Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/9a20497d8bf88f3231a7156495127dbef4461d76.roa
File:                     9a20497d8bf88f3231a7156495127dbef4461d76.roa (raw, json)
Hash identifier:          5a6HqbzxL4wb4cP9WvEgeOxu3vECO3vgCcd2Od08+Qg=
Subject key identifier:   AD:06:CF:58:0C:17:C1:E9:3F:32:64:55:1E:3B:B9:02:B4:01:F8:44
Certificate issuer:       /CN=0346440b241d40bd970699e1c0567cf9a1f8b922
Certificate serial:       0C0674
Authority key identifier: 30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/9a20497d8bf88f3231a7156495127dbef4461d76.roa
Signing time:             Wed 24 Mar 2021 14:44:35 +0000
ROA not before:           Wed 24 Mar 2021 14:44:33 +0000
ROA not after:            Tue 24 Mar 2026 14:44:33 +0000
asID:                     8151
IP address blocks:        201.134.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788084 (0xc0674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0346440b241d40bd970699e1c0567cf9a1f8b922
        Validity
            Not Before: Mar 24 14:44:33 2021 GMT
            Not After : Mar 24 14:44:33 2026 GMT
        Subject: CN=9a20497d8bf88f3231a7156495127dbef4461d76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3d:c0:a7:80:99:fb:d1:7e:eb:bf:8d:33:dc:
                    2a:35:67:57:d6:17:fe:e8:8d:00:0f:1b:ee:54:d4:
                    9c:af:80:72:4e:13:7c:db:ad:c4:b4:8c:98:d6:b1:
                    dd:c3:54:cc:cc:37:39:64:e3:3c:8e:48:06:d0:50:
                    23:9b:2b:53:34:73:4e:c5:17:ac:40:fd:23:91:ab:
                    95:a8:bc:dc:9a:57:0d:1a:7e:c1:d4:83:1b:0e:17:
                    96:ed:80:61:2d:0f:3b:84:30:95:26:39:bd:51:2f:
                    6a:9d:8d:c1:e1:9e:65:be:cd:b3:a3:89:e7:f9:7a:
                    ff:0a:f3:2d:85:b6:30:e9:17:a5:70:b7:e9:97:bc:
                    d2:98:4c:f8:7c:d0:e8:06:dd:0b:5c:ec:f3:c8:a2:
                    61:93:0b:39:e8:75:66:2b:16:fb:fa:1b:2a:02:aa:
                    56:f0:6b:e3:69:32:b0:58:5e:ae:38:7f:45:c5:66:
                    f4:ee:62:08:da:65:b2:a9:9b:cb:e2:74:0a:9e:7a:
                    73:af:f2:9d:2a:52:0b:8b:d1:b2:12:95:c9:ec:e3:
                    c7:d0:15:c9:7f:14:d9:b6:47:cb:61:0f:c5:b0:70:
                    f1:10:99:14:1b:48:6f:09:3e:bf:98:14:0c:53:08:
                    c7:06:3d:7b:70:28:e6:dc:e0:26:8a:67:6c:c0:65:
                    2c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:06:CF:58:0C:17:C1:E9:3F:32:64:55:1E:3B:B9:02:B4:01:F8:44
            X509v3 Authority Key Identifier:
                keyid:30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/9a20497d8bf88f3231a7156495127dbef4461d76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.134.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a8:49:bd:54:b0:72:9b:94:ee:33:bb:fa:b2:7d:5f:e3:b6:89:
         69:3a:fe:49:59:75:10:ef:1c:78:0a:83:2c:48:94:b7:b9:4e:
         48:6d:50:cf:7a:39:5b:51:88:70:e4:33:09:cc:35:ca:f6:83:
         34:d8:c4:43:25:29:09:11:25:0e:00:5e:86:66:c9:78:91:8c:
         97:81:23:58:e5:14:6a:3f:0a:be:22:d0:93:ff:c1:41:f5:9b:
         ed:31:a8:49:77:16:b8:d4:c2:8b:af:7a:32:6a:50:9f:8b:4a:
         8f:07:15:ea:d8:93:4d:a9:f5:48:f7:a6:d1:75:95:1b:d7:6f:
         f9:3c:c6:1e:13:68:06:cd:f3:86:11:e7:2c:bf:19:d2:5a:3f:
         b9:d2:6b:7c:83:b6:41:13:13:55:16:3a:16:44:64:20:a1:fe:
         58:6c:6e:de:09:ae:71:1a:42:26:ac:30:ec:00:8f:b2:30:74:
         c6:bb:ef:fc:19:7f:60:f9:a8:3d:f1:77:6d:ca:0f:21:15:fc:
         8a:19:45:88:a1:e0:32:82:ab:1f:30:39:c4:75:c6:00:5d:37:
         93:47:6e:13:5b:53:60:f5:4a:1e:49:62:c9:c2:a9:26:52:c3:
         37:a5:b5:f4:58:b5:7a:39:23:e2:ca:5c:e6:ef:4d:6b:26:0b:
         7b:6d:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----