Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dfa22ea5-a0dc-4375-9d7c-b3d8a091d8d2/4a4ae8eb15fd7c4c624501106820ed033a21602e.roa
File:                     4a4ae8eb15fd7c4c624501106820ed033a21602e.roa (raw, json)
Hash identifier:          sSZecGveDoRwe0vYs9Q7ItrFlVbA//6QsEoFIswvCYw=
Subject key identifier:   5D:E8:1A:2C:08:BB:73:69:77:A9:53:97:4F:68:B1:20:40:4B:14:7F
Certificate issuer:       /CN=e77c34f503542d48287dc7914afb0e49515b1dbe
Certificate serial:       0C9130
Authority key identifier: 5E:D1:C5:6E:75:E9:1D:CE:C9:5D:8B:ED:BE:98:A3:19:68:63:9C:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e77c34f503542d48287dc7914afb0e49515b1dbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dfa22ea5-a0dc-4375-9d7c-b3d8a091d8d2/4a4ae8eb15fd7c4c624501106820ed033a21602e.roa
Signing time:             Wed 24 Mar 2021 14:39:33 +0000
ROA not before:           Wed 24 Mar 2021 14:39:33 +0000
ROA not after:            Tue 24 Mar 2026 14:39:33 +0000
asID:                     23031
IP address blocks:        192.207.67.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823600 (0xc9130)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e77c34f503542d48287dc7914afb0e49515b1dbe
        Validity
            Not Before: Mar 24 14:39:33 2021 GMT
            Not After : Mar 24 14:39:33 2026 GMT
        Subject: CN=4a4ae8eb15fd7c4c624501106820ed033a21602e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3e:fc:0c:85:39:38:8d:c8:d4:cd:45:e5:4d:
                    d1:25:10:a2:7d:75:cc:28:93:1b:07:6d:3e:eb:11:
                    b8:0c:d2:a5:d9:ef:5b:de:44:43:c0:f8:95:b8:37:
                    23:87:e9:42:d4:e0:86:9b:32:e4:14:19:b4:22:71:
                    b5:ed:57:95:ec:6b:5b:a3:99:45:d9:c9:23:c2:1d:
                    fd:e3:5e:2c:6e:ee:fc:f0:a2:1f:cb:b9:1e:d1:b3:
                    c9:97:b2:57:79:ed:b4:5e:e1:fc:91:68:42:ad:13:
                    16:28:f8:df:cf:15:98:e5:f9:6f:e1:7e:44:fa:b0:
                    94:31:f7:08:8d:2b:35:b6:03:15:5c:77:ef:b9:79:
                    0d:cf:3a:89:9f:7e:bd:66:11:3c:e1:a5:23:79:c4:
                    29:e2:de:2e:45:e6:91:f3:02:46:17:90:80:e6:ca:
                    64:eb:f8:64:b3:2e:90:9b:2b:ac:c2:71:fa:24:2d:
                    14:62:c7:2e:7b:11:90:e1:ea:fc:e9:c0:b5:cd:aa:
                    06:8a:d3:01:f0:08:45:1d:e5:ae:26:3c:54:ea:7b:
                    2c:f9:cb:a3:af:a5:9b:f3:9e:b1:9a:39:d4:88:5e:
                    26:44:42:e8:32:7d:bc:f6:97:6b:0e:5b:a4:4b:c6:
                    5d:1f:10:6b:2a:69:d4:4f:e8:48:a6:77:cc:62:13:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E8:1A:2C:08:BB:73:69:77:A9:53:97:4F:68:B1:20:40:4B:14:7F
            X509v3 Authority Key Identifier:
                keyid:5E:D1:C5:6E:75:E9:1D:CE:C9:5D:8B:ED:BE:98:A3:19:68:63:9C:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e77c34f503542d48287dc7914afb0e49515b1dbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dfa22ea5-a0dc-4375-9d7c-b3d8a091d8d2/4a4ae8eb15fd7c4c624501106820ed033a21602e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dfa22ea5-a0dc-4375-9d7c-b3d8a091d8d2/e77c34f503542d48287dc7914afb0e49515b1dbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.207.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:dc:e0:da:bd:bb:45:23:91:65:88:da:49:1b:53:e7:95:0e:
         22:c6:4a:f8:91:95:03:8d:85:42:5a:6c:64:5f:5d:69:f6:2a:
         fc:b1:53:f7:7b:41:57:50:18:9d:57:fe:a8:b5:91:33:f6:8b:
         db:bc:43:93:3b:ba:86:44:a1:53:5a:5a:65:21:c0:31:5f:1f:
         64:01:59:e7:23:57:c7:ed:23:c1:99:13:fa:c0:75:19:1a:84:
         c0:5d:af:f9:ff:7b:fb:e3:1f:ae:a3:fc:d1:68:04:c5:27:b7:
         b1:25:df:b2:10:69:a0:86:fa:a7:7f:5f:61:a5:28:cc:2c:23:
         fa:2a:fe:ce:22:c4:1d:1b:f7:48:49:5f:13:41:03:13:ad:88:
         dd:9e:47:c0:2b:12:65:57:30:b9:2a:db:94:d2:55:de:cb:d4:
         af:f0:2f:5e:d8:d8:9f:1c:ad:d6:58:23:b3:af:b6:89:9d:4b:
         ea:d9:c4:ff:a7:2b:0d:88:6a:fc:83:ab:d3:39:1a:c1:9d:cb:
         5b:b6:52:21:39:9c:74:6f:b3:37:88:bc:90:f6:4d:14:ad:0f:
         bb:db:a3:55:b8:97:52:d8:7b:8e:71:b0:0b:7b:d0:37:33:d7:
         5c:05:63:b7:f0:39:fa:85:68:52:47:95:ec:f4:80:0c:bb:c9:
         50:0d:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----