serial:       0D3B03
Authority key identifier: 55:12:0B:90:13:D3:A8:DC:DD:47:B6:84:9A:E3:8D:91:F2:6B:12:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/ab6370aa6c525bd727539334e51ee67f3f8ccc34.roa
Signing time:             Wed 24 Mar 2021 14:34:03 +0000
ROA not before:           Wed 24 Mar 2021 14:34:03 +0000
ROA not after:            Tue 24 Mar 2026 14:34:03 +0000
asID:                     52234
IP address blocks:        200.7.4.0/24 maxlen: 24
                          2001:1398:274::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867075 (0xd3b03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f7aac1ebb4a94b7e0894611ee24072627e16f9e
        Validity
            Not Before: Mar 24 14:34:03 2021 GMT
            Not After : Mar 24 14:34:03 2026 GMT
        Subject: CN=ab6370aa6c525bd727539334e51ee67f3f8ccc34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:e1:21:ba:de:32:40:69:14:92:b2:0e:76:
                    bf:d2:a0:d7:e8:4b:f8:61:07:9e:d8:21:ae:38:fd:
                    79:e7:b2:41:42:57:72:ca:91:c1:81:b9:b1:58:53:
                    77:6b:dd:69:56:e9:a4:1f:38:57:79:85:69:04:e6:
                    de:65:ef:2f:8c:d8:ca:70:28:70:36:44:32:07:98:
                    e2:bd:e7:9f:a7:53:1d:44:d5:6b:fd:8c:d4:32:21:
                    9f:2c:13:15:12:f4:aa:7f:94:f9:31:43:03:3c:ea:
                    e3:b3:8c:9e:8b:2c:da:92:fc:21:71:4a:51:88:8b:
                    be:7a:29:8e:36:a0:7e:41:6c:3d:8d:e8:77:da:a9:
                    2e:ef:bf:53:9e:27:bd:fb:14:cb:3a:7f:52:c9:f2:
                    73:52:1d:b8:40:af:ff:7a:a2:c7:34:bb:02:4a:0c:
                    66:dc:9e:6a:c0:4b:02:61:02:80:03:6d:29:32:5a:
                    2f:cf:55:8c:58:a0:75:d6:1f:23:d8:09:bc:10:fe:
                    71:dc:b7:c3:1a:0b:cb:c6:d1:cf:3d:bf:d6:5a:23:
                    8c:01:93:02:49:cc:29:e0:9e:ed:7f:91:f2:c8:e3:
                    21:e4:35:1c:d2:82:56:51:4c:e5:89:a6:1b:05:92:
                    5f:22:f1:19:5e:e2:53:22:bb:01:f6:10:bd:d3:e9:
                    a6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:E0:46:0F:AC:F4:FB:91:F2:62:9B:9D:93:0D:5A:FD:59:89:37:26
            X509v3 Authority Key Identifier:
                keyid:55:12:0B:90:13:D3:A8:DC:DD:47:B6:84:9A:E3:8D:91:F2:6B:12:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/ab6370aa6c525bd727539334e51ee67f3f8ccc34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.4.0/24
                IPv6:
                  2001:1398:274::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:dd:5b:97:16:21:4b:af:24:d9:de:6e:33:3e:2a:40:69:e4:
         76:07:c6:7c:6a:c4:c7:02:1e:32:79:2b:fb:60:d5:f2:20:df:
         a8:37:ee:6e:02:62:9a:b3:61:6d:97:f9:ea:83:13:6a:a4:77:
         5f:9a:8c:b7:59:60:f8:16:37:c4:da:b2:19:01:5d:78:f8:a9:
         21:e4:c6:21:a4:3a:1b:5a:30:f4:48:a9:c4:e3:f3:40:1c:f2:
         7d:52:22:8a:45:9b:d0:bf:5d:c4:dd:06:63:3c:1b:c3:16:d7:
         19:49:89:e0:03:72:70:b2:c6:13:c3:fe:ae:11:26:a0:ca:0c:
         77:e4:f9:23:49:d8:25:33:67:09:02:c3:61:b8:03:dc:9f:58:
         d9:9b:91:9f:1e:6b:2f:6c:c3:8d:96:af:35:59:e8:c3:0c:ab:
         69:5e:f6:57:82:f3:58:76:d7:f1:ce:93:9b:da:77:08:44:bf:
         84:71:5d:ed:c0:14:b5:a7:7a:a4:90:2a:37:5d:4b:d0:29:91:
         5d:a2:ba:9d:ad:a1:fe:53:7f:1f:f6:24:13:e5:81:02:15:f4:
         e6:6e:45:34:84:48:aa:51:ee:c2:b7:71:c0:55:61:7e:44:2c:
         b8:ea:28:c6:27:3e:6f:47:c6:a5:5d:48:5a:2a:a3:6c:97:4e:
         4d:bf:67:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----