Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8a9c871b-1329-408d-b94c-7a8e7b3fb421/7f05a360e755bdc9f7cba9784d760a12630abf09.roa
File:                     7f05a360e755bdc9f7cba9784d760a12630abf09.roa (raw, json)
Hash identifier:          27pK9pvu0Br4S82FoJ9IRUHhbcFxXvA8gBJj8LVU26w=
Subject key identifier:   74:8C:6A:F3:A3:D9:C6:05:17:ED:D4:88:08:21:36:04:C4:18:7B:FB
Certificate issuer:       /CN=1dfa6701821350c8e5bac2d02b86108200c25196
Certificate serial:       0D51B5
Authority key identifier: F5:00:DD:0F:14:C1:6E:45:53:02:9D:88:D0:10:58:52:95:D2:B6:F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfa6701821350c8e5bac2d02b86108200c25196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8a9c871b-1329-408d-b94c-7a8e7b3fb421/7f05a360e755bdc9f7cba9784d760a12630abf09.roa
Signing time:             Wed 24 Mar 2021 14:38:55 +0000
ROA not before:           Wed 24 Mar 2021 14:38:54 +0000
ROA not after:            Tue 24 Mar 2026 14:38:54 +0000
asID:                     52417
IP address blocks:        201.221.127.0/24 maxlen: 24
                          2801:0:410::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872885 (0xd51b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dfa6701821350c8e5bac2d02b86108200c25196
        Validity
            Not Before: Mar 24 14:38:54 2021 GMT
            Not After : Mar 24 14:38:54 2026 GMT
        Subject: CN=7f05a360e755bdc9f7cba9784d760a12630abf09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1f:eb:41:29:7c:f1:5a:d2:6b:e8:31:f3:c7:
                    c4:e4:9a:f9:50:ed:13:c8:9f:9b:d2:d9:7f:0c:76:
                    4d:00:12:da:e0:b9:bd:fc:e1:7d:35:18:46:9d:9d:
                    04:dc:d6:88:de:3f:53:25:74:71:d0:54:d1:43:8e:
                    6f:9a:fa:fe:64:97:55:84:de:7d:4a:ad:9a:39:58:
                    43:d7:08:58:98:99:c6:cf:59:ec:95:f5:00:19:03:
                    57:de:35:2f:e1:ec:6e:b1:81:18:28:cd:93:19:d2:
                    7b:4a:44:db:35:a1:1a:31:a4:d4:fd:99:62:ea:eb:
                    06:8c:88:68:e5:4b:a2:4d:58:94:ce:40:aa:e0:71:
                    45:90:e4:da:aa:c6:f7:11:58:5a:ab:0a:1a:d6:7b:
                    1c:d7:86:a5:2d:4e:9b:90:28:92:19:97:47:0f:de:
                    d9:51:f1:ac:b6:15:6f:4f:f7:41:47:0d:0e:a2:1e:
                    f2:72:8b:fb:80:18:5c:d2:90:f9:93:33:67:47:06:
                    d6:e7:4b:a1:3e:1d:c8:d9:8c:73:ef:56:9e:17:01:
                    e8:bc:cd:b2:ab:83:fd:7a:5d:86:6c:c8:52:b9:39:
                    aa:fd:0d:9c:42:1d:4d:e3:47:0c:d4:3a:4a:7e:6e:
                    db:f2:40:40:ef:32:53:f0:49:b4:2e:8f:57:af:59:
                    ff:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:8C:6A:F3:A3:D9:C6:05:17:ED:D4:88:08:21:36:04:C4:18:7B:FB
            X509v3 Authority Key Identifier:
                keyid:F5:00:DD:0F:14:C1:6E:45:53:02:9D:88:D0:10:58:52:95:D2:B6:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1dfa6701821350c8e5bac2d02b86108200c25196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8a9c871b-1329-408d-b94c-7a8e7b3fb421/7f05a360e755bdc9f7cba9784d760a12630abf09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8a9c871b-1329-408d-b94c-7a8e7b3fb421/1dfa6701821350c8e5bac2d02b86108200c25196.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.127.0/24
                IPv6:
                  2801:0:410::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:cd:ea:cc:ac:81:16:3e:82:81:f6:ac:ce:f4:9d:ff:24:b6:
         4b:f8:4f:50:47:92:4d:3b:8f:18:11:2b:e5:59:38:f6:56:ff:
         d2:be:57:05:02:6f:01:4d:f0:c2:2f:60:a3:42:c0:b7:02:d3:
         0a:d7:17:c0:c7:2d:22:4a:a7:73:86:b8:5b:93:75:14:c2:be:
         01:4c:aa:4f:29:60:ad:5e:92:42:eb:86:19:fd:03:8e:43:7b:
         ba:0c:3e:97:ba:e3:83:cc:6d:5a:f2:5f:a8:8d:0f:3b:1b:5f:
         f7:38:f3:1a:95:6b:a1:e1:95:33:05:fc:72:de:24:e6:fd:1e:
         12:2f:23:2b:f3:4d:41:9e:63:98:a5:05:1b:a9:ea:a4:db:3a:
         06:8b:e4:1b:b4:4c:b6:ed:e1:8a:77:34:e0:cb:0f:3d:06:b4:
         e5:81:0e:61:8c:05:0c:62:d5:2b:8d:0a:cd:d2:8e:f7:82:0a:
         1a:89:a2:77:dd:b3:9f:61:f9:70:bd:f3:dd:5f:be:9b:a9:85:
         05:ad:e6:1c:30:ab:b6:c0:29:61:06:12:92:44:3e:75:58:37:
         41:f0:96:20:47:63:2d:3f:87:e5:31:4b:8b:f7:f0:cb:0b:79:
         f9:36:d9:8e:b6:cc:1c:68:8b:f3:f8:df:29:26:fa:85:bd:fd:
         79:75:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----