Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/14454639dd9f2b258c793589498b93ff6eda84bb.roa
File:                     14454639dd9f2b258c793589498b93ff6eda84bb.roa (raw, json)
Hash identifier:          HL3FFwLdg1PS+hSjme5a8EsAsqHownFu5UHGpG1SwOc=
Subject key identifier:   F7:A4:98:8F:B6:79:41:7B:19:95:F2:95:43:93:3F:15:10:4E:9E:9A
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1D0C66
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/14454639dd9f2b258c793589498b93ff6eda84bb.roa
Signing time:             Thu 27 Oct 2022 01:31:57 +0000
ROA not before:           Wed 26 Oct 2022 01:25:20 +0000
ROA not after:            Sun 27 Oct 2024 01:25:20 +0000
asID:                     27947
IP address blocks:        200.7.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1903718 (0x1d0c66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Oct 26 01:25:20 2022 GMT
            Not After : Oct 27 01:25:20 2024 GMT
        Subject: CN=14454639dd9f2b258c793589498b93ff6eda84bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:f0:c9:41:f9:18:1e:93:19:aa:49:63:18:
                    20:0c:6c:7b:08:b9:f0:2a:f4:0e:76:e9:1b:a1:fb:
                    47:29:06:38:26:04:ca:b0:8e:dc:bc:66:b9:17:bb:
                    c2:a6:36:d0:0a:bf:ae:3a:57:dd:57:56:de:88:61:
                    4a:39:48:59:8d:36:cd:8c:08:7a:20:18:c3:82:01:
                    0b:0a:d3:7d:62:f2:c2:47:8e:3f:c8:e4:eb:f2:4f:
                    a0:69:11:6d:4f:3a:ad:99:b7:c7:d7:0a:c5:cd:6b:
                    60:31:d4:99:4e:d1:f2:9b:fa:3f:af:50:a8:57:42:
                    27:29:90:f7:07:6c:c2:db:14:66:96:bb:76:50:c3:
                    3f:e5:3b:c4:c5:8e:e9:46:84:94:2b:69:06:da:66:
                    28:6e:9d:7a:a3:93:08:d1:b6:16:33:ae:c8:3f:48:
                    80:02:1b:43:1b:ac:26:03:bc:2e:95:86:b6:42:d3:
                    61:e8:56:de:a6:f5:17:11:70:00:dc:6b:5d:7d:c6:
                    9a:d4:f1:51:3c:2a:4d:67:10:af:d3:19:84:36:d5:
                    36:38:fe:7c:22:ac:d2:94:93:a9:84:08:ef:22:0e:
                    04:97:15:76:27:69:92:2c:c5:5f:27:52:4d:bd:d8:
                    82:68:77:70:d6:dc:ad:af:a6:ab:74:65:67:2d:e0:
                    92:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A4:98:8F:B6:79:41:7B:19:95:F2:95:43:93:3F:15:10:4E:9E:9A
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/14454639dd9f2b258c793589498b93ff6eda84bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:9f:45:f9:40:57:27:8c:10:70:fd:51:6d:23:a2:26:97:12:
         06:d6:bc:f7:16:12:59:54:fa:a5:80:da:19:39:a1:4c:f0:3e:
         11:75:a5:50:27:c6:39:62:0a:19:1c:b1:05:28:8c:15:83:46:
         e2:a9:7d:d9:e5:e5:c3:ec:b4:24:75:6d:3b:1c:09:db:b9:b4:
         e6:f9:bf:7f:fb:76:b4:1d:03:a4:6a:3a:c1:91:04:3b:64:89:
         0e:79:09:2a:f2:10:a8:f8:e8:bd:c4:03:07:53:5c:2f:86:3e:
         8b:f1:48:e7:c3:84:66:03:0c:a3:49:ec:af:5a:34:a2:f5:71:
         32:0b:e2:37:a4:40:41:9f:6b:49:e5:ac:85:a9:b2:52:0b:d4:
         a7:00:f4:e3:ef:0e:1d:ee:7d:a5:a3:a6:e5:c2:7f:40:ef:33:
         ce:fe:63:52:fa:f5:d3:e2:ef:e9:6e:80:df:20:eb:fc:6c:f0:
         dd:1a:59:0d:88:a2:97:84:fd:27:4b:c9:8c:f6:91:ef:b4:75:
         ff:0e:9b:0e:da:7d:69:f6:b0:7c:a8:cf:cc:3f:31:01:da:ba:
         e5:e5:19:a8:fa:64:12:1e:af:15:bc:5c:1d:a0:20:8f:a5:11:
         62:11:07:84:82:06:0b:e5:91:eb:cb:a4:19:0c:d8:91:97:c4:
         9b:f5:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----