Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d0fa5bc8-ad0a-4397-a920-ac4ea208a6f3/78d71be0e2ddda2c2a52ca7c41e0812d07780e33.roa
File:                     78d71be0e2ddda2c2a52ca7c41e0812d07780e33.roa (raw, json)
Hash identifier:          1aNMWvtNLjzGQXT5Lze8gtay5n+S1+sAt6bKflAQ1Pc=
Subject key identifier:   A7:E8:21:BC:1D:7B:5B:37:62:C4:87:79:BE:49:C7:CA:58:80:B7:D1
Certificate issuer:       /CN=d8ca6e998eb6fb9f8be6a96ed43dcd7a012a7b91
Certificate serial:       02A423
Authority key identifier: 10:6E:58:47:C0:25:1C:49:80:CF:0D:26:C8:7C:A0:A4:83:67:16:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ca6e998eb6fb9f8be6a96ed43dcd7a012a7b91.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d0fa5bc8-ad0a-4397-a920-ac4ea208a6f3/78d71be0e2ddda2c2a52ca7c41e0812d07780e33.roa
Signing time:             Wed 24 Mar 2021 14:43:09 +0000
ROA not before:           Wed 24 Mar 2021 14:43:09 +0000
ROA not after:            Tue 24 Mar 2026 14:43:09 +0000
asID:                     28440
IP address blocks:        201.131.216.0/22 maxlen: 22
                          2806:3cb::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173091 (0x2a423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8ca6e998eb6fb9f8be6a96ed43dcd7a012a7b91
        Validity
            Not Before: Mar 24 14:43:09 2021 GMT
            Not After : Mar 24 14:43:09 2026 GMT
        Subject: CN=78d71be0e2ddda2c2a52ca7c41e0812d07780e33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c9:7e:5b:2e:54:86:e5:c5:00:2e:39:3d:de:
                    ab:97:21:41:c0:5f:1a:74:4f:9d:6a:29:3e:d8:f4:
                    5d:c0:7e:84:b9:e2:dd:d3:6b:05:db:55:6b:f8:1e:
                    33:68:8f:4d:4f:9c:43:72:08:31:e7:f1:94:35:34:
                    b1:86:81:81:54:f2:e0:59:5b:2c:ac:18:4f:71:b9:
                    5f:eb:94:90:47:1a:49:73:76:bb:b6:7f:f0:a1:eb:
                    ff:7a:c5:4e:9b:ae:e8:78:83:1c:0f:3e:b8:67:40:
                    01:7c:ee:41:23:66:ac:86:6b:14:09:a4:c1:5f:ba:
                    e6:2d:3c:14:8b:4b:4c:b0:f2:55:eb:10:ae:0c:7e:
                    27:ad:34:df:d7:f3:57:0a:3a:91:a8:ef:11:86:a2:
                    e5:62:92:54:02:07:36:99:23:94:51:f1:d1:ff:1f:
                    2f:3e:98:12:65:14:d7:04:3a:3f:3a:c3:b0:1f:6c:
                    36:17:dd:be:cd:3e:c6:be:c6:c8:42:cc:c7:67:f9:
                    3c:38:fc:ed:59:3a:0b:7d:e7:b7:0c:8d:9b:4d:64:
                    d7:2f:b0:39:83:c4:cd:b0:c6:df:4d:9e:45:71:e4:
                    fd:b7:2d:fb:2a:52:09:68:df:d3:bb:ab:49:08:c6:
                    62:07:b5:3f:a7:ed:9d:d6:49:b9:ba:6d:d8:75:cd:
                    30:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:E8:21:BC:1D:7B:5B:37:62:C4:87:79:BE:49:C7:CA:58:80:B7:D1
            X509v3 Authority Key Identifier:
                keyid:10:6E:58:47:C0:25:1C:49:80:CF:0D:26:C8:7C:A0:A4:83:67:16:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ca6e998eb6fb9f8be6a96ed43dcd7a012a7b91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d0fa5bc8-ad0a-4397-a920-ac4ea208a6f3/78d71be0e2ddda2c2a52ca7c41e0812d07780e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d0fa5bc8-ad0a-4397-a920-ac4ea208a6f3/d8ca6e998eb6fb9f8be6a96ed43dcd7a012a7b91.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.216.0/22
                IPv6:
                  2806:3cb::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:a7:fc:6e:60:4a:ac:3d:d8:2b:ba:4d:3f:82:29:d5:2b:71:
         c1:5f:8a:1e:bf:dd:5f:99:f9:66:7a:d0:fa:1e:eb:1a:67:3f:
         2c:73:30:e4:4b:01:ac:0f:de:4f:7b:16:cb:5f:70:6c:a7:08:
         15:ad:40:12:07:82:b3:9e:6e:d1:86:ce:16:85:7e:bf:b6:4f:
         ea:c3:98:ba:d1:1b:1a:85:f3:c2:45:da:0c:6f:1f:95:6b:be:
         f6:6d:b5:e7:e2:68:4a:30:93:8c:2f:3a:72:94:78:fa:22:66:
         f8:f6:33:f2:32:69:e5:f3:12:5a:a8:86:86:90:99:ef:26:f9:
         af:45:ba:19:0b:35:8d:1b:ad:fe:af:c9:16:7f:ab:9b:62:5d:
         cc:d8:06:42:3b:4d:a6:45:54:4c:70:b3:69:10:8d:24:d1:95:
         24:1a:91:1b:4d:25:20:17:5b:72:ea:b9:91:c6:f7:2e:7d:f5:
         39:00:1b:63:d3:9c:01:f6:00:a8:51:e6:72:15:56:87:b3:1f:
         8b:6e:77:63:93:c3:29:7e:13:c9:99:f7:44:ad:b4:78:ad:c2:
         fe:48:3d:dd:34:44:51:9a:10:a9:88:65:c7:80:03:0d:d3:4f:
         32:d7:4b:86:3e:9c:5a:32:dd:8e:ab:51:38:c8:ca:c0:37:05:
         8d:c7:04:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----