Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/5e232a2011be4c6c877063a701736bb04fe670a4.roa
File:                     5e232a2011be4c6c877063a701736bb04fe670a4.roa (raw, json)
Hash identifier:          HuOrguTlb6zrIUGpicpvito4AO/6zULEgFO9spWhjvU=
Subject key identifier:   E1:E2:F7:E4:CB:E0:82:61:A9:02:AC:1A:63:FB:CD:87:D1:53:85:A2
Certificate issuer:       /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial:       E5B9
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/5e232a2011be4c6c877063a701736bb04fe670a4.roa
Signing time:             Fri 24 Sep 2021 10:28:58 +0000
ROA not before:           Mon 13 Sep 2021 03:00:00 +0000
ROA not after:            Tue 13 Sep 2022 03:00:00 +0000
asID:                     271799
IP address blocks:        200.26.190.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58809 (0xe5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
        Validity
            Not Before: Sep 13 03:00:00 2021 GMT
            Not After : Sep 13 03:00:00 2022 GMT
        Subject: CN=5e232a2011be4c6c877063a701736bb04fe670a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:30:b8:ed:8b:a9:f4:a9:82:a6:a6:72:9c:
                    ff:1e:e6:90:15:87:27:1a:37:b9:71:3f:b2:b4:cd:
                    53:fc:3f:89:ce:e8:1f:a6:d2:39:b1:4d:7b:d1:88:
                    b4:e0:e9:74:33:40:ad:69:b0:33:07:25:c6:21:81:
                    82:dd:c4:76:94:20:e4:16:a6:a9:b1:6f:6c:b0:5f:
                    cb:f8:68:1d:59:e4:35:72:08:7a:b1:5c:21:ba:6e:
                    21:60:cf:a0:c7:9a:7f:73:52:9d:fb:c0:fe:cb:cd:
                    e8:e6:f5:b9:95:a4:07:15:7b:44:62:cd:88:14:c0:
                    7c:c8:0c:8a:0a:43:e6:55:01:ce:37:ad:56:21:9c:
                    bc:2a:02:22:f0:95:2c:c1:eb:31:9b:0a:8c:2d:8d:
                    96:fa:da:bd:60:32:f5:e6:c3:b4:a8:5c:8f:a7:29:
                    23:37:5e:49:86:52:fb:99:22:c9:f2:a2:c6:e0:8b:
                    a2:09:2d:75:0b:57:33:1b:5b:b9:bf:8e:5c:fc:3a:
                    83:53:1d:8a:70:7a:1b:14:f8:a1:09:74:42:fe:d4:
                    ac:b9:dd:4d:60:85:6d:10:ca:26:8f:0f:ad:73:be:
                    0c:70:a8:46:b8:45:23:48:19:4b:2f:48:26:01:48:
                    46:fb:01:e5:8a:69:51:85:38:ad:6b:77:87:e1:ac:
                    2c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E2:F7:E4:CB:E0:82:61:A9:02:AC:1A:63:FB:CD:87:D1:53:85:A2
            X509v3 Authority Key Identifier:
                keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/5e232a2011be4c6c877063a701736bb04fe670a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:65:af:fd:f5:63:3e:25:18:3b:9a:37:65:f1:80:7f:8b:5a:
         e0:27:c7:39:c3:a5:3d:a9:9c:a6:71:1f:f3:bc:7b:1e:5c:8a:
         dc:16:f9:82:01:a0:96:e1:5f:e7:4c:b6:c5:d7:76:df:49:c7:
         a5:9d:d5:88:17:80:10:ce:e9:62:cb:24:3a:45:5b:86:4f:0d:
         27:a8:00:e1:64:e1:36:d9:db:96:36:dc:69:58:c9:03:c3:ce:
         55:51:63:f9:4a:83:a2:fe:19:93:0d:bc:a3:bf:31:0a:a1:13:
         7a:cc:1a:33:51:64:e5:bd:16:b7:c6:39:c5:74:75:57:20:a6:
         d9:2d:41:1e:8e:24:00:3b:a3:7a:5d:cb:02:b4:25:2f:0f:e0:
         0e:55:a0:f9:14:c1:cd:21:41:b4:d0:7f:7c:57:8c:8b:6a:dd:
         e5:98:6b:72:89:4c:14:49:a4:be:78:6d:47:b9:b7:60:9f:0b:
         34:30:db:60:bc:ec:dd:ab:59:a5:c5:6c:14:9a:d5:9d:9a:43:
         46:00:21:69:f1:d7:0f:87:fa:99:7a:f8:2a:b4:9d:8b:27:88:
         89:d2:0a:24:6a:04:b9:81:1e:ba:e2:6a:b7:1f:2a:03:c8:f9:
         af:39:dc:04:97:d8:ad:d0:9d:26:14:3d:9b:a2:72:47:1c:84:
         47:83:27:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----