Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/773d528b48439c82c7d0579696adf30076eb65f6.roa
File:                     773d528b48439c82c7d0579696adf30076eb65f6.roa (raw, json)
Hash identifier:          L6OOg6zAUdmwDDJ/TcrkCZ4eIfZzJKmwjrrj8rhvLEM=
Subject key identifier:   D7:0A:9D:0D:F6:7A:B9:0B:7B:D4:8A:D9:CE:DA:52:02:51:CA:06:28
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       0E68CA
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/773d528b48439c82c7d0579696adf30076eb65f6.roa
Signing time:             Wed 24 Mar 2021 14:38:32 +0000
ROA not before:           Wed 24 Mar 2021 14:38:31 +0000
ROA not after:            Tue 24 Mar 2026 14:38:31 +0000
asID:                     27968
IP address blocks:        200.125.192.0/19 maxlen: 24
                          200.125.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944330 (0xe68ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Mar 24 14:38:31 2021 GMT
            Not After : Mar 24 14:38:31 2026 GMT
        Subject: CN=773d528b48439c82c7d0579696adf30076eb65f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a7:6a:39:59:cc:43:e6:24:ab:47:83:93:56:
                    41:bf:a5:90:63:05:76:bc:6d:03:1b:64:7c:eb:9e:
                    0e:ca:ad:5d:aa:76:9c:60:b1:5b:c4:55:3f:8c:28:
                    8d:64:dd:53:af:33:32:b8:4a:e9:c2:3f:25:52:06:
                    4c:75:f4:db:1a:3b:77:88:c9:61:fd:11:71:0c:50:
                    95:44:c9:de:f5:39:b4:77:6f:5a:b3:08:f5:e4:bb:
                    ba:0b:4d:0b:ae:81:43:4e:27:9a:f0:e8:56:51:fc:
                    a4:92:08:ad:25:26:6a:80:ee:69:af:fc:81:e0:8e:
                    9e:35:87:b4:77:8d:19:16:43:99:44:be:a3:7b:2f:
                    43:0f:33:62:87:45:5e:75:d4:48:22:d9:b9:ca:2b:
                    f1:09:3e:d4:3f:76:3f:0e:9e:ac:b2:9a:ec:e4:5e:
                    27:8d:13:b3:14:86:ce:75:aa:89:e5:99:ec:24:95:
                    8e:1f:97:be:9c:fc:22:d6:65:08:c0:d8:b5:93:39:
                    fb:bd:99:b5:52:da:9e:47:b8:9e:f3:5a:46:52:e0:
                    2a:fd:f4:38:cd:a7:17:e6:b3:d5:86:e4:41:9a:e0:
                    79:b2:0f:20:cd:fc:c4:6b:70:f8:d2:8d:ab:20:2c:
                    1d:6f:7c:6c:8c:8b:f0:18:d3:9e:20:29:95:41:c0:
                    53:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0A:9D:0D:F6:7A:B9:0B:7B:D4:8A:D9:CE:DA:52:02:51:CA:06:28
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/773d528b48439c82c7d0579696adf30076eb65f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.125.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b1:45:a2:74:da:73:10:6b:d6:b6:31:1c:98:0b:20:1d:09:32:
         e2:cc:6d:bb:10:4b:d2:ff:f3:e4:7d:c1:45:84:f7:81:9f:0b:
         4e:4c:b7:00:d0:8b:ec:33:d8:3f:1d:a8:e4:b0:bc:bb:b4:1b:
         24:68:48:82:39:f5:13:76:d5:1f:a1:a7:70:c4:da:8f:31:d1:
         3d:6b:e2:ed:6c:aa:f2:ab:2b:ef:f8:38:d1:99:ca:84:01:95:
         8d:ad:64:7f:dc:6e:51:f5:ce:06:d8:8f:e6:9d:9e:67:e3:1a:
         3d:4a:1d:18:93:2d:84:6a:c1:b0:db:f0:69:75:67:a0:50:30:
         ed:f1:f7:9c:e4:ce:5e:2a:33:91:2f:f9:5f:22:a9:37:46:15:
         16:d2:83:da:b4:58:d7:36:d0:81:a4:b0:01:ae:df:ad:1a:8f:
         0f:b1:9a:ff:20:0f:02:fa:ae:38:07:48:43:ce:06:40:71:67:
         d8:75:d4:82:88:39:44:65:e9:fe:66:c6:42:10:35:ef:e2:e0:
         63:0b:ae:9e:05:e6:13:4e:57:29:40:df:e5:e0:bb:61:ae:fb:
         f0:fa:1f:70:46:62:7b:79:e4:46:25:ce:40:85:c9:ea:e8:7d:
         d7:05:ff:20:2a:87:e2:df:87:08:82:bd:71:a2:d9:af:b1:d4:
         d1:c1:51:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----