Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a4c85bb98dcc3b948df636b9ccb3fe0f4d5db991.roa
File:                     a4c85bb98dcc3b948df636b9ccb3fe0f4d5db991.roa (raw, json)
Hash identifier:          vFtEXd5Un1xZlEHY4NfLI3rtm43exVvIg951pVJ6PLo=
Subject key identifier:   3B:BA:F4:07:9F:92:D8:5A:BC:22:16:7D:4A:DD:E8:00:0B:7C:3E:7C
Certificate issuer:       /CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Certificate serial:       0D6A08
Authority key identifier: 21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a4c85bb98dcc3b948df636b9ccb3fe0f4d5db991.roa
Signing time:             Wed 24 Mar 2021 14:28:55 +0000
ROA not before:           Wed 24 Mar 2021 14:28:55 +0000
ROA not after:            Tue 24 Mar 2026 14:28:55 +0000
asID:                     7303
IP address blocks:        179.0.14.0/24 maxlen: 24
                          200.13.42.0/23 maxlen: 23
                          200.33.82.0/24 maxlen: 24
                          2801:0:440::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879112 (0xd6a08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a9fce8cb929134f597a155d408f5064261fb6f
        Validity
            Not Before: Mar 24 14:28:55 2021 GMT
            Not After : Mar 24 14:28:55 2026 GMT
        Subject: CN=a4c85bb98dcc3b948df636b9ccb3fe0f4d5db991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9d:9d:4f:a1:6d:70:ba:e9:3e:83:6c:f3:89:
                    3a:d1:4a:39:80:1b:a4:e6:28:61:4c:95:33:2a:7d:
                    4c:91:dd:c8:bb:9f:bf:12:17:07:b1:73:1c:5c:d1:
                    e3:8d:ba:d6:62:27:16:a0:27:07:e8:bd:26:9b:78:
                    05:f3:32:1e:ed:c2:81:6e:ee:86:da:61:f9:a7:15:
                    c8:04:ce:cb:63:d5:f8:58:78:d6:5b:be:b5:1e:09:
                    ab:ec:2d:26:6b:3b:82:97:ce:74:73:96:34:16:ce:
                    7d:c1:b0:f0:ac:f3:10:9d:30:84:c6:7c:74:a7:2d:
                    29:b2:a7:fb:b9:53:61:bc:84:0f:10:d0:ce:c1:02:
                    59:17:3e:1f:20:e4:a8:b5:c3:75:91:a7:1b:b0:e2:
                    ba:8b:25:0e:99:2f:67:60:c0:dd:57:cc:ae:d7:c6:
                    a6:9d:65:c6:30:c1:18:09:be:3e:89:06:7b:8d:0c:
                    55:0c:35:4b:ea:91:79:72:6d:a3:6f:42:d2:b3:cf:
                    37:b4:46:03:0b:c1:0c:de:45:cd:11:1f:fb:fa:56:
                    76:f3:ae:08:65:b9:c6:20:58:3b:4f:61:8e:71:84:
                    c7:c4:84:f0:9c:21:64:f4:bf:79:f1:1a:6c:31:bc:
                    ad:fe:e6:b9:84:86:5a:7e:9a:b7:95:f3:95:da:89:
                    5c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:BA:F4:07:9F:92:D8:5A:BC:22:16:7D:4A:DD:E8:00:0B:7C:3E:7C
            X509v3 Authority Key Identifier:
                keyid:21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a4c85bb98dcc3b948df636b9ccb3fe0f4d5db991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24
                  200.13.42.0/23
                  200.33.82.0/24
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:d5:46:d9:37:29:4b:e5:52:f6:b4:0a:8f:cc:61:59:da:92:
         fd:be:98:39:ca:2b:fd:b8:80:4a:16:93:80:8d:f8:9c:6c:5b:
         dd:12:d2:12:35:15:fd:9f:e0:9e:c0:a4:41:37:87:62:9b:53:
         97:71:56:e7:90:df:28:98:56:f0:03:66:95:94:e4:74:49:36:
         75:f4:9c:9a:31:a2:1a:60:c4:9c:94:61:2d:be:dc:41:77:8e:
         7c:ea:45:c7:80:3b:53:76:13:ad:cd:7c:e7:c8:73:a5:61:a1:
         99:fe:04:8f:5e:57:ab:99:12:c7:dc:30:5f:57:c1:f5:82:89:
         6d:48:58:82:93:f7:ce:e2:61:9c:3d:9b:55:e5:fb:fa:61:83:
         6d:d1:dd:9b:ce:7d:c8:00:51:bf:cf:4e:68:ab:fb:a8:67:96:
         6e:61:0f:67:77:a3:36:cf:97:35:ef:8d:85:b9:7e:7e:7c:cb:
         7a:17:3c:83:5d:23:48:6c:30:ef:8d:91:bc:42:80:d7:5c:c5:
         e1:2c:ac:99:b7:09:1a:3d:e7:a7:92:fb:50:ed:a4:25:2d:a4:
         86:6f:99:1d:28:61:99:b1:43:2e:95:9a:1d:96:e3:5a:e1:bb:
         26:30:74:37:b6:ba:43:55:73:cc:38:98:3c:7b:20:56:ed:b9:
         bb:73:8f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----