Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/71f6b0fc380097b9fc037408f8d84eb63d06c9f8.roa
File:                     71f6b0fc380097b9fc037408f8d84eb63d06c9f8.roa (raw, json)
Hash identifier:          eERNulwXnyiWVQxGt/+Cy5dXhTZdbaTqCl+pac/XsuU=
Subject key identifier:   A2:EE:9B:C6:FE:0B:B5:7F:95:4B:9A:FE:89:06:F6:79:70:C4:EA:A1
Certificate issuer:       /CN=d46ebd602e50b2947122f994202d0ade1474b0a2
Certificate serial:       0A691F
Authority key identifier: 20:EE:EA:8F:81:BF:DA:00:61:F6:72:F2:32:FC:A6:A1:F9:9A:13:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46ebd602e50b2947122f994202d0ade1474b0a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/71f6b0fc380097b9fc037408f8d84eb63d06c9f8.roa
Signing time:             Tue 10 Aug 2021 21:59:03 +0000
ROA not before:           Tue 10 Aug 2021 03:00:00 +0000
ROA not after:            Sat 10 Aug 2030 03:00:00 +0000
asID:                     270018
IP address blocks:        200.23.75.0/24 maxlen: 24
                          2801:1da::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682271 (0xa691f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46ebd602e50b2947122f994202d0ade1474b0a2
        Validity
            Not Before: Aug 10 03:00:00 2021 GMT
            Not After : Aug 10 03:00:00 2030 GMT
        Subject: CN=71f6b0fc380097b9fc037408f8d84eb63d06c9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:26:69:08:b4:70:5d:b6:4f:c9:fe:49:e7:ee:
                    91:a9:f9:4b:24:20:d8:83:f9:0d:17:1f:81:0a:c9:
                    3d:93:17:6e:90:48:e3:aa:dd:97:8a:c9:bb:d1:40:
                    f6:e5:a9:79:d2:42:c1:a0:e2:db:96:6e:47:95:c2:
                    9b:1e:cf:f6:5e:af:1e:31:ac:72:50:6a:d3:26:0f:
                    85:77:d2:db:61:5c:86:c5:06:eb:dc:e9:d2:f8:bb:
                    c8:74:66:f5:f1:5c:66:d6:52:2e:4a:6c:27:40:a1:
                    c1:df:47:4b:2c:62:f9:d0:53:b0:59:7c:0e:f0:3b:
                    ed:64:c2:91:0e:52:bc:98:8e:a2:9e:e6:b3:ea:90:
                    be:c0:b9:f6:c2:d1:5c:66:93:64:c6:fd:d9:83:97:
                    79:53:64:5f:c5:d5:0f:30:05:fe:21:c8:9c:75:0f:
                    ae:a4:e3:b1:77:95:c5:98:81:73:33:c0:e8:6c:1e:
                    7b:61:0d:a7:51:de:e9:4c:0e:a0:3b:39:cf:ae:0d:
                    23:e0:7e:58:d7:25:5a:8b:67:f8:9b:c3:c9:3f:43:
                    d3:07:5a:7c:80:66:61:85:02:7c:ac:58:cb:47:33:
                    f9:3c:11:0f:e5:54:04:b3:86:23:4a:6b:14:64:b1:
                    b9:a6:a2:a3:dd:a2:e4:f5:56:99:80:4e:21:35:5a:
                    35:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:EE:9B:C6:FE:0B:B5:7F:95:4B:9A:FE:89:06:F6:79:70:C4:EA:A1
            X509v3 Authority Key Identifier:
                keyid:20:EE:EA:8F:81:BF:DA:00:61:F6:72:F2:32:FC:A6:A1:F9:9A:13:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d46ebd602e50b2947122f994202d0ade1474b0a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/71f6b0fc380097b9fc037408f8d84eb63d06c9f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7317b5e1-a799-4d91-95b4-f0cba864acbf/d46ebd602e50b2947122f994202d0ade1474b0a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.75.0/24
                IPv6:
                  2801:1da::/44

    Signature Algorithm: sha256WithRSAEncryption
         51:58:28:00:df:8c:db:54:c4:3b:9a:4d:9f:7e:52:f8:71:92:
         8b:7f:98:38:8a:d7:ef:bf:9f:10:90:15:05:c8:ab:57:99:01:
         56:9b:a4:f3:49:75:59:cc:f3:e7:a5:e8:8c:93:a6:3f:a3:5d:
         aa:0e:59:a8:ff:84:dd:0f:f8:06:24:f0:46:c2:95:54:25:b2:
         9a:2a:eb:ee:33:b2:c0:46:a1:c0:b1:02:41:e4:b8:f4:44:df:
         da:12:2e:41:9b:f8:7e:b4:37:d3:70:3e:aa:cf:7f:4f:16:00:
         ee:bc:bf:9a:89:b2:86:a2:76:78:4a:47:e0:14:47:16:45:ef:
         f4:b5:0d:3b:53:80:a2:f3:d5:95:ab:45:68:f4:cf:92:ee:5e:
         2d:76:f2:3f:59:a2:f7:0a:c4:bf:79:7f:90:74:8e:24:96:5e:
         5b:27:59:f2:e8:b7:c9:12:4f:04:3e:2c:25:93:40:dd:54:22:
         ef:ba:f3:c9:a4:60:c6:da:9f:2b:de:09:9c:bd:2d:8a:0a:ca:
         92:31:a5:f9:f1:2c:f0:c3:b9:22:79:3c:8a:e7:88:ae:11:ca:
         45:4e:cf:ca:ae:9e:e1:20:9a:5a:e4:7d:51:2b:bf:2f:b2:d0:
         91:fa:8c:26:e2:de:75:c3:c1:46:76:74:90:e1:34:89:a8:46:
         67:f3:1b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----