Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5dff71bb-2969-4454-b9d0-dde12fa6c765/aceaca963d0a9c21a433ae6743f12ee6b6a9a22b.roa
File:                     aceaca963d0a9c21a433ae6743f12ee6b6a9a22b.roa (raw, json)
Hash identifier:          EC9EqU8p0TDXjwiud+AOurMjQtlfrg01e2d/KoGdZ+I=
Subject key identifier:   E2:32:56:D4:64:44:D3:02:5E:79:26:EB:03:E6:8D:28:25:11:39:A4
Certificate issuer:       /CN=bcd70bfc3861eb7e019391a06760bc1fb909a8fe
Certificate serial:       0D3586
Authority key identifier: 1C:DB:01:BF:88:4C:7D:6F:F0:83:0E:BA:4E:1C:0C:DC:BF:7C:98:DD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcd70bfc3861eb7e019391a06760bc1fb909a8fe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5dff71bb-2969-4454-b9d0-dde12fa6c765/aceaca963d0a9c21a433ae6743f12ee6b6a9a22b.roa
Signing time:             Wed 24 Mar 2021 14:33:00 +0000
ROA not before:           Wed 24 Mar 2021 14:33:00 +0000
ROA not after:            Tue 24 Mar 2026 14:33:00 +0000
asID:                     27745
IP address blocks:        186.159.96.0/20 maxlen: 20
                          190.4.64.0/20 maxlen: 20
                          200.6.144.0/21 maxlen: 23
                          2803:a000::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865670 (0xd3586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcd70bfc3861eb7e019391a06760bc1fb909a8fe
        Validity
            Not Before: Mar 24 14:33:00 2021 GMT
            Not After : Mar 24 14:33:00 2026 GMT
        Subject: CN=aceaca963d0a9c21a433ae6743f12ee6b6a9a22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:b9:eb:b7:22:fc:2d:1a:a9:f5:28:73:79:
                    9d:a0:8f:62:67:cf:34:d4:33:33:86:bc:51:ce:dd:
                    5f:b6:9d:a7:00:65:2e:b8:3b:3f:49:c3:86:0d:91:
                    8e:8d:9b:e4:9a:65:4d:c5:29:cb:0b:c0:35:bd:87:
                    c8:90:a4:62:84:be:59:71:4a:95:a3:79:c1:44:59:
                    d2:15:b4:7f:03:2a:d4:6b:3d:00:c7:23:a1:9c:ab:
                    33:7c:e6:00:9a:ad:60:d6:d6:45:31:51:ee:c7:08:
                    07:d5:c8:79:d2:95:03:ab:8e:98:83:1e:9c:ad:d4:
                    e4:90:0a:ca:f8:4b:84:2d:79:b6:fd:22:ae:f3:53:
                    db:88:d2:93:82:69:47:83:ec:4e:61:16:8b:2b:9f:
                    e5:9f:72:36:9b:12:b2:c1:38:71:48:75:a1:80:be:
                    f2:62:4a:36:c4:11:b3:51:bf:f4:57:67:78:15:52:
                    d8:2a:b9:16:6f:bc:fb:e1:b3:0f:ba:93:4e:0b:e7:
                    50:8b:82:31:52:81:cf:48:ea:3e:3c:53:2d:60:77:
                    a5:83:b1:4f:08:a9:a6:52:c4:30:e3:c3:43:f8:06:
                    a9:d5:1a:34:ac:83:ae:42:22:64:0c:d5:dd:7d:dc:
                    95:76:5f:a9:8b:f2:b1:25:94:22:db:af:f4:07:04:
                    2b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:32:56:D4:64:44:D3:02:5E:79:26:EB:03:E6:8D:28:25:11:39:A4
            X509v3 Authority Key Identifier:
                keyid:1C:DB:01:BF:88:4C:7D:6F:F0:83:0E:BA:4E:1C:0C:DC:BF:7C:98:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcd70bfc3861eb7e019391a06760bc1fb909a8fe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5dff71bb-2969-4454-b9d0-dde12fa6c765/aceaca963d0a9c21a433ae6743f12ee6b6a9a22b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5dff71bb-2969-4454-b9d0-dde12fa6c765/bcd70bfc3861eb7e019391a06760bc1fb909a8fe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.159.96.0/20
                  190.4.64.0/20
                  200.6.144.0/21
                IPv6:
                  2803:a000::/32

    Signature Algorithm: sha256WithRSAEncryption
         06:bb:8d:c5:1b:35:03:fe:46:09:d6:22:d6:3b:98:fe:17:2b:
         63:e5:42:68:69:cd:b8:78:48:f1:eb:51:b5:40:66:70:50:c2:
         4e:1f:55:fc:cd:b5:f7:04:2f:30:40:92:73:13:4c:25:cf:54:
         3d:d5:fa:76:77:c7:4e:60:7a:d2:a6:24:99:ae:c3:7a:33:08:
         e4:78:f5:2d:92:99:de:7a:34:f5:8a:a4:91:42:c1:2f:5d:b9:
         bb:e5:f2:f5:15:b4:e9:01:bb:9c:cf:6d:87:ee:1f:5c:0d:7d:
         d4:5d:59:10:35:08:93:1f:e2:cc:db:d5:9c:f3:c6:1c:4f:0a:
         9d:5a:c4:87:b3:0a:d9:df:51:95:e1:ef:77:cb:d4:0d:10:8d:
         11:b8:b2:af:38:ee:85:05:e1:3f:bf:8f:01:ef:9d:ae:91:08:
         2e:63:68:ea:50:ab:ce:8d:d3:fb:27:73:14:66:9d:93:e9:cd:
         2a:67:9c:a6:4f:e8:42:91:98:52:08:a3:01:99:e1:da:df:ed:
         37:35:24:05:f5:80:fa:c9:e5:f8:9c:db:66:71:c9:22:fa:e0:
         86:fe:7b:c4:60:51:00:0c:3d:59:81:17:68:7d:d1:b5:80:6e:
         fb:05:e4:2b:c9:9b:7d:b7:4b:a8:6a:7a:a9:17:07:55:3c:7a:
         f1:e7:44:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----