Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/ef4721bf927ba104ec9a98411598cf7fb85f3f8b.roa
File:                     ef4721bf927ba104ec9a98411598cf7fb85f3f8b.roa (raw, json)
Hash identifier:          uA9O4KjehOaiPgQuor9gfJCgLXIPDYBo+V0T1ojCCG8=
Subject key identifier:   66:8B:38:6F:6B:D1:77:04:69:78:6F:1A:AC:E6:46:47:53:A3:80:87
Certificate issuer:       /CN=71a464f59d46ac27cdbcbb0efe6e417e3717efd0
Certificate serial:       06B013
Authority key identifier: 50:06:D9:00:0E:20:81:07:C1:3A:6B:1F:EA:9B:3D:4C:9F:EF:69:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/ef4721bf927ba104ec9a98411598cf7fb85f3f8b.roa
Signing time:             Thu 29 Jun 2023 16:34:12 +0000
ROA not before:           Wed 28 Jun 2023 16:34:12 +0000
ROA not after:            Sun 29 Jun 2025 16:34:12 +0000
asID:                     8026
IP address blocks:        200.4.16.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438291 (0x6b013)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71a464f59d46ac27cdbcbb0efe6e417e3717efd0
        Validity
            Not Before: Jun 28 16:34:12 2023 GMT
            Not After : Jun 29 16:34:12 2025 GMT
        Subject: CN=ef4721bf927ba104ec9a98411598cf7fb85f3f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b1:60:17:21:80:ff:44:33:da:f1:59:cd:1a:
                    b4:6f:ff:9d:fd:51:da:b4:5e:dd:f5:a6:46:54:78:
                    31:90:3d:e4:01:97:09:5c:4e:82:38:4b:d6:b2:9d:
                    5e:e0:36:fc:36:d0:e8:e6:59:f2:93:2b:2f:a5:52:
                    1e:19:da:c7:e1:d4:44:4c:9d:a1:fd:6c:3e:78:af:
                    df:b4:bd:b0:a9:29:4f:c5:94:c2:1e:f7:1c:fd:01:
                    31:e8:a5:0d:84:4e:4b:4e:0a:09:c3:b3:98:f6:63:
                    c9:b8:b3:20:37:44:ae:7b:83:f1:c6:5e:36:b1:47:
                    78:ab:d3:b6:b6:86:64:9a:3d:ea:6a:38:f0:0f:fe:
                    0a:2c:40:81:e8:93:04:db:91:c5:a7:21:af:58:c9:
                    99:52:10:db:5a:16:b0:37:49:82:be:f8:13:99:3b:
                    bd:f3:bd:0f:05:2e:79:fc:1d:b4:a2:8b:54:d1:17:
                    29:03:2b:5e:ab:12:77:f2:6c:19:22:dc:e2:14:b0:
                    40:67:24:cb:c3:cf:49:7c:6a:b6:1f:17:0a:be:ca:
                    f9:74:a8:6c:a8:ee:29:4b:37:34:9e:b8:8a:e7:4b:
                    99:8a:51:1f:e1:32:2b:78:67:c8:16:76:40:66:ba:
                    1c:89:4c:2f:5a:51:5e:8d:db:0c:e8:10:da:5e:f8:
                    c0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:8B:38:6F:6B:D1:77:04:69:78:6F:1A:AC:E6:46:47:53:A3:80:87
            X509v3 Authority Key Identifier:
                keyid:50:06:D9:00:0E:20:81:07:C1:3A:6B:1F:EA:9B:3D:4C:9F:EF:69:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/ef4721bf927ba104ec9a98411598cf7fb85f3f8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0d:7f:31:cb:18:63:c1:cf:45:de:c7:ab:54:2e:45:6e:ed:6c:
         2e:b4:3a:2a:0a:8d:e6:b5:98:61:40:02:62:37:f2:84:ae:55:
         7e:3b:36:70:6f:b0:4e:34:92:07:9b:45:f0:13:f3:d6:14:1b:
         b4:f6:ed:5e:f4:ea:c3:4e:ec:50:0b:b8:6c:ca:6e:15:0f:ec:
         b5:c2:c7:27:4d:48:3b:fe:c8:51:08:d8:75:fd:ef:f0:5e:39:
         ed:f1:ff:05:f2:ac:65:86:82:92:50:40:e1:22:79:a6:8d:4a:
         84:5a:c8:9e:3b:c0:8f:72:05:7a:31:0a:a0:0b:8f:ae:80:6a:
         20:75:ca:fa:12:45:8f:5d:a3:52:e0:27:e3:f3:13:b0:3c:21:
         7b:9a:e9:e6:b9:90:0e:0b:da:ed:75:fe:a2:7a:22:c4:0a:51:
         8f:99:55:89:2f:d8:61:c7:76:98:71:e1:88:56:ba:91:71:83:
         58:9c:a7:ff:38:c4:c3:89:b5:c1:b5:a4:f4:6b:27:46:5a:49:
         cf:8c:e0:90:2f:d5:c8:df:bd:d7:23:f5:08:3c:27:5b:16:ec:
         7f:73:fc:2f:55:9c:21:28:0d:cc:04:68:ea:29:99:56:f2:8a:
         d5:60:26:6d:74:1a:69:d8:62:e5:ae:c6:2b:79:a9:a9:79:66:
         a9:e6:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----