Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/d85ee5774e814306aec95b0a2278b9df91cbeea0.roa
File:                     d85ee5774e814306aec95b0a2278b9df91cbeea0.roa (raw, json)
Hash identifier:          kiYdJmfXWhHMICqB+fepdca7fDYQJo+li49MvHpZFPY=
Subject key identifier:   22:B4:2B:53:3A:0D:78:00:03:CD:C0:E8:2C:BE:96:FA:33:82:22:C3
Certificate issuer:       /CN=a0a9fce8cb929134f597a155d408f5064261fb6f
Certificate serial:       0D6D29
Authority key identifier: 21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/d85ee5774e814306aec95b0a2278b9df91cbeea0.roa
Signing time:             Wed 24 Mar 2021 14:28:55 +0000
ROA not before:           Wed 24 Mar 2021 14:28:55 +0000
ROA not after:            Tue 24 Mar 2026 14:28:55 +0000
asID:                     52275
IP address blocks:        179.0.14.0/24 maxlen: 24
                          200.13.42.0/23 maxlen: 23
                          200.33.82.0/24 maxlen: 24
                          2801:0:440::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879913 (0xd6d29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0a9fce8cb929134f597a155d408f5064261fb6f
        Validity
            Not Before: Mar 24 14:28:55 2021 GMT
            Not After : Mar 24 14:28:55 2026 GMT
        Subject: CN=d85ee5774e814306aec95b0a2278b9df91cbeea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:84:86:07:25:fe:67:8a:26:76:82:e7:48:
                    98:e3:1b:02:f5:52:45:6e:36:cf:3d:1c:84:a3:9f:
                    40:85:ce:5d:94:7e:1a:80:f2:88:0b:e8:dc:0d:21:
                    21:49:8c:49:9c:57:f7:39:7a:8e:bd:d4:f8:6d:6c:
                    02:4e:c5:ec:82:81:c5:35:d3:fa:85:06:f5:53:cc:
                    cc:a5:d4:c4:48:29:6f:55:a2:a8:de:52:58:f7:52:
                    bf:88:12:71:d5:d6:bd:a3:63:9c:dc:1f:ae:37:a0:
                    d1:fd:81:d0:63:96:04:bf:c0:34:7d:d9:35:ce:57:
                    5b:16:b5:51:b0:d2:0a:b7:2c:73:79:7a:ae:cd:38:
                    98:88:33:2b:45:d1:81:1c:b8:48:8c:19:d0:ac:15:
                    66:e8:34:95:4b:d6:ef:d0:d5:02:95:2b:fa:1b:a6:
                    28:da:a9:66:cd:a3:95:ea:24:00:9b:71:81:e0:0b:
                    f5:9c:d2:2c:a8:8a:0a:7e:3b:b9:1e:42:69:55:45:
                    35:13:05:54:94:b2:85:b0:35:54:21:e5:f9:d1:6c:
                    1a:84:39:ef:8c:db:0f:23:6d:c4:93:f4:b6:11:85:
                    54:d4:24:7f:ed:ad:53:be:9c:19:d9:57:f6:9a:3b:
                    42:c7:ec:e1:b1:cb:cb:e1:50:ff:46:34:43:26:57:
                    5f:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B4:2B:53:3A:0D:78:00:03:CD:C0:E8:2C:BE:96:FA:33:82:22:C3
            X509v3 Authority Key Identifier:
                keyid:21:1F:63:1A:59:65:91:1D:B2:3C:59:48:0C:93:95:CF:5E:21:6D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0a9fce8cb929134f597a155d408f5064261fb6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/d85ee5774e814306aec95b0a2278b9df91cbeea0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d2d60855-e1f4-4e6d-bcca-f9c002017bac/a0a9fce8cb929134f597a155d408f5064261fb6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.14.0/24
                  200.13.42.0/23
                  200.33.82.0/24
                IPv6:
                  2801:0:440::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:aa:10:10:2d:5b:64:21:e4:e4:a9:ff:a2:a0:08:69:2a:22:
         56:cc:69:13:99:5a:c3:ca:3e:ed:be:1e:3c:a4:aa:bd:c7:f2:
         18:03:0c:4b:44:1e:87:f2:89:55:d9:95:d2:8e:8d:bd:f9:d5:
         af:19:41:4d:a1:61:1f:72:be:7e:97:9e:c0:f3:d7:98:3d:20:
         b4:03:7d:33:f1:cc:be:1b:8a:e5:53:3c:c9:af:0b:17:a0:8a:
         5b:00:93:75:a8:0d:32:e7:c9:27:79:18:78:be:05:7f:e5:88:
         95:6a:82:b2:0f:80:82:0b:b7:21:e6:da:f6:9f:f8:f7:c3:53:
         d4:a1:6d:ab:8c:f4:af:d4:6c:c6:b3:f0:a4:b2:51:7e:b7:85:
         bb:2d:e1:f2:e1:b7:1f:af:5a:a9:45:ae:af:93:86:a7:00:1d:
         d7:41:df:f3:9b:b7:38:4d:6f:c6:c9:6f:37:2f:83:2a:9b:15:
         ed:31:37:c0:48:c2:f7:20:96:d4:08:bd:bf:1f:a1:4d:4c:1c:
         f8:36:9f:32:7a:98:bd:30:b0:ca:b3:fb:d8:1a:8b:57:6e:9d:
         e5:ca:44:0a:80:9e:5a:85:c5:a8:22:cb:35:26:4f:36:11:6d:
         91:95:ec:a2:11:8c:72:bd:5e:90:ac:92:c9:a2:f9:59:53:5d:
         b0:0f:2a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----