Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/15d0cadb2080de805952eda598b1b226c4db5061.roa
File:                     15d0cadb2080de805952eda598b1b226c4db5061.roa (raw, json)
Hash identifier:          /CjpzU12ieglQUddav5/ZGqzNcl0ug2j/lbLbalDV1g=
Subject key identifier:   C8:5E:05:50:F3:3D:50:14:1B:13:56:3D:C2:D5:6A:13:99:D2:0A:C0
Certificate issuer:       /CN=cc3aa122dfd9e78c282ee13cf25302c07b4c605f
Certificate serial:       148833
Authority key identifier: D4:35:7D:8B:E1:0A:D4:A3:22:1E:6B:85:FA:32:35:A2:68:5D:C7:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/15d0cadb2080de805952eda598b1b226c4db5061.roa
Signing time:             Wed 12 Jan 2022 15:34:36 +0000
ROA not before:           Wed 12 Jan 2022 03:00:00 +0000
ROA not after:            Fri 12 Jan 2024 03:00:00 +0000
asID:                     27711
IP address blocks:        200.80.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1345587 (0x148833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3aa122dfd9e78c282ee13cf25302c07b4c605f
        Validity
            Not Before: Jan 12 03:00:00 2022 GMT
            Not After : Jan 12 03:00:00 2024 GMT
        Subject: CN=15d0cadb2080de805952eda598b1b226c4db5061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:78:c3:f9:fa:25:bb:f4:82:4b:91:bd:83:
                    3a:e4:b3:ac:1b:ba:ed:cd:d2:a3:e5:3c:25:ff:5d:
                    6c:f7:44:10:4b:01:76:89:56:e6:51:76:f9:bb:82:
                    d0:55:09:c5:b2:eb:4c:ac:ad:f0:12:0e:11:63:b0:
                    9c:fa:3f:7a:66:65:c5:2d:9f:59:8a:08:de:e0:47:
                    2f:26:f5:31:9f:aa:3e:82:b3:90:34:40:93:03:b2:
                    85:de:fc:e4:98:f6:db:f3:6a:7e:fa:87:8f:74:7b:
                    98:dd:58:48:af:e4:1f:56:4f:61:bc:be:a4:23:51:
                    cf:74:3c:c3:26:b1:b5:03:38:25:3d:f1:19:eb:5c:
                    ad:b6:96:81:a1:cf:d6:a9:d3:66:24:a7:51:6b:d7:
                    2e:46:d1:ad:fd:fb:85:45:00:79:51:e1:93:45:70:
                    31:8c:8f:bd:0c:d3:ee:bf:91:39:b7:2e:60:5d:07:
                    fb:83:c4:c2:61:98:11:f2:e9:f6:ca:52:7e:56:c5:
                    94:26:6a:a3:b2:f9:f0:a5:60:a7:8c:64:ad:1f:1c:
                    4c:2c:22:df:ee:95:64:ac:43:9d:01:b1:c7:f2:e6:
                    8c:3a:9d:4f:27:f6:cf:f6:80:be:06:d5:06:03:97:
                    c9:cc:aa:6c:fb:f7:31:16:bc:b3:a3:e3:8e:ac:25:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5E:05:50:F3:3D:50:14:1B:13:56:3D:C2:D5:6A:13:99:D2:0A:C0
            X509v3 Authority Key Identifier:
                keyid:D4:35:7D:8B:E1:0A:D4:A3:22:1E:6B:85:FA:32:35:A2:68:5D:C7:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/15d0cadb2080de805952eda598b1b226c4db5061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.80.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:4b:35:75:ab:87:31:75:f0:0d:d8:66:85:11:6c:6c:7a:02:
         ed:86:06:4f:06:75:b5:46:ff:a9:b8:a3:e8:21:98:40:14:f9:
         46:b6:4e:0b:5c:10:f7:ae:1c:95:db:53:45:9e:c0:1d:31:bf:
         09:da:ea:91:2a:6f:d6:da:89:09:fd:e1:de:13:7e:0c:77:0b:
         e7:96:80:fc:b7:f9:79:fc:55:fe:71:93:ff:92:ba:d2:3a:42:
         2a:87:1a:6c:40:c2:bf:a8:e4:f0:b9:57:25:3f:ff:7d:d7:23:
         8f:82:58:e5:e1:68:2c:4a:d9:78:4e:4a:75:f2:69:d8:7d:d0:
         32:f8:3b:95:ca:9a:a1:64:33:c4:ad:ad:6d:cd:cd:9c:41:35:
         80:df:cf:73:eb:d6:69:a0:ec:ac:f5:94:5e:6c:87:fd:40:15:
         5e:0d:47:16:74:bc:29:0c:61:d2:1f:c7:b3:63:60:6c:31:9c:
         ba:51:f6:b2:0b:6f:8b:aa:88:0f:02:5f:d0:44:1f:7e:ca:d6:
         50:86:db:98:08:a3:35:92:9b:f0:0d:f1:4a:75:74:41:7c:58:
         d2:f9:eb:7a:1f:48:5e:f5:72:93:23:42:53:d3:a6:93:8e:e9:
         a7:80:11:55:1f:96:31:23:52:11:1e:64:eb:80:7c:94:f0:be:
         09:c4:2f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----