Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/f4af31777f36b041f5358ab5a9dfa8a6d282d4d6.roa
File:                     f4af31777f36b041f5358ab5a9dfa8a6d282d4d6.roa (raw, json)
Hash identifier:          aqGndrawMCUU0+lkj1fXpgc/U5lopZjuTSmrK8gDsmc=
Subject key identifier:   25:AE:47:B1:30:51:D8:8B:46:4E:EA:DB:D1:F5:83:83:60:FB:A8:9E
Certificate issuer:       /CN=b48c944771d23bb899ed07d171211baaf0c9e97e
Certificate serial:       EBA8
Authority key identifier: E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/f4af31777f36b041f5358ab5a9dfa8a6d282d4d6.roa
Signing time:             Fri 24 Sep 2021 10:31:07 +0000
ROA not before:           Fri 24 Sep 2021 03:00:00 +0000
ROA not after:            Sat 24 Sep 2022 03:00:00 +0000
asID:                     49392
IP address blocks:        200.26.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60328 (0xeba8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b48c944771d23bb899ed07d171211baaf0c9e97e
        Validity
            Not Before: Sep 24 03:00:00 2021 GMT
            Not After : Sep 24 03:00:00 2022 GMT
        Subject: CN=f4af31777f36b041f5358ab5a9dfa8a6d282d4d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:84:63:bd:c2:6c:de:b2:23:cc:3a:d0:7f:fc:
                    fa:d1:32:fb:fe:7b:0d:1f:a8:12:38:21:51:ce:b5:
                    80:af:4f:ba:11:59:6e:9d:0f:5e:74:8f:87:8e:fe:
                    8c:b6:57:f2:55:15:da:bf:22:50:a4:24:21:01:0e:
                    38:dd:13:e1:9b:eb:99:72:43:a3:57:09:7c:c0:5f:
                    7a:56:e5:fa:fc:52:76:75:90:0c:85:9f:e1:33:b2:
                    53:2a:c9:49:60:82:2d:52:6a:a1:3d:e0:03:2b:cf:
                    c1:1d:62:2b:38:56:b0:44:b4:dd:aa:d8:fa:d3:48:
                    44:6f:b5:4a:f2:6f:06:92:71:d5:e1:ee:20:5c:bb:
                    9e:83:15:59:f4:8b:ba:d2:c8:4d:db:f7:cd:c6:9b:
                    cf:70:09:ef:c9:19:b8:05:90:4e:25:7f:e8:04:bd:
                    39:3c:b7:08:80:8b:0e:61:4b:c2:e6:a5:92:a4:00:
                    08:09:be:c0:f7:5d:04:d9:02:29:20:24:48:7d:77:
                    2a:4e:5e:7a:f6:44:b1:b2:72:b2:02:48:aa:d6:2e:
                    d0:14:79:fa:b2:bc:60:e6:07:b0:47:96:f8:ca:4d:
                    da:b6:ed:b8:38:0a:21:01:2a:69:a1:73:91:3f:9a:
                    5b:36:4e:23:21:8a:28:1a:8b:84:04:da:ed:e6:37:
                    88:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AE:47:B1:30:51:D8:8B:46:4E:EA:DB:D1:F5:83:83:60:FB:A8:9E
            X509v3 Authority Key Identifier:
                keyid:E0:B7:A7:3C:45:B5:76:63:53:18:30:2B:90:FD:BF:45:16:4A:5E:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b48c944771d23bb899ed07d171211baaf0c9e97e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/f4af31777f36b041f5358ab5a9dfa8a6d282d4d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b71230ce-a950-4a0b-b8cd-0f4cd8eb3219/b48c944771d23bb899ed07d171211baaf0c9e97e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:05:86:8c:ac:0f:91:f0:0f:38:c5:13:53:a7:3b:3e:3b:f6:
         31:ac:54:89:7f:68:50:cb:dd:1d:66:03:fe:1b:39:85:9d:e5:
         5f:0f:79:e9:8f:b6:4e:0f:78:c1:eb:88:28:4a:db:5e:30:5c:
         fd:8d:d9:66:74:17:b9:90:96:9d:33:32:5b:d7:f3:a5:0d:07:
         97:a6:63:f5:7b:1a:c5:3a:44:95:fa:ff:be:d7:c1:c3:e2:48:
         30:63:f8:2c:3b:a7:39:eb:99:7f:14:50:7d:b9:ce:93:2a:4d:
         69:12:f1:09:bf:10:62:0e:0c:e6:cd:e9:45:94:1a:df:ab:0b:
         1f:a2:10:4d:c7:1a:f5:42:42:2d:7a:90:b1:b0:f4:1b:7f:da:
         86:29:ee:81:0c:a7:9f:6b:4a:d4:c2:74:87:53:ca:f0:fd:f8:
         3f:a5:e3:6a:fc:ae:c3:ef:ac:3d:5e:53:5b:c4:06:40:6e:1c:
         cf:e9:7d:60:00:8d:42:ea:89:17:2a:09:4a:b2:2b:b0:4d:d4:
         10:ee:b0:14:8b:b1:eb:e8:a4:99:25:2d:c2:bf:07:82:40:15:
         73:ad:79:bd:cf:0a:f2:c6:ec:d1:51:6f:ce:b3:b3:cb:32:5c:
         37:01:75:e7:59:5d:e4:0e:72:4d:a6:bd:fd:d2:b7:c9:76:cd:
         ad:fb:d6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----