Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b001c800-6c10-4dc5-a954-d283443006fe/a8a64835068ac4c855744fdf4859419db4921cdb.roa
File:                     a8a64835068ac4c855744fdf4859419db4921cdb.roa (raw, json)
Hash identifier:          WuYyYM1ZSpE8YTNt5tFGT3Jc9v8a7BBlMQI1sXyUXho=
Subject key identifier:   5C:AF:C3:37:8D:0F:D2:62:0D:D7:A2:E0:D1:A9:7F:4D:58:27:57:47
Certificate issuer:       /CN=081acaf6c099f3fe380fb58f107c4f30db2c4ab0
Certificate serial:       19AFE7
Authority key identifier: F1:FF:F3:F3:66:AE:F4:E1:FE:54:16:89:7A:5E:FF:B8:5F:9F:6F:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/081acaf6c099f3fe380fb58f107c4f30db2c4ab0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b001c800-6c10-4dc5-a954-d283443006fe/a8a64835068ac4c855744fdf4859419db4921cdb.roa
Signing time:             Mon 25 Jul 2022 17:52:12 +0000
ROA not before:           Mon 25 Jul 2022 03:00:00 +0000
ROA not after:            Thu 25 Jul 2024 03:00:00 +0000
asID:                     52394
IP address blocks:        201.221.120.0/24 maxlen: 24
                          2801:0:3e0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683431 (0x19afe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081acaf6c099f3fe380fb58f107c4f30db2c4ab0
        Validity
            Not Before: Jul 25 03:00:00 2022 GMT
            Not After : Jul 25 03:00:00 2024 GMT
        Subject: CN=a8a64835068ac4c855744fdf4859419db4921cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9b:60:22:5e:b9:b8:27:b0:41:b3:91:bf:04:
                    76:02:c2:54:9a:a3:89:73:53:3e:5c:8c:3b:52:50:
                    0d:64:c0:e0:4f:ea:e8:5d:6e:85:4f:09:fb:ed:41:
                    b2:4a:5a:82:7a:13:c8:9f:a4:67:7d:17:bd:29:b4:
                    82:3b:17:c1:96:1a:9d:38:87:bd:da:d1:5c:c3:9b:
                    01:08:9c:ca:b5:26:30:a3:64:58:70:0f:93:f0:40:
                    a0:ae:35:5d:5c:97:63:7a:44:8a:e1:2b:9b:31:9b:
                    c1:c6:53:e9:ce:ca:be:f5:9c:bb:08:c9:84:94:aa:
                    13:52:1a:3a:5f:ca:24:2b:90:43:6e:45:0b:1b:49:
                    58:e3:ed:79:b4:58:35:72:6f:a8:f7:6d:da:d2:a0:
                    24:ec:3c:c0:d8:de:c5:d0:8c:7d:fd:1a:7c:c7:53:
                    57:42:d6:a6:d7:bc:38:97:7b:c6:1c:7a:df:1b:0d:
                    20:cf:2e:43:a3:7a:f7:96:30:12:98:fa:69:57:26:
                    fc:f1:d9:06:63:ca:da:bc:58:f3:e7:67:c3:c9:36:
                    c9:84:d7:b7:68:4a:35:53:bd:6e:25:2f:09:06:b7:
                    29:37:86:ef:a7:4d:02:b1:49:72:a7:ea:47:f6:26:
                    a6:f3:02:06:21:c2:2b:00:11:21:9a:aa:7a:38:37:
                    30:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AF:C3:37:8D:0F:D2:62:0D:D7:A2:E0:D1:A9:7F:4D:58:27:57:47
            X509v3 Authority Key Identifier:
                keyid:F1:FF:F3:F3:66:AE:F4:E1:FE:54:16:89:7A:5E:FF:B8:5F:9F:6F:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/081acaf6c099f3fe380fb58f107c4f30db2c4ab0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b001c800-6c10-4dc5-a954-d283443006fe/a8a64835068ac4c855744fdf4859419db4921cdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b001c800-6c10-4dc5-a954-d283443006fe/081acaf6c099f3fe380fb58f107c4f30db2c4ab0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.120.0/24
                IPv6:
                  2801:0:3e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:36:fd:73:8e:3a:e3:e0:01:74:8b:83:31:ec:58:9a:3f:53:
         06:64:b7:e4:b9:e4:f1:d8:7a:ec:ce:cb:67:02:01:e1:6e:75:
         ad:76:99:b2:94:6c:be:a6:71:93:33:da:44:3d:5a:48:2f:ca:
         8b:52:be:fb:66:c4:b8:16:a5:42:84:f2:fa:b8:0b:e0:c4:08:
         71:e8:1c:6c:2b:fa:06:99:58:ac:a9:90:77:5d:12:29:02:72:
         0e:8e:f3:3e:57:63:d8:34:1c:4b:c8:60:ef:da:6f:30:62:17:
         64:9d:7e:43:bb:91:14:64:28:53:f1:36:05:55:cd:bc:0c:86:
         d6:8f:39:2e:6c:ef:f2:66:ca:36:dd:eb:0b:e8:e9:96:1a:ea:
         61:ed:b4:09:bc:24:d1:0f:bf:7f:2e:65:49:0a:1f:03:b3:4a:
         3c:d4:e3:3f:c7:8d:15:51:66:02:be:39:8c:2f:1a:69:7c:af:
         56:19:1c:57:f5:80:31:d3:25:70:af:4e:d8:5e:01:45:dd:9d:
         71:40:67:bc:f0:54:c4:84:71:76:eb:64:79:6c:f2:f1:ee:5c:
         9e:b1:67:d4:bd:b8:fa:0f:b0:ab:74:e0:84:1a:38:59:80:fa:
         9a:4f:f2:79:e4:f0:45:fb:e3:70:9e:a1:22:1d:3a:c9:97:c0:
         d2:b5:3e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----