Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c866c7d-773b-4fbc-a277-cc5ae1954591/2d9cbf8b94b6cde1cac8bb4904d14904f316b001.roa
File:                     2d9cbf8b94b6cde1cac8bb4904d14904f316b001.roa (raw, json)
Hash identifier:          oezpRl8fcrJlHUnZqzTJEKZh1Lc8yxDdQgzuzGuabuM=
Subject key identifier:   5D:8F:E0:30:54:3A:C5:A3:F5:E8:DE:0B:A4:40:FC:45:8B:00:47:23
Certificate issuer:       /CN=e5cb1422732fb0905512803e74a682044f078d09
Certificate serial:       0D05C5
Authority key identifier: 61:FA:18:74:EE:CB:71:5F:EB:02:B0:75:55:91:45:CE:2E:17:83:6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5cb1422732fb0905512803e74a682044f078d09.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c866c7d-773b-4fbc-a277-cc5ae1954591/2d9cbf8b94b6cde1cac8bb4904d14904f316b001.roa
Signing time:             Wed 24 Mar 2021 14:36:31 +0000
ROA not before:           Wed 24 Mar 2021 14:36:31 +0000
ROA not after:            Tue 24 Mar 2026 14:36:31 +0000
asID:                     263710
IP address blocks:        200.10.154.0/24 maxlen: 24
                          2801:0:210::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 853445 (0xd05c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5cb1422732fb0905512803e74a682044f078d09
        Validity
            Not Before: Mar 24 14:36:31 2021 GMT
            Not After : Mar 24 14:36:31 2026 GMT
        Subject: CN=2d9cbf8b94b6cde1cac8bb4904d14904f316b001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:3b:f8:88:8b:16:bf:46:0c:a1:14:ce:da:0e:
                    dd:c5:44:af:dd:07:7c:f9:1f:0a:3f:af:de:2b:16:
                    ad:03:39:e9:41:f6:cd:30:a7:1e:37:3c:dd:c1:ae:
                    1c:53:80:83:1d:33:5c:af:7a:7c:6c:33:2c:30:b3:
                    ff:fc:d3:03:79:4f:0e:d1:28:d9:99:4a:fe:3d:0b:
                    87:9a:85:99:15:57:85:b0:26:f3:77:ee:7a:94:76:
                    25:70:40:83:34:46:da:41:67:33:56:00:43:bf:98:
                    d1:01:eb:c7:75:e8:d9:7d:65:8e:0f:58:79:0d:83:
                    f3:9b:63:ee:5d:5c:0d:fd:ec:31:c5:16:b1:e4:2e:
                    26:bc:ac:d9:7d:f5:dc:f8:cc:a3:48:23:71:a4:ec:
                    b1:d9:28:07:f1:6c:c1:d3:6a:67:27:1f:6a:15:0a:
                    89:a6:b0:4c:fb:41:31:c5:0f:c5:3c:03:3e:f3:98:
                    fc:8a:50:76:56:e4:4f:90:ed:ff:b0:3d:cf:f8:8d:
                    1c:67:2d:52:aa:bf:d7:85:91:73:56:8d:93:f1:2e:
                    cc:17:a8:7f:76:7a:3d:84:82:c0:69:6a:10:67:f3:
                    cb:df:e0:48:ab:d7:b8:e7:12:e9:5f:27:b4:c4:03:
                    2d:a8:8c:7d:ad:8b:de:96:63:87:24:9c:fc:d1:d9:
                    97:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:8F:E0:30:54:3A:C5:A3:F5:E8:DE:0B:A4:40:FC:45:8B:00:47:23
            X509v3 Authority Key Identifier:
                keyid:61:FA:18:74:EE:CB:71:5F:EB:02:B0:75:55:91:45:CE:2E:17:83:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5cb1422732fb0905512803e74a682044f078d09.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c866c7d-773b-4fbc-a277-cc5ae1954591/2d9cbf8b94b6cde1cac8bb4904d14904f316b001.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c866c7d-773b-4fbc-a277-cc5ae1954591/e5cb1422732fb0905512803e74a682044f078d09.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.154.0/24
                IPv6:
                  2801:0:210::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:68:26:16:08:68:85:09:69:04:c3:f6:01:42:da:b5:2c:dd:
         ed:15:ea:e8:8d:0b:4c:20:0f:55:52:92:82:63:1f:0d:23:0c:
         fa:cc:ef:44:61:94:1b:d3:83:35:e3:9e:34:72:16:0e:1d:62:
         e4:89:be:cc:05:54:9f:c2:d3:c5:db:ba:cc:42:29:95:04:28:
         a7:49:65:f5:4e:ec:3c:22:50:ab:ea:ac:a3:a8:d7:45:c9:d6:
         07:00:99:0e:4b:a8:e8:ec:af:01:bb:5b:08:79:d3:11:9d:33:
         7a:36:bf:4b:b8:97:5a:f9:5d:0a:ee:2b:3a:b9:03:97:50:18:
         f2:75:66:63:ad:46:83:d5:a2:c9:6f:4c:68:06:9e:23:c2:f9:
         df:37:90:30:a9:a5:5f:b4:ef:ef:d2:02:1c:88:51:67:94:74:
         5e:54:f7:af:1c:0a:9b:8c:07:08:a3:c1:00:96:f3:96:ff:bc:
         67:3c:3d:98:b2:ce:68:8f:1a:47:f2:aa:d8:3a:d9:d6:41:55:
         ac:87:52:cd:ef:31:a2:7c:4a:17:f1:84:ac:bb:d4:01:c7:39:
         0c:53:6a:f0:59:ae:93:eb:4d:1f:90:95:f7:41:69:fc:5d:30:
         9d:b0:e9:9f:d8:72:cb:c2:89:5c:b4:18:c6:f3:16:9e:98:61:
         94:c4:4e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----