Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/45a8f2561f561567567dc5947924ca1a48027951.roa
File:                     45a8f2561f561567567dc5947924ca1a48027951.roa (raw, json)
Hash identifier:          JAWB2SluAfYsL4TSmA+xwdn/5KoL1ZZ4+EyqsfI2BcI=
Subject key identifier:   0C:4F:62:79:3A:3A:DD:D6:BE:CB:EA:02:7F:71:56:75:95:83:71:53
Certificate issuer:       /CN=e5402bfe1ad870c061abac12431f9dd6da475fb9
Certificate serial:       0D3BF9
Authority key identifier: 7C:B9:EE:3B:15:EC:BB:AA:BE:65:A3:4D:36:6E:CC:FB:49:FF:CF:F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5402bfe1ad870c061abac12431f9dd6da475fb9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/45a8f2561f561567567dc5947924ca1a48027951.roa
Signing time:             Wed 24 Mar 2021 14:37:10 +0000
ROA not before:           Wed 24 Mar 2021 14:37:09 +0000
ROA not after:            Tue 24 Mar 2026 14:37:09 +0000
asID:                     28050
IP address blocks:        200.74.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867321 (0xd3bf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5402bfe1ad870c061abac12431f9dd6da475fb9
        Validity
            Not Before: Mar 24 14:37:09 2021 GMT
            Not After : Mar 24 14:37:09 2026 GMT
        Subject: CN=45a8f2561f561567567dc5947924ca1a48027951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:5b:c8:f2:31:17:46:1b:85:42:07:ab:4e:
                    b6:ea:8e:14:2d:8d:f3:da:d0:62:76:cc:75:9c:2f:
                    a5:3d:02:6e:f2:f5:55:0c:47:61:8e:35:76:29:ab:
                    1d:44:c0:81:22:c8:c6:a6:a8:53:3f:58:6e:3e:f6:
                    f5:fc:18:e2:7f:f7:5c:3e:b5:28:a0:d6:33:1f:e8:
                    75:5e:1d:75:13:14:f9:e4:8e:93:9a:91:c0:15:44:
                    43:98:63:0d:c2:2b:d7:21:f4:bd:98:8b:0c:95:76:
                    e9:f1:79:81:b3:e5:0f:77:f0:87:b8:6e:d1:22:f6:
                    8a:df:1d:6e:32:c1:20:c1:5e:58:c6:ee:d1:af:21:
                    a4:84:83:af:2e:50:c9:4d:20:c9:e7:80:10:1f:e0:
                    1f:bb:c3:ca:e1:6f:05:7a:b3:12:a1:c5:c0:a6:b0:
                    7c:27:c8:62:ae:9d:48:d0:ee:f2:5e:8c:b2:74:51:
                    3b:07:e7:a2:17:56:0e:83:81:d7:68:8a:86:9c:66:
                    b4:53:0d:31:7a:97:1f:5b:86:89:eb:3d:74:eb:0a:
                    95:f6:07:21:00:ee:ce:63:50:b1:60:42:85:a6:68:
                    9b:68:5b:31:b7:fb:2d:ed:80:48:71:94:58:e2:9e:
                    33:6c:d8:4e:92:20:50:62:94:a0:2d:1d:41:71:52:
                    d9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:4F:62:79:3A:3A:DD:D6:BE:CB:EA:02:7F:71:56:75:95:83:71:53
            X509v3 Authority Key Identifier:
                keyid:7C:B9:EE:3B:15:EC:BB:AA:BE:65:A3:4D:36:6E:CC:FB:49:FF:CF:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5402bfe1ad870c061abac12431f9dd6da475fb9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/45a8f2561f561567567dc5947924ca1a48027951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7bc32f4d-add6-4569-bb95-521c8124bc74/e5402bfe1ad870c061abac12431f9dd6da475fb9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.74.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:50:d7:cd:80:c7:54:b9:5e:9a:c2:a3:c1:fe:37:2e:8f:51:
         50:50:84:6b:d2:ff:fe:49:0c:a4:9d:a1:07:33:ad:e1:1a:fa:
         df:16:4f:99:6e:8b:2d:4c:8a:65:df:b3:69:63:b3:61:91:08:
         fe:1b:22:4d:68:0b:4f:ab:ca:18:cc:01:28:84:d5:2b:a2:61:
         10:ad:c6:01:38:a1:13:1c:79:dc:81:ce:8d:6d:74:8b:cd:a2:
         2a:a5:b6:15:6f:f9:6f:7b:0c:42:93:93:03:e6:08:49:ff:09:
         00:f3:ef:07:11:00:e7:23:0a:dc:37:19:ea:42:d0:cd:b6:39:
         3e:f2:50:58:8c:7c:85:03:03:3e:2c:b3:c6:d6:fa:16:43:ce:
         cc:09:cb:18:19:10:f4:88:c3:6a:19:14:89:95:4b:06:00:47:
         31:84:fb:f1:6f:0c:bc:a0:30:89:0f:7e:91:77:b7:d6:f0:ff:
         7a:d7:5a:53:78:3f:7b:5b:c4:76:f8:35:58:96:06:bb:d1:be:
         74:bf:2c:8c:dd:a9:5b:f2:b7:e9:e2:f0:47:63:7c:30:85:f2:
         2c:0d:a4:21:8d:36:f6:a8:72:f9:48:b9:2e:f0:7e:60:d9:40:
         0d:d5:4e:a6:79:64:18:6d:e9:ec:9f:91:3e:ad:20:30:af:36:
         1b:81:84:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----