Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a66963b8-4673-47c9-a0ff-2e6d37688f35/9447d0fa074efda017ffcb2432c14d364a987b99.roa
File:                     9447d0fa074efda017ffcb2432c14d364a987b99.roa (raw, json)
Hash identifier:          /aZ+NXq1WswNKV7y7XVHz8BIr8k/mqEW+nC7lU1DAR4=
Subject key identifier:   2D:CA:9B:78:AB:F5:3D:31:77:F9:86:A4:A4:51:30:E3:C4:83:56:6E
Certificate issuer:       /CN=b21826c507e7329877ca6b07c220a168f514cb68
Certificate serial:       04F0BB
Authority key identifier: 18:AB:39:4E:94:3F:DA:0C:0F:CE:42:28:C5:EF:7C:9B:61:78:AD:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b21826c507e7329877ca6b07c220a168f514cb68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a66963b8-4673-47c9-a0ff-2e6d37688f35/9447d0fa074efda017ffcb2432c14d364a987b99.roa
Signing time:             Wed 24 Mar 2021 14:33:45 +0000
ROA not before:           Wed 24 Mar 2021 14:33:45 +0000
ROA not after:            Tue 24 Mar 2026 14:33:45 +0000
asID:                     271783
IP address blocks:        201.222.44.0/22 maxlen: 24
                          2803:9fe0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323771 (0x4f0bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b21826c507e7329877ca6b07c220a168f514cb68
        Validity
            Not Before: Mar 24 14:33:45 2021 GMT
            Not After : Mar 24 14:33:45 2026 GMT
        Subject: CN=9447d0fa074efda017ffcb2432c14d364a987b99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c2:d4:2b:2e:69:4c:c4:42:4b:4b:b7:b4:03:
                    3a:2f:87:40:3a:3b:9b:33:11:3a:08:c5:4f:2a:18:
                    f5:e2:42:f1:e8:a6:05:f3:c0:18:1e:94:36:44:24:
                    cb:fe:c6:52:04:61:63:32:bd:51:30:68:81:5e:51:
                    9b:b6:36:c8:16:48:f2:8a:c8:49:f5:7b:05:e7:39:
                    1c:64:18:24:02:ed:2a:a3:a8:34:7d:39:67:20:9e:
                    1e:da:bc:4e:a1:c9:c2:df:5d:76:b4:c3:83:d0:2f:
                    cb:f0:5f:6a:65:e2:e6:d3:3d:8d:57:b3:78:8a:88:
                    c6:63:6f:ac:4c:fd:3d:15:e1:24:d8:f6:47:ca:8c:
                    34:1a:05:c8:5c:c0:e6:ee:1d:59:bc:34:61:52:e8:
                    87:fc:3b:22:61:cd:73:d0:08:64:39:32:fc:3c:0c:
                    1f:9d:6f:e6:21:ce:7c:cc:3f:ac:02:97:f7:db:08:
                    c2:10:d6:7c:0c:07:3e:91:41:4e:2d:7f:9a:4a:82:
                    58:0d:2e:10:68:9f:37:a3:ed:f8:cc:7d:2f:8a:a3:
                    fc:ea:4e:06:06:3d:70:c0:64:b4:e1:aa:15:67:c2:
                    ce:47:ce:b0:89:cc:c8:96:c0:7d:10:b0:3b:53:64:
                    8c:6b:02:14:1d:62:46:4d:9a:85:26:c9:6c:3f:5e:
                    4c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CA:9B:78:AB:F5:3D:31:77:F9:86:A4:A4:51:30:E3:C4:83:56:6E
            X509v3 Authority Key Identifier:
                keyid:18:AB:39:4E:94:3F:DA:0C:0F:CE:42:28:C5:EF:7C:9B:61:78:AD:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b21826c507e7329877ca6b07c220a168f514cb68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a66963b8-4673-47c9-a0ff-2e6d37688f35/9447d0fa074efda017ffcb2432c14d364a987b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a66963b8-4673-47c9-a0ff-2e6d37688f35/b21826c507e7329877ca6b07c220a168f514cb68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.44.0/22
                IPv6:
                  2803:9fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:d8:50:45:2c:ac:3d:4b:65:a3:c6:e9:eb:f7:7d:c2:61:f2:
         e5:49:24:0b:6e:4a:bc:14:48:85:4d:d7:68:58:57:d9:27:9f:
         b2:b2:ff:21:29:4b:86:e9:71:bf:1e:2f:18:35:87:02:38:44:
         7a:a5:e2:86:19:33:c7:c4:44:de:55:33:6e:4f:45:63:04:cd:
         1a:3e:19:b8:53:39:ad:e4:e4:80:2e:bf:40:c7:13:a5:4e:19:
         19:e7:9b:78:98:2a:aa:f2:7e:04:7d:f1:ec:91:a8:3f:42:15:
         bd:18:5c:a8:bd:e5:7d:ef:a7:68:80:99:75:00:80:29:b7:cf:
         49:fe:f9:8e:e2:4c:10:ee:1c:c6:94:0c:b4:c2:dc:30:f0:00:
         66:f1:0f:fb:8d:68:65:e0:27:10:21:52:80:dd:c1:c4:e0:b6:
         85:a7:7d:07:59:2d:fc:3b:49:ae:5e:7b:30:16:14:f4:0d:da:
         10:a1:eb:9d:52:27:ee:1c:bc:d4:9b:5c:0f:b9:fb:f5:f7:01:
         5d:b1:b0:bd:f3:a4:94:f6:81:f2:f2:e6:d7:8c:28:9b:43:47:
         f2:d0:fe:6b:d1:41:18:a4:68:73:ff:8e:b4:63:60:fc:c4:cd:
         bf:a8:1e:a5:0c:72:23:c7:73:67:65:c3:ce:9d:68:97:92:1b:
         fd:e4:ee:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----