Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/ec208cd05459dd66df7a45360bd5d0a04d83d0d1.roa
File:                     ec208cd05459dd66df7a45360bd5d0a04d83d0d1.roa (raw, json)
Hash identifier:          sO1C6d9uVjrv5Qb/+YJdFL766cCRgvLz4JXS63jGB7k=
Subject key identifier:   E3:FF:5C:B4:3B:A6:12:68:6F:67:E2:6D:9E:60:B2:1D:4B:BA:4F:2C
Certificate issuer:       /CN=5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0
Certificate serial:       07FA55
Authority key identifier: F5:C2:43:E9:59:3D:73:BE:76:93:9B:D0:3D:1F:C4:43:A4:85:A4:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/ec208cd05459dd66df7a45360bd5d0a04d83d0d1.roa
Signing time:             Wed 24 Mar 2021 14:29:13 +0000
ROA not before:           Wed 24 Mar 2021 14:29:13 +0000
ROA not after:            Tue 24 Mar 2026 14:29:13 +0000
asID:                     265810
IP address blocks:        201.182.0.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522837 (0x7fa55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0
        Validity
            Not Before: Mar 24 14:29:13 2021 GMT
            Not After : Mar 24 14:29:13 2026 GMT
        Subject: CN=ec208cd05459dd66df7a45360bd5d0a04d83d0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:44:39:c8:bf:b7:7e:1d:69:da:47:e7:0e:d3:
                    8f:bb:77:98:ff:77:92:a3:80:17:79:fb:2f:dc:d6:
                    fb:18:a9:88:4f:b3:07:d6:f6:b0:7f:75:d7:ad:0b:
                    85:62:c7:1d:fc:8a:4f:fd:c8:c7:e9:39:c3:18:27:
                    6f:c6:70:a1:60:b0:fb:80:ad:ac:c5:e4:9e:71:f6:
                    73:1c:3b:82:ac:a9:1b:41:d1:fb:64:3e:e6:f0:c7:
                    36:0f:24:c1:ec:e8:3f:2f:41:39:1b:6f:8a:32:c0:
                    bf:cf:4f:f5:c2:78:27:d2:b6:f2:c0:51:2c:43:7c:
                    53:25:3d:ff:5a:4c:b3:1b:c0:ca:b7:0f:cb:c2:ce:
                    69:6b:b8:fd:d7:fd:20:24:74:5d:75:a8:c6:79:aa:
                    07:6d:9a:f4:e0:47:bb:02:f3:16:13:b3:d0:55:c9:
                    c8:e9:cf:f3:c3:ed:fa:e3:87:cf:56:e0:2a:7d:a0:
                    ea:55:4c:b9:47:c8:35:b5:80:00:a6:5d:1c:fc:d1:
                    42:92:c3:de:0e:bd:0d:92:c0:4a:ec:57:da:37:0a:
                    b6:31:61:47:16:3d:42:f3:1f:41:f0:02:41:6b:10:
                    ba:ea:78:db:51:95:e7:10:bd:76:f9:b4:6c:4a:a5:
                    4d:ce:72:98:e3:3d:6c:de:c2:15:06:7b:51:71:58:
                    18:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FF:5C:B4:3B:A6:12:68:6F:67:E2:6D:9E:60:B2:1D:4B:BA:4F:2C
            X509v3 Authority Key Identifier:
                keyid:F5:C2:43:E9:59:3D:73:BE:76:93:9B:D0:3D:1F:C4:43:A4:85:A4:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/ec208cd05459dd66df7a45360bd5d0a04d83d0d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b3aff97e-9759-4220-8e2a-3fac2f20b3fc/5dc7b8a1f22e64e0c93f923128ec9993a8eff8d0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         76:6a:93:5c:6a:0e:68:b6:7d:d6:f2:8f:03:74:4f:fa:84:a0:
         37:bd:3d:ec:fe:73:f0:0c:43:21:0b:cb:03:b6:2c:ce:a9:e1:
         a9:6a:f2:25:35:d5:c4:b1:2e:cd:d1:28:6a:b3:d6:94:11:f5:
         fc:ce:18:ab:67:26:17:68:8e:7c:d4:2e:13:63:cf:44:18:78:
         86:c7:75:e9:10:57:4d:48:16:42:4b:c3:de:d8:a4:33:08:c7:
         1f:12:e7:49:6b:cc:7e:f8:90:30:ae:30:89:cc:63:f9:1e:a8:
         76:74:57:d2:16:28:d3:f9:28:4f:d2:3a:fe:bc:0e:53:31:a2:
         74:f2:dd:b4:29:33:82:a8:9b:14:e4:db:0d:6c:28:10:0c:a1:
         04:f7:32:99:88:2b:22:de:c6:67:0c:c9:68:02:8b:03:38:f9:
         a3:63:d0:01:ac:57:5f:88:6f:a7:d6:b6:25:a5:75:b1:15:c0:
         aa:91:08:c0:27:6d:a0:fe:7b:e4:e8:97:75:4a:ec:47:6d:6b:
         91:3c:87:b3:d0:3e:88:a9:dc:fd:bd:03:f4:4b:86:a8:17:bc:
         f6:0d:92:fd:b2:7e:db:53:da:5c:52:8c:0d:1a:56:52:9e:02:
         cd:39:50:9e:f2:fc:81:b7:37:48:43:7b:4d:75:a4:4e:2e:ee:
         20:7e:3e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----