Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/97795691012c914e92687031f7c1707d1aaa14fd.roa
File:                     97795691012c914e92687031f7c1707d1aaa14fd.roa (raw, json)
Hash identifier:          LJ9E6EyUxpMc4UnSAprjFuBA8PyiWubAjrvUUQ4J1YQ=
Subject key identifier:   31:86:28:39:73:5A:11:D9:C5:C6:F5:3C:9A:7C:1B:03:A0:F0:D6:5E
Certificate issuer:       /CN=d096404f63772aa8165da1f7e01c34c4e378a916
Certificate serial:       0D3AEC
Authority key identifier: AE:84:A6:DF:5E:30:C0:53:10:DA:CC:67:B6:EF:FE:41:4E:74:D2:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d096404f63772aa8165da1f7e01c34c4e378a916.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/97795691012c914e92687031f7c1707d1aaa14fd.roa
Signing time:             Wed 24 Mar 2021 14:38:03 +0000
ROA not before:           Wed 24 Mar 2021 14:38:03 +0000
ROA not after:            Tue 24 Mar 2026 14:38:03 +0000
asID:                     264713
IP address blocks:        200.13.144.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867052 (0xd3aec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d096404f63772aa8165da1f7e01c34c4e378a916
        Validity
            Not Before: Mar 24 14:38:03 2021 GMT
            Not After : Mar 24 14:38:03 2026 GMT
        Subject: CN=97795691012c914e92687031f7c1707d1aaa14fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:34:67:8b:b0:b5:a8:60:72:b5:e3:0f:74:5d:
                    2e:6f:2f:47:6e:e2:19:54:09:0d:9d:e5:9f:fd:3b:
                    e0:97:6a:13:1f:c8:e9:0b:7a:29:1b:33:73:14:85:
                    c3:1e:b8:93:6d:7a:27:ac:53:25:7b:b4:3e:e1:d5:
                    d7:5e:68:b5:7e:b3:cc:a0:16:a1:6d:d3:ff:0a:55:
                    ea:22:3d:b4:4f:da:ef:b9:fe:af:1e:da:57:68:a3:
                    c8:a0:3e:40:2e:80:14:5d:90:83:98:9b:6a:13:2e:
                    86:20:9b:d2:44:65:90:75:22:28:2e:62:36:c2:16:
                    89:2e:aa:35:48:0f:6a:60:e2:e5:93:49:5b:d9:6a:
                    b8:a3:b2:a3:9b:81:43:fc:7f:3d:11:72:17:d1:3b:
                    ad:fc:7a:26:f1:e0:70:0a:db:f5:dd:96:01:85:99:
                    b5:0e:2b:3f:52:63:62:2e:a9:55:aa:75:4c:89:23:
                    8d:89:8d:35:d9:ed:d0:5f:a7:7b:3e:4b:00:7c:35:
                    0f:ab:8b:73:1e:2a:4b:cd:d6:51:86:ad:79:75:b2:
                    52:26:09:30:a9:cd:7f:e9:53:74:fa:4a:48:d0:4d:
                    b5:ca:53:ad:95:9f:a3:74:2a:ba:66:a7:f8:84:49:
                    88:b9:dc:3f:50:1a:f6:c6:ec:ff:54:0d:d5:0c:3b:
                    90:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:86:28:39:73:5A:11:D9:C5:C6:F5:3C:9A:7C:1B:03:A0:F0:D6:5E
            X509v3 Authority Key Identifier:
                keyid:AE:84:A6:DF:5E:30:C0:53:10:DA:CC:67:B6:EF:FE:41:4E:74:D2:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d096404f63772aa8165da1f7e01c34c4e378a916.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/97795691012c914e92687031f7c1707d1aaa14fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/d096404f63772aa8165da1f7e01c34c4e378a916.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         95:ba:71:3a:4e:50:d0:22:76:f6:92:32:7a:ce:57:3f:92:10:
         85:b1:1e:9c:59:61:ea:25:a0:53:f9:05:b8:42:e3:63:d6:ef:
         0b:f2:9e:1b:d9:55:aa:85:04:1f:a2:f6:c6:6f:f3:64:a4:90:
         88:7e:e8:54:6f:d4:22:ab:06:9c:0c:51:d9:f0:7d:c4:60:ea:
         9b:49:1d:82:47:c5:b1:a2:7e:ba:19:f0:a6:a8:e0:cc:55:dc:
         5c:b1:3c:5d:82:02:b3:a3:1f:78:0a:62:8d:9a:5c:de:b6:79:
         b1:2e:dd:85:61:f2:f4:84:87:a5:3f:cc:33:61:71:23:75:22:
         10:ce:5f:a6:81:19:b2:c8:21:76:7c:ca:f9:b7:be:bc:ce:e4:
         ed:ca:7c:9b:80:18:cf:6d:7b:9b:ad:e6:a6:7f:cd:27:46:28:
         2c:92:6c:06:ea:ba:b7:c8:2a:23:cc:96:6a:48:0a:ba:9a:d1:
         f3:a4:f6:41:40:0d:6b:e9:ff:08:58:63:c0:76:f2:56:62:bd:
         7e:3e:9d:dd:3f:e4:8a:9c:48:17:cb:32:ee:d7:6f:40:76:75:
         7e:03:1b:3e:cc:12:d3:81:f0:cd:9f:14:82:ce:fc:d4:fb:1b:
         09:6a:fd:5b:22:81:a2:17:47:b7:a5:39:30:28:7a:e6:69:7b:
         d9:e1:21:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----