Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/20820e9fcddfce0a74ed5e84dae870b663e1a248.roa
File:                     20820e9fcddfce0a74ed5e84dae870b663e1a248.roa (raw, json)
Hash identifier:          dFCAQmLpxDvYiNmRtrDMdsp19IbnfnLTJ1OXnDY0jrA=
Subject key identifier:   29:42:69:EC:F9:C9:E3:B0:15:E3:21:2F:16:F7:47:27:55:A3:22:90
Certificate issuer:       /CN=a3e78c1484e71c4beb14c4af115739b15109a6f9
Certificate serial:       03E09D
Authority key identifier: ED:CB:4F:3B:87:0F:78:FA:D5:A9:7B:9E:12:F4:06:91:B9:5C:CE:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e78c1484e71c4beb14c4af115739b15109a6f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/20820e9fcddfce0a74ed5e84dae870b663e1a248.roa
Signing time:             Wed 24 Mar 2021 14:34:37 +0000
ROA not before:           Wed 24 Mar 2021 14:34:37 +0000
ROA not after:            Tue 24 Mar 2026 14:34:37 +0000
asID:                     59899
IP address blocks:        201.222.40.0/24 maxlen: 24
                          2803:1010::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 254109 (0x3e09d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e78c1484e71c4beb14c4af115739b15109a6f9
        Validity
            Not Before: Mar 24 14:34:37 2021 GMT
            Not After : Mar 24 14:34:37 2026 GMT
        Subject: CN=20820e9fcddfce0a74ed5e84dae870b663e1a248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:9c:c9:2d:f0:cc:e9:2d:b2:4a:4a:5b:01:64:
                    e8:75:a8:74:d2:22:9a:ea:c6:d4:59:2c:27:fa:cd:
                    c0:e6:3b:fe:85:e4:32:31:ab:d2:9a:7d:39:c8:3a:
                    f8:99:23:c0:0a:3d:c2:04:31:1e:66:7a:b4:e3:7c:
                    65:ed:57:07:b1:a4:69:01:6d:13:a3:12:84:a6:d9:
                    20:44:ff:e6:ed:1e:bd:cf:94:3f:0f:8e:f2:3f:4b:
                    73:19:a8:91:d8:c2:e8:f6:00:ce:39:e5:88:34:9a:
                    f2:ad:b3:ce:f8:ec:f1:19:3c:e0:26:a9:2c:79:d6:
                    78:c5:bb:e5:db:d1:e5:4d:bb:6f:43:a2:69:3c:82:
                    33:f4:73:d4:19:51:5f:8f:7d:50:8d:38:f9:37:86:
                    20:45:f6:dd:cf:32:44:8b:85:c2:f3:5c:c1:70:22:
                    28:96:8a:cb:9b:ce:88:6d:ac:f7:d8:e1:e4:50:39:
                    09:76:d8:c3:b9:b8:eb:39:74:5a:ef:da:17:05:0a:
                    4e:06:9b:66:33:f9:6d:a9:d4:31:88:1e:f8:07:92:
                    30:d2:a7:71:00:5e:5a:d1:c4:fe:98:c1:ce:f5:8a:
                    d5:4a:e4:1f:da:d2:4f:b5:68:79:b2:f9:14:26:42:
                    56:87:46:ed:d7:8d:40:cc:86:e3:72:9b:29:2c:85:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:42:69:EC:F9:C9:E3:B0:15:E3:21:2F:16:F7:47:27:55:A3:22:90
            X509v3 Authority Key Identifier:
                keyid:ED:CB:4F:3B:87:0F:78:FA:D5:A9:7B:9E:12:F4:06:91:B9:5C:CE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e78c1484e71c4beb14c4af115739b15109a6f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/20820e9fcddfce0a74ed5e84dae870b663e1a248.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/a3e78c1484e71c4beb14c4af115739b15109a6f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.40.0/24
                IPv6:
                  2803:1010::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:b3:a1:88:cb:19:ce:de:de:40:d2:cd:87:7a:b1:8a:9e:c9:
         1d:0d:2d:67:0a:2f:2f:84:6b:27:76:da:fd:8b:62:a6:02:5e:
         99:cc:dd:72:3d:95:b4:2f:32:9d:04:69:25:07:69:58:a0:88:
         50:f6:dc:d1:cc:ae:a8:9e:1d:08:d8:4e:15:02:40:c3:8e:22:
         fe:8f:13:70:f1:45:66:54:1a:01:b7:02:c6:4e:17:d4:f4:1b:
         bf:1d:52:6e:2c:79:99:6e:ca:d7:e3:9a:75:7e:e1:a1:bf:0e:
         1c:be:d4:4e:e4:a1:3f:a5:ac:b0:65:50:db:89:02:ec:03:3c:
         7f:6f:87:7b:88:da:ad:0e:85:90:1d:5b:dc:49:0e:6c:d1:c0:
         f4:0b:61:14:89:0b:b9:11:16:62:52:70:51:44:2d:33:27:f8:
         08:07:05:ad:ee:7b:d6:21:9e:16:0b:03:1a:34:42:c9:99:97:
         e9:90:e9:1b:93:ad:b7:93:79:50:6e:1d:a4:dc:b3:83:aa:8a:
         71:d9:e3:8d:35:fc:79:84:2f:ce:8f:0a:de:0e:5a:de:ea:9b:
         6f:25:89:c8:e6:0e:ce:fd:de:fd:02:2b:6a:e4:05:e4:a8:d2:
         e9:54:0f:38:bc:a7:9b:ca:73:77:32:c9:4f:85:f6:95:18:67:
         39:0b:d9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----