Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135302e302e302f32312d3234203d3e203438343635.roa
File:                     3230312e3135302e302e302f32312d3234203d3e203438343635.roa (raw, json)
Hash identifier:          sQCFxZ4ut6gguRBbKCmjPGeX9yPwC2KaQLcea88BBtQ=
Subject key identifier:   0A:84:FF:5C:E7:64:79:ED:43:AF:7F:91:99:E1:9E:73:27:17:5E:C3
Certificate issuer:       /CN=27A336C5888011F6572981D08E87791A9EBE55D7
Certificate serial:       7C28923AA0F28DDC60D3025690AF088EEA83FB1C
Authority key identifier: 27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135302e302e302f32312d3234203d3e203438343635.roa
Signing time:             Mon 17 Jun 2024 01:45:00 +0000
ROA not before:           Mon 17 Jun 2024 01:40:00 +0000
ROA not after:            Mon 16 Jun 2025 01:45:00 +0000
asID:                     48465
IP address blocks:        201.150.0.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:28:92:3a:a0:f2:8d:dc:60:d3:02:56:90:af:08:8e:ea:83:fb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27A336C5888011F6572981D08E87791A9EBE55D7
        Validity
            Not Before: Jun 17 01:40:00 2024 GMT
            Not After : Jun 16 01:45:00 2025 GMT
        Subject: CN=0A84FF5CE76479ED43AF7F9199E19E7327175EC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ca:9d:20:d9:3a:c7:94:77:f6:ad:1e:27:b5:
                    cd:f7:3d:a3:04:c9:c9:f6:13:d1:37:c8:6a:1e:13:
                    73:0c:5a:06:34:81:0c:f1:38:43:0b:7d:05:5e:c1:
                    75:88:95:50:78:c6:26:df:49:03:bc:2b:05:ff:cb:
                    1a:ee:a8:3b:78:87:b3:4f:7f:54:cc:9e:a7:a8:64:
                    8e:ae:f5:08:d2:5a:30:5f:64:75:00:22:71:79:a1:
                    3b:99:ea:f4:14:5b:2a:23:92:aa:a1:b2:9a:7f:57:
                    6b:83:d6:76:07:46:05:f6:30:d0:3f:84:90:0d:ec:
                    3b:cd:09:5d:20:c7:88:61:1c:72:cd:25:8c:6b:06:
                    22:c9:3c:f0:ae:59:68:4a:a6:3b:07:68:86:86:85:
                    e9:6b:79:61:63:0a:95:2b:f3:fa:73:d2:20:e9:3a:
                    35:c0:c0:0e:52:71:79:cf:97:ce:ee:fb:0d:f8:d9:
                    71:5c:f8:91:02:ca:8d:94:27:12:27:80:1d:e2:90:
                    dd:db:a2:99:59:f0:9b:0c:04:90:c5:c5:d1:8c:41:
                    95:eb:ba:c8:a3:46:e7:e1:f4:e0:b9:85:a9:39:9b:
                    c5:d1:a1:04:b5:87:90:4e:b4:02:69:93:de:85:97:
                    0c:4f:54:9e:e6:8e:9f:94:11:37:48:55:e7:c0:69:
                    1d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:84:FF:5C:E7:64:79:ED:43:AF:7F:91:99:E1:9E:73:27:17:5E:C3
            X509v3 Authority Key Identifier:
                keyid:27:A3:36:C5:88:80:11:F6:57:29:81:D0:8E:87:79:1A:9E:BE:55:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/27A336C5888011F6572981D08E87791A9EBE55D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/27A336C5888011F6572981D08E87791A9EBE55D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/BC40F5C70215187970B1F90454979B379B8031087885262A7050AEE67B4A4AE2/0/3230312e3135302e302e302f32312d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         79:d3:bf:87:5a:bf:68:7e:59:29:ef:69:a3:32:4d:6b:c8:d9:
         53:b5:bd:a0:d6:5c:01:86:f9:cc:ce:a5:f7:82:d1:40:70:e6:
         5c:19:c5:37:bc:6b:4a:bb:f5:e8:cb:6c:d6:c8:0c:4e:1b:7a:
         55:95:fd:62:97:10:ee:81:16:da:8f:6d:b8:70:4a:5d:17:12:
         62:43:d2:8a:1c:f6:7f:41:7c:31:28:91:5c:00:13:79:35:03:
         7e:65:07:de:1d:58:1d:64:df:3c:bc:37:37:93:4e:67:ba:bb:
         56:24:1c:04:d4:62:4a:28:d7:75:e4:6b:3a:d5:aa:58:14:d7:
         2d:59:a3:bf:ea:57:55:1d:59:73:a2:7e:bb:f4:c8:6e:2d:35:
         e3:58:0d:13:86:63:2b:28:1c:bb:0d:83:a2:fe:f3:fd:6b:80:
         93:59:14:46:30:6d:fc:e6:d6:2a:b5:9a:62:0d:a4:47:19:48:
         8a:32:3b:f4:17:e2:57:03:2b:28:05:a4:8b:f8:b5:ee:b3:78:
         0b:d7:a1:93:41:d6:f5:70:68:d5:cb:8f:f2:93:f2:de:bf:54:
         71:98:8d:61:8f:99:7c:9a:df:f4:ff:2c:d2:9e:a0:66:e9:04:
         3d:de:70:99:3f:61:58:85:a7:76:39:b4:10:56:11:9c:24:2d:
         b1:09:57:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----