Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ba2079e-3c34-44c3-88ed-fed9d05d2ad8/de16c4a1b1cf9c46f0f7bb64fe61523b85ce643c.roa
File:                     de16c4a1b1cf9c46f0f7bb64fe61523b85ce643c.roa (raw, json)
Hash identifier:          Dd+s2zsyU1ONiI2NbLbpbXpwZBZEkg0UylDxWrM1xbU=
Subject key identifier:   F8:6D:EC:34:49:38:AB:DE:28:73:CC:FA:CF:5F:C4:41:DA:9B:6A:67
Certificate issuer:       /CN=a48d42aaaa2f17abc6bd69e654d1317d47c4d12d
Certificate serial:       05552A
Authority key identifier: 4E:8F:F3:7F:72:D2:83:82:4D:25:A9:2C:3E:A8:9C:FE:7F:E3:16:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a48d42aaaa2f17abc6bd69e654d1317d47c4d12d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ba2079e-3c34-44c3-88ed-fed9d05d2ad8/de16c4a1b1cf9c46f0f7bb64fe61523b85ce643c.roa
Signing time:             Wed 24 Mar 2021 14:43:10 +0000
ROA not before:           Wed 24 Mar 2021 14:43:10 +0000
ROA not after:            Tue 24 Mar 2026 14:43:10 +0000
asID:                     19332
IP address blocks:        200.13.16.0/20 maxlen: 24
                          200.39.96.0/19 maxlen: 24
                          200.53.32.0/19 maxlen: 24
                          200.53.96.0/20 maxlen: 24
                          200.56.224.0/20 maxlen: 24
                          201.168.0.0/16 maxlen: 24
                          2806:21b::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349482 (0x5552a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48d42aaaa2f17abc6bd69e654d1317d47c4d12d
        Validity
            Not Before: Mar 24 14:43:10 2021 GMT
            Not After : Mar 24 14:43:10 2026 GMT
        Subject: CN=de16c4a1b1cf9c46f0f7bb64fe61523b85ce643c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bc:2e:32:71:80:0f:4e:d3:a4:17:96:2f:3f:
                    a4:3b:5c:ad:c9:0f:35:bd:45:2c:a3:fc:91:33:b0:
                    d1:fd:71:31:6d:28:3e:dc:ed:fb:1e:76:5f:1f:c1:
                    c5:f1:cf:1e:89:27:60:2a:6e:d8:30:7f:7e:7f:22:
                    ac:9a:33:fb:b8:da:ae:cc:d6:ec:8b:57:1f:e8:b3:
                    a2:99:59:99:ca:11:9c:69:90:6e:b7:09:31:5c:eb:
                    7c:db:1d:fd:17:90:43:93:2c:6c:af:91:a4:58:72:
                    d3:ca:c8:bb:49:5d:e8:37:aa:da:5e:a9:26:2f:77:
                    5c:dc:21:3d:15:6e:8e:47:ea:fa:a5:95:3d:64:ed:
                    d1:bc:1d:b9:1a:d7:11:16:47:a2:14:d0:02:6d:ab:
                    7b:5d:70:3e:14:ec:52:d1:e9:11:51:53:b2:3f:bf:
                    ad:ef:40:fb:b6:2e:3a:e6:e1:8a:db:a9:cf:e7:43:
                    b3:de:50:ec:17:ec:39:c6:28:bc:da:a5:87:fd:15:
                    ab:c4:8c:84:f8:f9:e9:1b:38:ca:45:a5:a3:6a:65:
                    e9:af:fc:9a:4a:ac:3f:a9:ac:04:e6:18:65:c0:fc:
                    16:b8:e8:55:c2:ff:4c:40:47:31:06:e2:40:22:a2:
                    ff:3a:0d:22:e4:46:e8:2c:59:db:e3:d9:f9:78:fa:
                    71:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6D:EC:34:49:38:AB:DE:28:73:CC:FA:CF:5F:C4:41:DA:9B:6A:67
            X509v3 Authority Key Identifier:
                keyid:4E:8F:F3:7F:72:D2:83:82:4D:25:A9:2C:3E:A8:9C:FE:7F:E3:16:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a48d42aaaa2f17abc6bd69e654d1317d47c4d12d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ba2079e-3c34-44c3-88ed-fed9d05d2ad8/de16c4a1b1cf9c46f0f7bb64fe61523b85ce643c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ba2079e-3c34-44c3-88ed-fed9d05d2ad8/a48d42aaaa2f17abc6bd69e654d1317d47c4d12d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.16.0/20
                  200.39.96.0/19
                  200.53.32.0/19
                  200.53.96.0/20
                  200.56.224.0/20
                  201.168.0.0/16
                IPv6:
                  2806:21b::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:f7:35:a8:b7:81:39:b9:3f:da:a7:8b:f0:96:ef:4d:d6:bc:
         7a:63:aa:ba:3d:09:4f:c9:a5:ba:27:96:23:30:6e:a4:0d:3c:
         a4:bb:b6:7d:2b:9a:5c:5e:c4:18:c3:75:39:52:e6:a2:aa:c0:
         54:ef:a0:e0:63:db:59:03:e7:7d:32:c9:72:0f:18:ad:1c:3c:
         95:cd:0e:cb:bd:52:2e:e5:46:82:43:a0:85:c7:93:69:f4:68:
         1e:a9:ab:8b:67:2f:fc:e9:26:08:de:68:57:b9:ca:a7:42:f4:
         e5:15:72:a5:29:2b:d2:f4:36:d2:d5:ff:4c:11:d7:a2:f2:29:
         96:63:aa:0e:13:52:b5:3f:9c:00:eb:d1:d6:c5:58:de:1d:af:
         d1:64:2a:f3:77:c9:ce:e4:79:0e:db:97:bc:fb:2f:ba:36:ca:
         22:c0:03:88:15:49:f5:af:96:59:2a:75:f4:f7:15:9c:28:1f:
         9b:c5:09:ca:85:2e:9a:07:0b:b3:85:89:92:81:45:f2:91:5e:
         d0:84:db:43:3d:60:bb:98:95:ff:56:ad:fa:94:a5:a5:ab:08:
         53:99:1c:ca:04:9b:3c:04:fe:6a:6d:73:c2:c7:86:13:4b:73:
         7a:d7:c9:a7:4e:6a:db:94:02:33:a1:18:4c:45:8a:f4:36:0c:
         14:03:17:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----