Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/491f1911-6c61-46b5-b668-463314c9aa6c/7a6a7100d305316e34006dd43620da29b0804479.roa
File:                     7a6a7100d305316e34006dd43620da29b0804479.roa (raw, json)
Hash identifier:          NkTnuhgq1RodCM7npm9qNO0zT47NOr45jk9zRoqcx6w=
Subject key identifier:   1F:F1:27:20:F9:75:EB:EB:EE:CB:36:5D:EE:10:6B:9E:B2:26:5A:58
Certificate issuer:       /CN=ccca05b7069dbb089c6667bf21b19e0ab7702520
Certificate serial:       0DABD4
Authority key identifier: E9:A8:12:46:E0:8E:CD:3D:A2:9B:04:94:9B:38:52:A2:7F:32:09:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ccca05b7069dbb089c6667bf21b19e0ab7702520.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/491f1911-6c61-46b5-b668-463314c9aa6c/7a6a7100d305316e34006dd43620da29b0804479.roa
Signing time:             Wed 24 Mar 2021 14:32:52 +0000
ROA not before:           Wed 24 Mar 2021 14:32:52 +0000
ROA not after:            Tue 24 Mar 2026 14:32:52 +0000
asID:                     264747
IP address blocks:        200.33.113.0/24 maxlen: 24
                          2801:10:5000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895956 (0xdabd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccca05b7069dbb089c6667bf21b19e0ab7702520
        Validity
            Not Before: Mar 24 14:32:52 2021 GMT
            Not After : Mar 24 14:32:52 2026 GMT
        Subject: CN=7a6a7100d305316e34006dd43620da29b0804479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:49:4a:90:9e:f8:62:29:6c:5b:b4:e3:30:
                    50:fb:2e:f6:72:cb:43:be:6c:14:4a:30:01:c5:85:
                    69:e6:05:fe:71:4f:ff:d6:d8:b2:80:f1:ee:ea:b9:
                    d8:3a:e8:47:86:32:cb:73:70:91:98:a7:c1:1b:25:
                    fd:8c:4d:30:3c:3b:8f:ac:c4:aa:9b:10:cb:fc:b8:
                    20:01:42:49:70:ca:41:f2:b1:d2:89:89:fa:19:47:
                    c2:03:41:0b:b1:96:25:42:dd:35:57:3f:a8:79:4a:
                    66:ed:90:42:71:3f:ae:0f:4f:7f:95:e7:84:b3:bd:
                    47:2b:0e:49:3d:10:91:04:10:6c:1f:37:a6:85:46:
                    2d:c0:b1:c1:31:88:d6:de:c1:b0:d9:61:4c:cb:8b:
                    26:78:52:48:1a:6f:97:3a:a5:93:b7:22:29:6c:23:
                    e4:4f:1a:27:f5:b8:ca:9d:06:c4:45:ee:db:db:33:
                    21:61:67:8e:b3:28:9c:11:8a:29:d3:bf:c5:8b:47:
                    47:4d:42:de:58:c5:a5:fc:a6:c7:6f:c4:c4:15:7e:
                    4e:a1:a5:d1:7b:37:0e:59:85:cf:b4:6a:c4:ac:c8:
                    21:b5:29:be:ce:7a:76:32:a0:fc:15:a2:9a:a0:24:
                    2e:9d:e6:8f:ee:a8:59:2b:65:ed:7e:6d:4c:1a:52:
                    6c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F1:27:20:F9:75:EB:EB:EE:CB:36:5D:EE:10:6B:9E:B2:26:5A:58
            X509v3 Authority Key Identifier:
                keyid:E9:A8:12:46:E0:8E:CD:3D:A2:9B:04:94:9B:38:52:A2:7F:32:09:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ccca05b7069dbb089c6667bf21b19e0ab7702520.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/491f1911-6c61-46b5-b668-463314c9aa6c/7a6a7100d305316e34006dd43620da29b0804479.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/491f1911-6c61-46b5-b668-463314c9aa6c/ccca05b7069dbb089c6667bf21b19e0ab7702520.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.113.0/24
                IPv6:
                  2801:10:5000::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:0a:28:4e:4c:6b:04:fa:c9:d0:d5:75:24:e0:d6:60:4e:2f:
         4f:43:dc:df:b1:5f:c0:19:2d:81:b2:5e:72:0f:c4:7c:c2:6d:
         d4:45:d4:a9:62:2a:0c:71:ca:81:a2:ed:29:f3:9f:77:ca:33:
         73:c6:c3:92:19:f9:73:dd:b6:fc:00:2f:4b:7c:d7:24:c3:f5:
         74:fb:e1:be:55:51:cd:29:1c:e0:f9:b9:b7:21:d1:bb:8c:23:
         fc:a4:6f:ca:cf:da:bc:35:bf:f2:cf:02:77:70:8c:5c:c9:7f:
         fc:11:03:6a:fc:ab:b3:9e:73:8c:27:a8:ec:71:f6:e1:f3:15:
         25:03:0d:c0:73:f1:cc:76:06:ef:ad:5f:4d:e9:37:86:87:d7:
         2a:3c:e1:94:46:f5:5d:dc:9d:f7:4e:db:d9:1d:0f:3d:48:c8:
         f7:16:ec:c2:a1:38:25:0e:6b:c7:64:ff:fb:e1:91:94:f6:5f:
         ad:0f:4b:ca:f4:58:d4:4b:3e:70:70:7e:c7:d4:d9:75:14:8e:
         33:4d:8a:8b:19:78:4b:eb:0b:ee:20:bd:44:54:1a:12:3a:7f:
         1e:68:95:59:15:2c:2f:a7:8f:ed:3e:c7:54:6b:72:64:f7:f4:
         65:f7:a7:b2:0b:90:ef:d2:31:03:d8:bb:e0:c6:47:9e:61:96:
         7f:70:53:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----