Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c060af0a-6d48-42c1-9a13-55214f5cf92a/a982e0753a57c4b3e601795c12883931022ba125.roa
File:                     a982e0753a57c4b3e601795c12883931022ba125.roa (raw, json)
Hash identifier:          XqmcUyBDPDR2PneOXzQQNRG7PcyIWNwjOIsw1PM3XXo=
Subject key identifier:   EF:1F:D2:12:11:57:B0:24:2C:45:55:AF:0D:24:2E:41:9B:12:0A:23
Certificate issuer:       /CN=7d475d555eb0b10b477d52fe34b0ad39bbb50c1d
Certificate serial:       0D4760
Authority key identifier: 55:2E:21:A1:76:78:69:B9:DB:00:E6:30:E3:2B:69:4C:6A:02:BD:5F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d475d555eb0b10b477d52fe34b0ad39bbb50c1d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c060af0a-6d48-42c1-9a13-55214f5cf92a/a982e0753a57c4b3e601795c12883931022ba125.roa
Signing time:             Wed 24 Mar 2021 14:42:12 +0000
ROA not before:           Wed 24 Mar 2021 14:42:12 +0000
ROA not after:            Tue 24 Mar 2026 14:42:12 +0000
asID:                     27933
IP address blocks:        200.9.255.0/24 maxlen: 24
                          2800:1a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870240 (0xd4760)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d475d555eb0b10b477d52fe34b0ad39bbb50c1d
        Validity
            Not Before: Mar 24 14:42:12 2021 GMT
            Not After : Mar 24 14:42:12 2026 GMT
        Subject: CN=a982e0753a57c4b3e601795c12883931022ba125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7c:a0:a9:e9:cb:f8:02:93:5c:b3:46:68:07:
                    0d:77:84:14:e5:88:e6:58:17:93:ef:72:03:13:f5:
                    2d:49:5d:50:9e:16:9d:f8:6d:05:0f:c3:1b:7b:a2:
                    7c:9a:d6:45:4c:07:4b:2a:90:71:ab:a9:80:ab:54:
                    6d:10:4d:92:8b:5f:dd:8e:58:c2:92:b1:f9:29:20:
                    7d:64:25:ca:6b:3d:3e:30:a8:24:88:2b:7e:f8:ec:
                    52:9c:c6:bf:ad:1c:56:f2:11:29:94:bb:0a:d2:95:
                    3b:a8:03:8b:3b:0b:df:9c:60:f9:71:2a:e7:f0:4b:
                    a7:0c:e2:2a:dd:0d:31:9e:64:d1:f8:c1:90:03:f8:
                    10:f0:9f:0e:0e:b9:81:ce:36:bf:ae:21:23:96:b8:
                    64:7a:8e:59:c1:eb:94:cb:ff:2b:af:d7:85:74:da:
                    e2:76:52:96:04:2c:eb:39:99:d1:c4:db:db:71:6e:
                    62:b4:f3:75:9d:60:f1:f0:f2:fd:8f:e3:08:47:49:
                    bd:e8:70:8b:eb:e4:28:41:ba:1f:55:fd:81:c6:07:
                    23:10:a6:a9:19:3a:73:2d:d5:4d:e5:c3:54:72:7c:
                    d9:13:a1:7d:df:76:2a:71:73:4d:b4:85:30:bf:4d:
                    0a:0a:e5:dd:46:3d:77:aa:b5:0f:76:35:4e:c8:42:
                    13:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:1F:D2:12:11:57:B0:24:2C:45:55:AF:0D:24:2E:41:9B:12:0A:23
            X509v3 Authority Key Identifier:
                keyid:55:2E:21:A1:76:78:69:B9:DB:00:E6:30:E3:2B:69:4C:6A:02:BD:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d475d555eb0b10b477d52fe34b0ad39bbb50c1d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c060af0a-6d48-42c1-9a13-55214f5cf92a/a982e0753a57c4b3e601795c12883931022ba125.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c060af0a-6d48-42c1-9a13-55214f5cf92a/7d475d555eb0b10b477d52fe34b0ad39bbb50c1d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.255.0/24
                IPv6:
                  2800:1a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:50:cb:ce:7e:e2:89:50:d4:4e:5c:be:36:69:81:85:fb:2c:
         75:84:7d:5c:9b:71:f2:d0:1f:72:5d:31:d7:c7:53:1a:b7:94:
         84:17:21:e5:c9:18:58:0a:ec:05:7c:25:12:76:32:02:4f:d7:
         b8:ca:7e:8a:38:76:a1:e0:2b:f7:65:ca:44:86:78:4e:da:16:
         22:99:ba:77:4f:15:2a:3d:23:92:f1:22:20:8e:7d:82:77:9e:
         8f:92:1b:4a:20:63:54:64:20:a7:16:fc:14:54:07:1e:c0:55:
         c7:33:70:1c:8a:0b:7e:f6:47:90:4a:7a:db:f1:71:02:c9:68:
         36:38:2a:57:b7:e2:3c:95:99:1b:9e:a1:88:97:a7:e0:e4:c4:
         8f:9d:dd:57:6f:03:53:5c:3d:5c:be:8b:ec:df:ec:cb:82:56:
         6d:79:2e:f9:ff:42:cb:22:fc:62:02:29:50:37:5c:31:ab:b8:
         71:bc:5d:ad:ca:9d:79:37:fa:ea:89:77:53:aa:9b:f6:01:5b:
         6a:a0:8d:8d:21:78:48:de:88:5f:e5:1c:34:65:2c:94:cf:8d:
         b0:23:3b:45:35:fd:b7:82:49:1d:e2:c6:ed:04:fa:c0:43:e1:
         c2:44:4f:3f:28:b9:64:0f:46:6c:75:17:de:d7:4c:c9:ff:6d:
         d4:fb:a3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----