Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b5a38d4a-898f-4df2-b221-2e56c5549ecd/cac6a78ed05642b685326bec31d4eec6530ee46d.roa
File:                     cac6a78ed05642b685326bec31d4eec6530ee46d.roa (raw, json)
Hash identifier:          xuc4FoY4RtZ1d82hL5w7tT9dVw7zf+ixzNWHOx0+vs0=
Subject key identifier:   82:1C:27:70:48:0E:EC:2D:C9:23:4F:E9:4C:C3:31:5F:4E:31:07:9D
Certificate issuer:       /CN=d34949bd125a2b95efcd70635590038fc0030295
Certificate serial:       03CD48
Authority key identifier: BC:01:7D:FE:F9:8D:5A:78:7A:01:BF:EA:25:AF:4D:BE:E4:9B:3D:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d34949bd125a2b95efcd70635590038fc0030295.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b5a38d4a-898f-4df2-b221-2e56c5549ecd/cac6a78ed05642b685326bec31d4eec6530ee46d.roa
Signing time:             Wed 24 Mar 2021 14:47:16 +0000
ROA not before:           Wed 24 Mar 2021 14:47:16 +0000
ROA not after:            Tue 24 Mar 2026 14:47:16 +0000
asID:                     61455
IP address blocks:        200.0.68.0/23 maxlen: 24
                          2801:14:a000::/47 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249160 (0x3cd48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d34949bd125a2b95efcd70635590038fc0030295
        Validity
            Not Before: Mar 24 14:47:16 2021 GMT
            Not After : Mar 24 14:47:16 2026 GMT
        Subject: CN=cac6a78ed05642b685326bec31d4eec6530ee46d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:a9:61:5e:31:9a:49:31:34:89:a2:c2:26:
                    f8:50:66:98:91:64:91:c0:bb:26:ba:fe:7e:6d:32:
                    07:5f:cd:6d:9c:eb:f8:68:e1:31:66:f5:de:a5:d1:
                    94:e9:52:43:95:4b:25:67:7b:34:84:f5:14:a4:af:
                    fa:d6:67:83:c0:32:8e:8f:20:90:b4:61:8b:47:d2:
                    ab:e5:e3:a5:f3:4f:a0:92:5c:f4:f6:71:e0:a0:06:
                    c5:e9:aa:6d:9e:43:7b:c9:82:a7:0e:45:53:55:a3:
                    bc:a8:dd:ed:9a:6f:d1:42:d4:89:1e:9f:9b:e6:8e:
                    4e:cb:09:28:d4:17:b4:6b:5d:1b:36:43:bf:45:51:
                    82:7b:ac:1a:e9:ba:a0:5c:ce:7b:bb:12:20:94:1e:
                    41:9e:09:1d:57:17:1a:8c:8b:4e:ba:84:bf:db:97:
                    85:3b:c7:6f:50:28:ee:00:b0:3a:a8:cf:2a:d3:ef:
                    c7:74:9d:6e:5b:b9:cd:d6:a7:a3:c8:76:e3:c6:66:
                    12:dc:0a:8c:cd:c9:3a:2b:3c:cc:5b:5d:7e:57:78:
                    cf:22:7c:09:7c:c8:8b:4e:a2:3a:24:13:fe:a5:fe:
                    69:0b:af:6c:44:03:86:b2:bd:5c:31:6b:7f:c5:1c:
                    4e:be:f0:97:78:dc:a9:20:84:3d:a2:0c:2c:fa:3d:
                    13:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:1C:27:70:48:0E:EC:2D:C9:23:4F:E9:4C:C3:31:5F:4E:31:07:9D
            X509v3 Authority Key Identifier:
                keyid:BC:01:7D:FE:F9:8D:5A:78:7A:01:BF:EA:25:AF:4D:BE:E4:9B:3D:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d34949bd125a2b95efcd70635590038fc0030295.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b5a38d4a-898f-4df2-b221-2e56c5549ecd/cac6a78ed05642b685326bec31d4eec6530ee46d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b5a38d4a-898f-4df2-b221-2e56c5549ecd/d34949bd125a2b95efcd70635590038fc0030295.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.68.0/23
                IPv6:
                  2801:14:a000::/47

    Signature Algorithm: sha256WithRSAEncryption
         0e:00:43:a7:24:09:cd:29:52:a6:14:da:a6:a5:d9:76:00:ed:
         a9:9c:8a:4c:d0:08:3c:91:f3:11:d7:3c:0d:00:6f:2f:26:6e:
         fd:31:00:6f:ed:06:43:98:b5:a9:8d:17:39:7a:6b:f8:93:35:
         8b:40:e7:4a:c4:fc:8e:15:ef:c5:13:66:a3:62:ea:6d:4e:41:
         41:4e:03:3a:7f:0b:9e:57:c3:fe:a0:43:a6:03:1f:18:33:57:
         c6:00:63:50:83:5f:2a:89:66:d0:75:ca:4f:03:2d:63:d1:c1:
         0b:fb:6d:15:ee:f8:3b:91:d5:b4:27:17:35:e3:55:ad:c9:33:
         67:ba:e8:74:4f:23:a1:53:8e:42:25:73:9f:9e:77:72:7c:f3:
         2f:f4:d9:a0:2f:2f:32:52:c7:df:d0:fd:40:d7:9a:cd:bc:eb:
         53:b0:69:ba:5a:37:f3:4e:10:e5:17:88:aa:d7:e6:eb:3e:83:
         eb:63:f6:37:05:1d:2d:ee:26:ab:52:49:84:3d:1f:f5:c7:c1:
         6c:08:fb:16:e1:55:02:a1:c3:93:9e:ef:20:e6:14:16:07:69:
         7c:70:65:50:5d:72:3f:40:7a:06:63:b2:f1:a6:db:95:45:12:
         88:bc:a7:73:20:62:c5:a3:87:b7:4c:45:1b:5d:6b:7c:f8:af:
         b3:a0:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----