Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/973670fa-12af-4131-abd1-4ad4c2acb8df/11dc293d1052a511e6c5af2a501f25a10dd143f8.roa
File:                     11dc293d1052a511e6c5af2a501f25a10dd143f8.roa (raw, json)
Hash identifier:          Z3HFGmuoE8gld++VqWVgRT8pcbcOKRVwfK6QVwqMgZc=
Subject key identifier:   79:4C:03:AD:31:DB:25:C6:FE:87:88:02:9A:4E:EA:2F:79:2C:0C:50
Certificate issuer:       /CN=de259977e5d7ced66c5d6da44dc505822f806eae
Certificate serial:       0B4B16
Authority key identifier: 3C:EC:FF:7A:67:5E:4C:D6:2D:D2:78:FD:D5:93:CB:BB:A7:95:0C:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de259977e5d7ced66c5d6da44dc505822f806eae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/973670fa-12af-4131-abd1-4ad4c2acb8df/11dc293d1052a511e6c5af2a501f25a10dd143f8.roa
Signing time:             Wed 24 Mar 2021 14:38:57 +0000
ROA not before:           Wed 24 Mar 2021 14:38:56 +0000
ROA not after:            Tue 24 Mar 2026 14:38:56 +0000
asID:                     262257
IP address blocks:        200.126.48.0/24 maxlen: 24
                          2801:1e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740118 (0xb4b16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de259977e5d7ced66c5d6da44dc505822f806eae
        Validity
            Not Before: Mar 24 14:38:56 2021 GMT
            Not After : Mar 24 14:38:56 2026 GMT
        Subject: CN=11dc293d1052a511e6c5af2a501f25a10dd143f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:7f:b2:f2:60:16:18:ec:65:e4:ca:97:a5:bc:
                    c7:a9:ae:7c:b2:1b:bf:68:f0:90:28:27:60:1f:e3:
                    55:b4:a5:56:33:ea:c8:b9:34:c2:6e:48:ba:34:bc:
                    22:30:b2:12:16:e9:26:bf:29:c0:2f:bf:1b:ab:4f:
                    63:b2:3b:92:0b:0a:8f:75:fb:a2:27:fe:7b:49:c1:
                    c4:fb:c3:71:2e:3e:25:92:09:8e:9b:bf:a6:74:95:
                    c6:ba:0a:db:ae:57:e8:6d:65:33:1b:db:77:8a:2d:
                    4b:20:78:c0:2f:80:fe:3e:10:24:61:05:2f:e0:7c:
                    2d:b5:5f:01:67:c0:38:2d:74:3b:70:3d:5b:4f:7d:
                    b6:6d:46:04:d7:bb:9a:05:1b:ee:2a:4f:58:03:2f:
                    34:1f:c8:43:59:2d:4e:69:7d:47:25:98:ae:97:29:
                    d4:e3:68:66:ae:c3:a3:7b:2a:e0:b1:70:76:41:d7:
                    86:64:68:06:1d:a9:47:4d:5d:7c:26:cb:ea:23:cf:
                    b2:73:cf:d1:0d:c5:a5:2d:f3:bf:48:bc:52:98:c3:
                    3e:f6:f1:62:9c:eb:44:c2:35:a5:51:cf:59:ec:78:
                    ca:ff:33:4c:a7:d3:41:9b:1e:3b:8b:77:3f:fb:49:
                    87:49:53:67:a5:23:26:f7:46:79:a8:3f:45:51:1e:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4C:03:AD:31:DB:25:C6:FE:87:88:02:9A:4E:EA:2F:79:2C:0C:50
            X509v3 Authority Key Identifier:
                keyid:3C:EC:FF:7A:67:5E:4C:D6:2D:D2:78:FD:D5:93:CB:BB:A7:95:0C:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de259977e5d7ced66c5d6da44dc505822f806eae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/973670fa-12af-4131-abd1-4ad4c2acb8df/11dc293d1052a511e6c5af2a501f25a10dd143f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/973670fa-12af-4131-abd1-4ad4c2acb8df/de259977e5d7ced66c5d6da44dc505822f806eae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.48.0/24
                IPv6:
                  2801:1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:c2:36:4d:94:5f:04:71:83:86:b8:55:c0:76:2a:e8:46:55:
         07:fa:30:5c:78:5f:01:8f:9c:23:e2:8b:8e:f2:b1:3d:55:1c:
         a6:b7:c7:c2:a3:0a:28:cf:dc:22:0f:31:c6:da:40:a7:7b:6c:
         4f:69:ae:55:31:92:e0:33:7e:bb:c1:00:2f:51:10:24:53:f9:
         ea:13:cf:cd:c6:b7:85:25:47:f4:2f:86:5a:0d:19:fd:34:59:
         cc:cd:7b:9a:b5:99:2b:c6:15:96:29:6d:15:e0:cd:d6:b0:6b:
         ce:21:71:9e:e3:64:db:27:0f:9d:63:d9:c8:e9:cc:b4:77:0a:
         fd:e4:73:e8:cf:fe:f0:16:92:a4:5d:31:78:a9:eb:10:06:c5:
         6e:a2:24:0d:18:39:31:3c:7e:e0:97:18:01:33:10:9f:5e:30:
         60:b9:72:2e:d9:ff:39:35:d4:19:41:8a:d1:4d:e7:bc:b6:0c:
         c8:37:5c:7b:3c:ae:59:7d:5a:45:0b:0a:1d:c4:be:2d:4e:8c:
         36:a5:96:0a:b7:e5:cc:ca:d9:d3:d9:58:a4:0d:d6:06:21:da:
         7f:c3:68:62:fd:fd:31:ee:63:66:01:9c:c2:f6:c9:e5:94:e1:
         b1:6b:08:26:79:ae:d0:b5:2f:07:da:34:6b:67:8c:91:ed:f7:
         e6:6f:71:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----