Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/331dd298-7f92-4a8c-b0d1-1caba482cfd6/ae508d8b18e06a70f1102bcb0b9b42b03b7d19f9.roa
File:                     ae508d8b18e06a70f1102bcb0b9b42b03b7d19f9.roa (raw, json)
Hash identifier:          OOhU2gvaD4a7jothI5XjYKGLKqNfLmxzGNQc94JQ9AY=
Subject key identifier:   5F:23:44:1D:B5:0C:D9:CA:CE:40:C2:9E:68:AF:02:DB:48:E6:AF:9B
Certificate issuer:       /CN=b2eeb7d21a82dd2781e0690819a40b6f5cdee87e
Certificate serial:       0947E6
Authority key identifier: 10:1F:C6:99:E2:3B:6C:79:52:DB:06:3F:59:88:AB:BE:65:9E:A2:B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b2eeb7d21a82dd2781e0690819a40b6f5cdee87e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/331dd298-7f92-4a8c-b0d1-1caba482cfd6/ae508d8b18e06a70f1102bcb0b9b42b03b7d19f9.roa
Signing time:             Wed 24 Mar 2021 14:33:45 +0000
ROA not before:           Wed 24 Mar 2021 14:33:45 +0000
ROA not after:            Tue 24 Mar 2026 14:33:45 +0000
asID:                     269956
IP address blocks:        189.126.8.0/23 maxlen: 24
                          2803:fae0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608230 (0x947e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2eeb7d21a82dd2781e0690819a40b6f5cdee87e
        Validity
            Not Before: Mar 24 14:33:45 2021 GMT
            Not After : Mar 24 14:33:45 2026 GMT
        Subject: CN=ae508d8b18e06a70f1102bcb0b9b42b03b7d19f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:39:f2:7f:0e:98:a2:b0:66:68:9f:66:de:b6:
                    1c:22:83:7b:59:f1:31:57:e1:1a:d6:7f:db:23:3b:
                    15:66:e8:4d:72:f4:9c:7c:76:a5:db:44:f2:dc:49:
                    ed:21:2d:5e:f7:6e:0d:3a:2a:ef:62:50:fe:7e:64:
                    68:30:a9:98:bf:63:bb:a4:45:69:0b:e4:4a:b1:9a:
                    83:58:00:0f:41:b2:7a:a2:09:c8:86:66:e0:fa:3e:
                    cf:1e:f4:3f:4b:65:cc:0d:83:97:a2:a2:e1:d2:a5:
                    98:f6:b3:c5:0d:89:ef:49:60:97:1c:61:85:bf:98:
                    55:76:f7:96:b3:30:f7:5c:4c:f9:91:c7:bf:a6:1f:
                    6f:6a:ca:16:91:5b:8a:ce:68:c4:df:08:ff:42:cf:
                    22:b6:60:15:4d:c3:ae:b2:fd:8b:ea:c8:70:0b:d8:
                    f3:1d:02:a7:a2:91:39:9d:be:75:d1:3b:3f:b4:de:
                    71:3a:f9:9c:72:57:b7:92:03:6f:41:12:c6:2f:00:
                    b7:f1:a7:77:09:b6:fb:a7:1f:f5:a0:6d:bf:c1:59:
                    50:6f:00:c9:e3:68:1c:ba:14:2a:e7:ed:85:87:51:
                    d6:78:3c:c8:fe:21:71:da:26:c8:fc:5d:6a:0d:cb:
                    d0:75:9b:49:3a:12:32:39:5c:9e:6a:ca:60:91:82:
                    a1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:23:44:1D:B5:0C:D9:CA:CE:40:C2:9E:68:AF:02:DB:48:E6:AF:9B
            X509v3 Authority Key Identifier:
                keyid:10:1F:C6:99:E2:3B:6C:79:52:DB:06:3F:59:88:AB:BE:65:9E:A2:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b2eeb7d21a82dd2781e0690819a40b6f5cdee87e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/331dd298-7f92-4a8c-b0d1-1caba482cfd6/ae508d8b18e06a70f1102bcb0b9b42b03b7d19f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/331dd298-7f92-4a8c-b0d1-1caba482cfd6/b2eeb7d21a82dd2781e0690819a40b6f5cdee87e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.8.0/23
                IPv6:
                  2803:fae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:58:ae:70:40:92:7d:05:29:52:90:32:79:70:77:61:d2:9d:
         bd:13:56:6d:13:36:c1:96:d5:5a:e7:33:77:c4:ff:e7:c1:b0:
         62:e1:8b:cf:b2:50:62:04:bf:bc:28:2d:83:51:09:71:b0:e5:
         4c:cb:68:10:b3:b9:9d:bc:16:21:da:37:12:5b:2e:16:c7:50:
         5b:92:85:63:b7:6a:14:28:f7:e7:b5:74:f0:04:d8:b2:af:71:
         0c:b6:fc:f9:1b:5c:db:6f:b8:11:57:df:bc:ba:a5:40:7f:d2:
         6d:a1:dd:85:d2:83:46:3f:f1:36:fb:66:41:7f:62:fc:b1:70:
         a3:e0:c3:51:be:c3:12:ea:f5:6a:98:9f:ca:bf:39:87:8e:e7:
         c5:02:98:9b:59:e8:97:88:fd:83:77:37:e7:41:0c:1e:32:0f:
         16:e1:c5:f0:fe:ae:4f:2e:0b:74:c7:ef:b1:ac:e7:ee:fb:f2:
         0e:87:96:d0:03:a4:f8:bc:fd:dc:fe:6a:7b:63:a8:db:3f:d1:
         a9:32:36:94:64:11:01:c8:4e:84:d3:5a:de:eb:23:a4:3c:74:
         a6:cb:d0:7c:6c:f4:86:ae:16:33:5f:cd:da:68:76:92:0b:90:
         22:54:c1:70:bd:e4:20:2d:6d:47:88:07:79:01:dd:82:33:6b:
         e3:14:bf:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----