Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/7bb5a25dc80ad090bb7e06c9b9d39344fd6aca2c.roa
File:                     7bb5a25dc80ad090bb7e06c9b9d39344fd6aca2c.roa (raw, json)
Hash identifier:          zzp9s2eXSop44t+6AsX9qU+HqSArWg7PP/hiE8zH97Q=
Subject key identifier:   C8:8A:5A:7F:70:75:35:07:61:76:0D:55:BC:C2:01:80:52:83:3B:94
Certificate issuer:       /CN=a3e78c1484e71c4beb14c4af115739b15109a6f9
Certificate serial:       1501CD
Authority key identifier: ED:CB:4F:3B:87:0F:78:FA:D5:A9:7B:9E:12:F4:06:91:B9:5C:CE:04
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e78c1484e71c4beb14c4af115739b15109a6f9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/7bb5a25dc80ad090bb7e06c9b9d39344fd6aca2c.roa
Signing time:             Thu 16 Feb 2023 20:01:43 +0000
ROA not before:           Tue 23 Mar 2021 14:34:37 +0000
ROA not after:            Tue 24 Mar 2026 14:34:37 +0000
asID:                     262589
IP address blocks:        201.222.40.0/24 maxlen: 24
                          2803:1010::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1376717 (0x1501cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e78c1484e71c4beb14c4af115739b15109a6f9
        Validity
            Not Before: Mar 23 14:34:37 2021 GMT
            Not After : Mar 24 14:34:37 2026 GMT
        Subject: CN=7bb5a25dc80ad090bb7e06c9b9d39344fd6aca2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:5a:3a:4a:17:31:9f:f5:0f:0a:19:c4:50:43:
                    31:b9:87:78:58:61:56:5e:a3:5e:ab:dc:0d:43:70:
                    d3:2c:8f:fb:6d:bd:b3:18:52:22:0f:e3:c9:50:ab:
                    f5:7b:3a:3d:a4:f9:ba:a2:9e:5a:4f:1e:7e:1d:fd:
                    fa:8d:0e:70:ae:3b:2f:9b:17:ed:9a:17:2c:08:e9:
                    8c:94:99:2d:bb:e9:32:93:e8:64:f9:b8:c0:ac:5f:
                    eb:12:dc:0a:cf:0f:b9:32:a4:d8:57:33:d7:37:93:
                    e4:8a:f6:35:c1:9d:69:8b:88:14:48:e5:42:58:c3:
                    f6:7d:76:df:ac:db:bb:9c:b0:44:23:52:14:e3:f6:
                    60:d9:70:cf:79:24:9e:cf:ee:24:78:49:2d:7f:c9:
                    03:fc:39:08:ca:ff:39:20:ec:53:3d:fe:14:73:95:
                    ff:d7:b6:7a:ae:7c:c7:07:d4:ff:2b:4e:14:ce:c7:
                    ba:82:95:4d:98:c0:ea:45:3c:3b:83:36:3c:c8:ea:
                    c6:d9:03:cb:60:c9:bc:2c:6d:58:b5:7d:da:18:10:
                    65:07:e5:22:5f:1b:f3:6c:14:29:22:42:d9:09:9e:
                    81:01:9b:08:30:82:ac:f8:aa:47:a6:32:3b:1b:1e:
                    c2:2c:c7:9a:8a:1a:6f:e8:d8:56:35:5b:26:d0:4a:
                    71:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8A:5A:7F:70:75:35:07:61:76:0D:55:BC:C2:01:80:52:83:3B:94
            X509v3 Authority Key Identifier:
                keyid:ED:CB:4F:3B:87:0F:78:FA:D5:A9:7B:9E:12:F4:06:91:B9:5C:CE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e78c1484e71c4beb14c4af115739b15109a6f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/7bb5a25dc80ad090bb7e06c9b9d39344fd6aca2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59a682d7-b5fb-41c5-a98c-e8fcab2f1fa5/a3e78c1484e71c4beb14c4af115739b15109a6f9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.40.0/24
                IPv6:
                  2803:1010::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:96:9a:de:f9:fa:43:93:28:4f:54:31:02:15:5a:79:fc:03:
         bc:cd:fe:36:96:0b:83:4f:3a:e8:58:91:a8:dc:38:db:a5:9e:
         44:8f:cb:a8:56:f1:d8:f1:f0:8c:04:32:38:39:36:5c:58:a3:
         9c:3b:b2:8b:47:6e:5d:c0:7c:4d:5e:4c:f1:12:34:60:29:dd:
         72:84:63:57:7b:7b:d6:c2:87:c2:f5:73:b5:e8:31:e9:30:2c:
         06:c6:cb:04:fa:0f:8d:ee:f0:23:d9:2e:a6:56:db:af:9d:6f:
         28:74:db:6f:36:64:4e:ee:0a:40:1e:27:70:b7:4c:3c:22:de:
         84:f3:7d:f4:7a:b9:f8:23:4e:f9:b9:9e:e0:1e:83:ef:f7:ce:
         e8:87:ab:e4:42:8a:d5:ed:1e:38:95:8a:e3:a5:ad:c2:f7:f4:
         4d:94:7a:67:05:84:10:8b:65:b2:c5:da:69:54:26:27:9f:92:
         9e:7f:76:6c:7d:8e:b2:3f:c1:58:1d:7a:cf:01:96:67:86:da:
         50:15:a3:5e:30:ca:75:ba:fb:ec:1d:03:25:c2:89:be:df:e2:
         97:a2:c1:07:1c:2e:c8:e6:b6:52:ee:d6:81:f0:0b:d2:16:c1:
         83:47:4b:48:d5:f3:51:bd:fe:7a:15:1b:ab:6d:6c:71:0b:2d:
         92:6f:9c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----