Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/1034654726314b75b2ed1deff81b1ce9e5d58854.roa
File:                     1034654726314b75b2ed1deff81b1ce9e5d58854.roa (raw, json)
Hash identifier:          0IY6TJHk0kp0y+pY/j+dO+41OIdl+5hx4hM94gJABKg=
Subject key identifier:   05:1C:13:D7:35:64:88:42:47:7E:E5:31:34:F6:09:C2:9A:A4:C3:4D
Certificate issuer:       /CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
Certificate serial:       1A294C
Authority key identifier: 57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/1034654726314b75b2ed1deff81b1ce9e5d58854.roa
Signing time:             Thu 22 Sep 2022 17:16:47 +0000
ROA not before:           Thu 22 Sep 2022 16:33:11 +0000
ROA not after:            Sun 22 Sep 2024 16:33:11 +0000
asID:                     211612
IP address blocks:        200.10.177.96/27 maxlen: 27

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1714508 (0x1a294c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
        Validity
            Not Before: Sep 22 16:33:11 2022 GMT
            Not After : Sep 22 16:33:11 2024 GMT
        Subject: CN=1034654726314b75b2ed1deff81b1ce9e5d58854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5c:00:fb:1a:45:2d:ba:fa:37:e4:07:42:46:
                    50:08:90:af:ba:24:90:4e:80:51:3d:d6:d2:3f:4e:
                    cd:70:3b:61:32:cd:b3:60:43:a2:7b:70:62:96:98:
                    2e:c7:7e:71:bc:c2:a6:1a:97:f4:78:94:1b:78:e0:
                    83:2d:fd:91:cc:18:c3:07:6e:41:b6:fd:c1:34:13:
                    08:d5:9b:c9:51:62:b4:8c:b5:5e:78:d0:a2:30:13:
                    2e:c7:cc:db:ce:9a:a3:15:66:66:a8:91:59:a4:6a:
                    68:ed:03:c0:26:48:fe:ab:d0:f1:47:43:a7:71:15:
                    2f:af:63:d0:41:33:75:47:4e:70:17:cb:de:47:a4:
                    2f:5f:a9:ae:f1:96:8e:7d:ab:77:49:9d:57:a0:79:
                    d5:f8:4d:de:dd:93:2a:50:77:1a:09:aa:44:ea:50:
                    d9:2b:dc:0d:79:e0:60:d7:5d:7d:43:1d:86:58:66:
                    35:dd:0f:9b:c1:58:5c:be:c1:ea:ba:21:0a:c3:9e:
                    81:b0:c5:77:a3:57:b4:ef:fa:ae:fa:4f:c7:4f:27:
                    09:5c:52:de:54:e4:33:8e:85:b8:79:63:08:ac:55:
                    18:e7:1d:df:44:d5:89:e7:f1:92:12:b2:57:76:1d:
                    d3:fd:62:9c:62:f9:1a:23:68:a4:00:a5:5a:25:64:
                    56:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1C:13:D7:35:64:88:42:47:7E:E5:31:34:F6:09:C2:9A:A4:C3:4D
            X509v3 Authority Key Identifier:
                keyid:57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/1034654726314b75b2ed1deff81b1ce9e5d58854.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.177.96/27

    Signature Algorithm: sha256WithRSAEncryption
         38:86:9f:af:59:68:a6:2e:84:e0:4e:a2:05:be:ad:c2:6e:fc:
         9b:71:30:0a:0e:14:96:3c:60:02:ad:41:56:2e:5e:5d:4e:f1:
         9e:a7:9d:05:1d:a4:4d:c9:f4:38:50:21:f8:53:ab:b3:e3:8c:
         33:c1:7f:27:9a:b4:01:ff:f0:8d:a0:95:84:4b:46:9c:68:74:
         a4:53:79:25:35:47:d2:c9:11:67:18:4c:cd:b6:7b:1c:59:68:
         ba:9e:83:45:6e:de:90:c6:66:ce:c7:9a:00:d3:68:91:4b:19:
         26:bf:96:2f:bd:46:93:3d:7d:5d:f8:23:76:3a:88:5b:58:95:
         05:9e:64:85:ce:92:7e:17:ab:f5:cc:55:f7:59:41:f8:14:53:
         cb:d4:81:3a:56:d2:fd:5e:54:cc:6d:d9:29:10:fc:b6:33:3c:
         eb:c8:62:07:9f:ad:ad:92:a7:11:2b:d7:14:4c:d8:88:a9:4f:
         4d:ee:d8:05:83:c1:22:ce:c0:81:3e:53:a4:24:55:a1:6f:33:
         86:4c:94:30:b2:cb:ac:1f:73:5b:da:22:f5:2e:79:a7:5e:41:
         34:ac:c7:f8:3f:55:47:2b:58:2e:ca:e9:39:2b:53:99:06:fa:
         fe:eb:47:4b:7b:f8:56:bf:0f:5c:68:ef:d0:b0:f3:d9:c1:ed:
         c6:86:b0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----