Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2d3e5953-79ae-464b-a157-4913249dddd1/660c0e24ea33336a3937e8bd6eb61024f5c41bf1.roa
File:                     660c0e24ea33336a3937e8bd6eb61024f5c41bf1.roa (raw, json)
Hash identifier:          FByPYP367i2do57T85giIikXWRRu2a6bd1OA5Lp4j94=
Subject key identifier:   B9:EB:C8:56:AB:2E:95:DC:E6:CD:D1:F0:0E:84:BE:D0:B2:55:76:D8
Certificate issuer:       /CN=bb19c09d60068941cd9accf181184832d6474490
Certificate serial:       07C134
Authority key identifier: C1:72:FA:27:6B:4C:45:67:77:A6:D3:24:4B:19:58:A3:30:93:22:4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb19c09d60068941cd9accf181184832d6474490.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2d3e5953-79ae-464b-a157-4913249dddd1/660c0e24ea33336a3937e8bd6eb61024f5c41bf1.roa
Signing time:             Wed 24 Mar 2021 14:38:14 +0000
ROA not before:           Wed 24 Mar 2021 14:38:14 +0000
ROA not after:            Tue 24 Mar 2026 14:38:14 +0000
asID:                     269983
IP address blocks:        177.200.238.0/23 maxlen: 24
                          2803:2ee0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 508212 (0x7c134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb19c09d60068941cd9accf181184832d6474490
        Validity
            Not Before: Mar 24 14:38:14 2021 GMT
            Not After : Mar 24 14:38:14 2026 GMT
        Subject: CN=660c0e24ea33336a3937e8bd6eb61024f5c41bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d5:88:4a:4f:74:82:b3:ab:b7:02:1d:82:31:
                    79:1d:5b:a1:1d:bc:22:c0:9a:3d:80:01:68:60:44:
                    2f:e2:4a:4a:b5:91:da:93:9a:52:af:2b:29:af:d6:
                    0d:f1:8f:79:75:aa:4a:a2:45:c3:56:ea:48:28:d4:
                    58:21:d6:14:4e:da:70:e8:d9:43:dc:df:a2:c2:be:
                    f8:af:3e:91:21:5b:8f:58:a9:f7:c2:26:7e:1c:6e:
                    d5:57:b5:01:4b:1d:14:d2:e7:82:c7:63:b2:41:39:
                    f1:04:da:9c:45:83:08:83:fb:bf:54:a5:70:a9:21:
                    c9:93:3b:fc:02:25:4a:0e:a1:b1:7e:1c:d3:12:aa:
                    6d:f6:05:30:3e:22:85:af:7d:6a:53:0d:28:d9:73:
                    70:af:5c:8a:4c:f3:34:63:a1:40:9d:dc:fe:49:49:
                    b6:b0:c3:76:29:b6:82:b5:50:88:4c:b4:23:2b:b5:
                    72:50:a7:1b:4c:b6:57:b5:95:58:9f:24:48:0a:2e:
                    b5:c9:36:c8:2b:23:c1:cc:e3:02:7b:ce:14:f7:a6:
                    98:d1:2a:8c:ea:0f:60:95:16:25:5e:cc:87:2c:98:
                    48:bc:31:52:bf:e1:09:22:80:31:dd:f6:b4:cd:bd:
                    89:01:cc:79:2f:61:b2:cf:47:f8:cc:e6:17:8f:10:
                    1f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:EB:C8:56:AB:2E:95:DC:E6:CD:D1:F0:0E:84:BE:D0:B2:55:76:D8
            X509v3 Authority Key Identifier:
                keyid:C1:72:FA:27:6B:4C:45:67:77:A6:D3:24:4B:19:58:A3:30:93:22:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb19c09d60068941cd9accf181184832d6474490.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2d3e5953-79ae-464b-a157-4913249dddd1/660c0e24ea33336a3937e8bd6eb61024f5c41bf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2d3e5953-79ae-464b-a157-4913249dddd1/bb19c09d60068941cd9accf181184832d6474490.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.238.0/23
                IPv6:
                  2803:2ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:a3:b5:9c:8c:50:b9:a6:9f:2b:f9:95:90:fd:3a:6e:83:21:
         4a:2c:f9:0b:7e:a5:66:49:17:d4:26:32:0b:f2:0a:17:67:31:
         93:15:a1:4d:0d:cc:a5:07:2d:c0:ce:92:90:fc:dc:b7:6c:6b:
         4f:ce:ea:0b:50:b7:7b:d8:79:9e:99:5b:33:dd:b6:a7:8c:2b:
         1f:d9:7e:9b:84:94:b0:40:db:38:62:f3:23:22:66:ef:dc:2c:
         53:4f:63:18:1c:94:7b:cb:51:31:e6:05:c9:d4:cd:54:25:fb:
         b1:53:bc:fd:c7:f2:c9:5e:59:4d:74:16:71:ec:be:f0:21:73:
         b1:33:17:44:a1:b4:e6:67:19:81:4d:4e:24:ba:47:01:6f:af:
         87:6f:70:98:40:1a:21:06:d4:f5:45:01:8b:57:d3:5a:2c:7d:
         1c:72:d3:ac:8b:f6:d2:07:6f:d7:79:cd:f9:c1:e8:3e:4b:af:
         64:40:2e:b8:bc:9a:35:79:97:aa:05:d0:6c:c2:d4:9a:3f:c3:
         86:3d:5d:2a:b5:95:01:c0:dc:ec:bd:46:31:94:7e:77:67:a5:
         c7:fd:3e:3e:90:cb:79:a8:38:6f:c7:88:b3:5f:2b:e4:59:de:
         0f:4c:73:10:db:b3:55:3f:a0:11:9f:23:aa:71:d6:88:7f:c9:
         c8:bd:85:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----