Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d4a9c88d-aae0-477e-91d8-8b57296a0547/fa4059d5fba8f3ba315fd77b4f0753beb98af283.roa
File:                     fa4059d5fba8f3ba315fd77b4f0753beb98af283.roa (raw, json)
Hash identifier:          yVz7fGnWvJozCJIww1cTeYPzMFu5w4pOBK0NOLQ7T7k=
Subject key identifier:   87:66:CF:A6:B6:8C:90:88:B3:8E:DD:80:CB:93:AA:F1:CC:A8:E6:D0
Certificate issuer:       /CN=e9a783da1aeb3cae7aede602a40423c90e2036c2
Certificate serial:       041B
Authority key identifier: EC:B9:87:2D:66:22:F7:0B:84:27:A8:9B:15:84:A3:D0:68:14:0D:5C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e9a783da1aeb3cae7aede602a40423c90e2036c2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d4a9c88d-aae0-477e-91d8-8b57296a0547/fa4059d5fba8f3ba315fd77b4f0753beb98af283.roa
Signing time:             Sat 26 Jun 2021 22:55:12 +0000
ROA not before:           Sat 26 Jun 2021 03:00:00 +0000
ROA not after:            Mon 26 Jun 2023 03:00:00 +0000
asID:                     271793
IP address blocks:        201.131.65.0/24 maxlen: 24
                          2803:10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1051 (0x41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9a783da1aeb3cae7aede602a40423c90e2036c2
        Validity
            Not Before: Jun 26 03:00:00 2021 GMT
            Not After : Jun 26 03:00:00 2023 GMT
        Subject: CN=fa4059d5fba8f3ba315fd77b4f0753beb98af283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ab:20:2c:9b:03:2b:5a:f0:73:99:eb:b0:74:
                    5c:3e:fb:7b:75:dc:1b:3d:05:f3:5d:a6:c4:55:0c:
                    07:15:21:b0:d6:9a:33:9b:9d:67:d7:14:46:ac:07:
                    3a:3a:3f:80:f7:05:d3:2e:d5:e3:2d:70:c0:6e:f0:
                    a9:32:58:8c:98:ea:c2:79:ce:a6:b2:40:0f:1e:ad:
                    fe:d3:a8:38:b7:ad:ea:38:1d:e4:5f:4c:a2:72:ae:
                    ea:95:b8:07:c0:99:bd:b0:af:2c:33:e2:aa:1e:e2:
                    80:c8:f0:56:93:1e:04:11:96:36:c1:7d:d2:d2:76:
                    97:a9:41:6d:a6:92:16:80:1a:a2:5b:d1:0d:b0:94:
                    e5:22:e0:e3:c0:ad:ef:c9:8d:c6:39:31:5b:6e:76:
                    c0:e9:08:b6:4c:ac:22:95:a9:85:f4:2d:c7:03:5c:
                    1c:ac:75:52:a3:ac:c2:74:4a:98:9c:d7:eb:86:d9:
                    01:eb:cc:b6:f0:8d:93:ed:c3:c5:a1:7e:5c:ad:02:
                    8b:50:6e:26:78:4b:8a:1b:00:fd:02:8f:36:87:d1:
                    4b:a1:ec:a1:19:9c:0a:85:d2:64:22:fb:66:46:0c:
                    4e:e3:b6:02:0c:b4:09:b4:e9:b3:d9:d2:8d:d1:38:
                    44:90:95:dd:cf:05:4f:b1:f2:d0:e2:36:8c:22:79:
                    e8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:66:CF:A6:B6:8C:90:88:B3:8E:DD:80:CB:93:AA:F1:CC:A8:E6:D0
            X509v3 Authority Key Identifier:
                keyid:EC:B9:87:2D:66:22:F7:0B:84:27:A8:9B:15:84:A3:D0:68:14:0D:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e9a783da1aeb3cae7aede602a40423c90e2036c2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d4a9c88d-aae0-477e-91d8-8b57296a0547/fa4059d5fba8f3ba315fd77b4f0753beb98af283.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d4a9c88d-aae0-477e-91d8-8b57296a0547/e9a783da1aeb3cae7aede602a40423c90e2036c2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.65.0/24
                IPv6:
                  2803:10::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:2c:65:fa:11:19:d9:a2:b2:1d:25:d2:68:90:4d:cc:69:cb:
         b5:d2:d8:a1:fc:46:7e:78:4a:11:c5:b3:2f:19:50:26:a1:67:
         16:1b:e9:20:6c:ea:f2:60:5a:e6:f3:0a:e4:17:cf:c1:38:5b:
         24:26:c6:af:5b:a5:2e:0f:83:dd:5b:ca:23:41:21:ab:53:c3:
         45:20:a6:dd:67:a4:4f:5d:71:bd:f6:4f:05:65:8d:d4:d5:10:
         2a:5b:a0:23:ad:9e:0e:f7:89:d7:33:91:e0:14:1d:28:9a:8a:
         9e:d8:05:6d:ef:6b:c1:2f:73:f3:d4:e8:cb:82:8a:30:98:10:
         12:16:e4:a9:8a:be:59:4b:27:e5:7d:61:56:23:8f:9c:fe:68:
         56:ff:ef:e1:07:00:15:89:03:f0:58:47:cf:d2:d6:c4:bb:3d:
         dc:cb:42:63:df:b7:23:13:a0:ee:ad:fa:99:ee:f6:1b:13:cf:
         29:36:ab:a1:5c:15:b8:19:80:a1:06:57:fa:b5:2e:7a:20:10:
         e5:7b:e1:30:cd:af:5a:bb:3a:ad:82:71:19:ed:eb:cc:b8:f6:
         61:8b:b2:7b:f2:1a:99:72:48:73:2f:6e:61:55:2b:58:24:bd:
         2a:b8:f1:8c:6b:b1:43:4d:72:8c:94:d5:3d:be:89:b6:7d:c8:
         68:fd:d3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----