Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/64b8701c2b55266a7ce55e75f0b3466fac8b5688.roa
File:                     64b8701c2b55266a7ce55e75f0b3466fac8b5688.roa (raw, json)
Hash identifier:          LvF6ezIGEtHodWPzvcp0kIikUo5vfu1p8mcYOZ5y7aA=
Subject key identifier:   60:67:8A:F5:74:FF:5C:3E:FB:68:FE:61:14:38:68:F1:4F:35:07:36
Certificate issuer:       /CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
Certificate serial:       05797D
Authority key identifier: 33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/64b8701c2b55266a7ce55e75f0b3466fac8b5688.roa
Signing time:             Wed 24 Mar 2021 14:28:53 +0000
ROA not before:           Wed 24 Mar 2021 14:28:53 +0000
ROA not after:            Tue 24 Mar 2026 14:28:53 +0000
asID:                     270066
IP address blocks:        200.219.4.0/22 maxlen: 22
                          2803:5ce0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358781 (0x5797d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac4a9de92f1a8d0dc7792dc0b67187407cccb10
        Validity
            Not Before: Mar 24 14:28:53 2021 GMT
            Not After : Mar 24 14:28:53 2026 GMT
        Subject: CN=64b8701c2b55266a7ce55e75f0b3466fac8b5688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:45:9c:45:2a:c0:1a:58:c4:bc:22:59:3f:c5:
                    06:c6:47:4c:41:71:81:85:35:ff:ba:6a:ff:96:32:
                    43:69:13:49:3a:7a:3b:c2:7b:ac:90:51:32:2c:b6:
                    f3:ee:52:3d:a9:c5:9b:1e:95:cf:4b:cd:e8:3f:4a:
                    dd:06:bf:d4:f3:21:68:4d:35:d5:96:98:b3:e2:b6:
                    f3:21:53:95:17:a6:00:37:7d:73:2a:29:6d:22:fa:
                    81:57:af:4f:51:29:80:ef:cf:2c:a2:08:68:4c:9c:
                    6e:4c:d4:e3:5b:b0:17:7d:6c:a1:07:23:28:1f:99:
                    3d:e6:e3:f5:9a:46:45:52:66:42:d2:3c:72:9c:be:
                    7a:97:cd:aa:c6:cc:64:4a:2b:41:f8:37:34:58:08:
                    e6:67:ca:9a:30:9d:19:1f:a1:3d:e6:2d:15:71:e8:
                    97:f3:8a:15:f4:e9:36:16:b9:d8:c7:9e:f6:ae:cc:
                    92:8e:63:26:38:30:10:fa:46:0e:de:f7:e3:f2:64:
                    62:77:24:ea:f6:4e:fe:ba:17:ce:7c:09:de:66:ea:
                    23:06:26:27:4f:df:a5:c7:cf:b9:58:62:f9:9e:2b:
                    87:a4:ce:22:3c:c6:06:11:d3:d9:4f:53:7a:f1:25:
                    9a:29:c7:64:6f:6e:fd:9e:c7:b4:ba:35:81:79:0b:
                    27:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:67:8A:F5:74:FF:5C:3E:FB:68:FE:61:14:38:68:F1:4F:35:07:36
            X509v3 Authority Key Identifier:
                keyid:33:5D:06:6D:41:C0:8F:1A:4D:3D:20:74:E2:68:68:15:A9:69:C7:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/64b8701c2b55266a7ce55e75f0b3466fac8b5688.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bb89396-91bb-4bc1-9418-4b8dfd81b0be/2ac4a9de92f1a8d0dc7792dc0b67187407cccb10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.4.0/22
                IPv6:
                  2803:5ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:1f:ce:94:c8:3b:81:b4:16:ad:ed:2a:fa:53:10:a2:41:ef:
         33:bd:71:40:9b:dc:d9:34:18:01:ea:45:05:14:2b:c2:09:43:
         4b:73:07:d6:b9:78:09:ce:44:6c:77:95:b9:89:b4:7a:09:10:
         1a:ca:59:15:66:34:8a:94:f5:72:bd:a5:23:a0:77:15:84:90:
         58:a9:0a:8c:fc:e7:2a:1d:12:e5:37:c5:a2:86:40:30:6d:cf:
         ec:96:c2:98:09:4e:aa:ae:68:a2:07:c6:69:85:a5:f0:ea:d8:
         11:76:c0:68:50:6d:23:57:ee:ac:3b:f7:ce:5c:55:e4:11:41:
         25:11:df:b8:71:a8:36:5b:4d:dc:f8:8e:5d:17:ab:a5:53:59:
         08:b9:2a:e9:12:ff:f4:b7:2b:a6:9b:80:26:34:04:bc:4f:d0:
         26:b0:78:df:25:cc:ab:25:f6:c4:be:66:ce:2c:72:ce:64:3d:
         5a:fb:fe:64:a0:d9:2f:be:02:25:4c:aa:f3:d2:b9:1c:f3:46:
         ff:52:fd:19:b7:64:d5:47:7e:0d:17:87:ed:61:bc:2f:b1:5f:
         d7:82:83:91:9f:52:66:dd:95:be:d6:1f:5c:9d:ad:3f:93:32:
         0c:1a:a6:1c:f4:66:9c:70:14:07:1c:f2:49:f3:ee:5c:4b:6f:
         05:1e:fa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----