Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/edb7664ac555be1a587d1b43e5a83992e65343b8.roa
File:                     edb7664ac555be1a587d1b43e5a83992e65343b8.roa (raw, json)
Hash identifier:          9lmJ/rGJUS/MvOxm/atnQrRBj6HIibb666HgWENwV9A=
Subject key identifier:   EA:88:03:15:65:3C:B0:62:02:A0:7A:6F:75:CD:D1:46:AA:0B:6F:AE
Certificate issuer:       /CN=8999a5bb1c665f3c628fb53842304cdf432ef4d1
Certificate serial:       0D133F
Authority key identifier: 6E:73:F1:01:D6:37:41:BB:04:10:00:51:85:18:BE:C9:85:62:1F:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8999a5bb1c665f3c628fb53842304cdf432ef4d1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/edb7664ac555be1a587d1b43e5a83992e65343b8.roa
Signing time:             Wed 24 Mar 2021 14:36:54 +0000
ROA not before:           Wed 24 Mar 2021 14:36:53 +0000
ROA not after:            Tue 24 Mar 2026 14:36:53 +0000
asID:                     266736
IP address blocks:        201.131.90.0/23 maxlen: 24
                          2801:0:4c0::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856895 (0xd133f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8999a5bb1c665f3c628fb53842304cdf432ef4d1
        Validity
            Not Before: Mar 24 14:36:53 2021 GMT
            Not After : Mar 24 14:36:53 2026 GMT
        Subject: CN=edb7664ac555be1a587d1b43e5a83992e65343b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:be:ff:4b:ae:25:4d:b0:71:55:2b:60:78:4d:
                    ba:9f:ee:fa:25:e1:20:5c:26:2a:17:eb:b4:53:6a:
                    d7:2f:44:4d:19:98:38:7c:cf:67:1b:b2:c2:8c:1e:
                    18:0e:77:bd:77:22:29:5e:22:57:b5:7b:0b:19:90:
                    26:7c:4e:52:70:b5:67:46:c6:d4:49:af:97:17:97:
                    b2:05:59:34:e4:86:39:f5:5c:df:3c:85:83:ad:51:
                    46:ac:22:b0:a7:50:c1:69:83:6a:d8:b3:08:84:d5:
                    8d:b8:38:55:9c:b8:03:13:0b:9d:a0:13:59:a5:4a:
                    99:d9:36:33:9c:a5:30:58:76:2d:aa:55:a7:1c:9b:
                    e0:3b:e2:ab:e2:cb:3f:21:8c:f3:77:42:cb:53:0c:
                    21:74:77:8f:c8:b1:a4:31:36:87:88:f1:a1:64:4e:
                    66:71:d2:4f:6f:07:69:43:74:f7:66:32:b8:24:b2:
                    f9:a4:1e:91:b2:87:c3:1d:de:c7:54:f2:d0:87:cf:
                    5a:f6:bd:79:5a:aa:28:0c:47:12:d0:15:25:3c:52:
                    19:25:da:a2:94:00:6c:9a:4b:82:a6:c2:dd:5b:24:
                    e6:ca:be:0e:51:0b:f1:b7:70:d2:f7:3a:0f:12:15:
                    45:e5:92:59:04:b9:e1:f6:d8:51:a2:1f:b2:cb:d9:
                    ed:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:88:03:15:65:3C:B0:62:02:A0:7A:6F:75:CD:D1:46:AA:0B:6F:AE
            X509v3 Authority Key Identifier:
                keyid:6E:73:F1:01:D6:37:41:BB:04:10:00:51:85:18:BE:C9:85:62:1F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8999a5bb1c665f3c628fb53842304cdf432ef4d1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/edb7664ac555be1a587d1b43e5a83992e65343b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/99a46d25-d932-4e31-95f1-0c917c49363b/8999a5bb1c665f3c628fb53842304cdf432ef4d1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.90.0/23
                IPv6:
                  2801:0:4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:99:a1:b5:67:6f:5b:67:01:e4:fc:64:0f:95:49:88:94:da:
         08:2b:85:8f:2e:4c:b1:a1:5a:a9:fc:ea:12:97:ac:2f:2e:4e:
         65:22:01:65:01:6e:33:ed:cd:ff:b5:d6:7f:c6:31:de:ec:95:
         6d:99:84:dd:21:9d:77:94:99:de:32:60:d3:22:7d:a2:ab:56:
         38:41:ce:55:22:ed:f8:56:f4:a3:1d:da:35:5f:5b:54:6f:07:
         f6:49:da:c5:fc:fd:a0:ff:8b:59:16:07:06:e4:1a:e4:0c:c4:
         da:58:47:8c:88:66:b0:c4:aa:e0:f7:87:8b:31:94:68:31:1e:
         cd:ed:a1:9a:56:3c:96:64:cf:62:ea:dc:f5:32:83:15:6f:7a:
         87:5a:a2:bf:e8:3d:93:a4:ce:c0:09:fe:ab:5b:c7:a2:4a:ac:
         06:48:60:95:e5:3e:9e:e7:1d:04:4e:73:f9:7e:54:c2:30:cf:
         54:b0:08:5e:45:37:86:5a:7f:06:df:80:04:7e:cf:86:56:92:
         c2:98:6d:31:72:65:a5:a1:eb:1d:5b:45:ba:91:cb:5b:13:be:
         14:f3:ea:f9:29:f6:ae:51:c3:2f:80:39:d8:8a:44:68:0b:2a:
         77:d8:01:3e:6e:3d:0b:f0:30:cb:78:ec:76:5d:e5:54:0d:99:
         03:d4:4b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----