Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/7fdd80b177feff9f4ea0e998f3b27f92654c620e.roa
File:                     7fdd80b177feff9f4ea0e998f3b27f92654c620e.roa (raw, json)
Hash identifier:          CGYNmEQN47AcweqM2rYzvrsb+vYfT0OJM4tA2mmCx8c=
Subject key identifier:   29:5D:65:B1:13:CC:CC:B1:D8:67:10:59:8F:9D:3E:94:C8:22:B4:5F
Certificate issuer:       /CN=07c5dda587eb5b6e1e6a7dec2c035772d8503e12
Certificate serial:       0C11AD
Authority key identifier: C9:07:2B:7E:CE:38:83:76:0B:29:28:73:AB:2C:50:1C:07:AE:97:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c5dda587eb5b6e1e6a7dec2c035772d8503e12.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/7fdd80b177feff9f4ea0e998f3b27f92654c620e.roa
Signing time:             Wed 24 Mar 2021 14:32:06 +0000
ROA not before:           Wed 24 Mar 2021 14:32:05 +0000
ROA not after:            Tue 24 Mar 2026 14:32:05 +0000
asID:                     10617
IP address blocks:        200.59.64.0/19 maxlen: 24
                          200.59.96.0/20 maxlen: 24
                          200.59.112.0/20 maxlen: 24
                          201.221.96.0/20 maxlen: 24
                          216.244.192.0/18 maxlen: 24
                          2803:9780::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 790957 (0xc11ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07c5dda587eb5b6e1e6a7dec2c035772d8503e12
        Validity
            Not Before: Mar 24 14:32:05 2021 GMT
            Not After : Mar 24 14:32:05 2026 GMT
        Subject: CN=7fdd80b177feff9f4ea0e998f3b27f92654c620e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:d2:db:51:55:e5:f5:00:17:1a:b6:74:22:
                    3e:33:a7:28:5a:57:65:cf:4f:97:d5:2e:28:9d:6e:
                    4a:e8:37:6a:c9:a9:95:d2:39:86:54:16:c0:40:4c:
                    71:0b:cf:73:13:61:3d:52:b2:08:bf:ce:d8:ba:bc:
                    bf:47:f1:b4:e4:f8:bb:bc:2e:46:a0:0f:05:67:3a:
                    f4:c3:37:92:0a:2f:0b:68:06:6d:3a:6d:92:75:ef:
                    e2:27:3a:20:82:24:38:0e:06:4c:3d:35:74:4f:01:
                    1c:17:35:19:9d:ce:21:3b:61:1f:e2:ec:bc:4b:0b:
                    93:01:6e:53:26:4a:80:69:52:06:d2:b0:25:a7:b2:
                    83:d0:3d:80:19:c0:88:34:39:f3:21:e4:86:3d:94:
                    d3:29:5c:60:b6:ff:5a:4b:b6:10:b9:f9:e2:a1:16:
                    85:d9:30:88:14:06:9f:5c:74:39:db:b2:2a:8a:87:
                    f3:80:6a:76:61:7b:9e:83:b6:06:09:42:99:95:ce:
                    27:b6:e7:49:99:b5:13:ca:f7:0a:15:a1:59:55:cf:
                    20:a3:27:f1:c9:26:40:43:1c:5f:88:1a:a3:bb:a3:
                    db:47:d1:16:34:ec:80:78:7c:78:9d:a3:4a:e0:e8:
                    07:6c:86:f6:e6:a1:4d:0d:f2:25:3b:4b:00:91:2a:
                    44:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5D:65:B1:13:CC:CC:B1:D8:67:10:59:8F:9D:3E:94:C8:22:B4:5F
            X509v3 Authority Key Identifier:
                keyid:C9:07:2B:7E:CE:38:83:76:0B:29:28:73:AB:2C:50:1C:07:AE:97:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07c5dda587eb5b6e1e6a7dec2c035772d8503e12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/7fdd80b177feff9f4ea0e998f3b27f92654c620e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e0736bd9-5be5-4f80-b80d-e864c0e3bea7/07c5dda587eb5b6e1e6a7dec2c035772d8503e12.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.59.64.0/18
                  201.221.96.0/20
                  216.244.192.0/18
                IPv6:
                  2803:9780::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:11:7d:14:24:eb:0f:d5:2e:0e:ba:fa:e3:f5:3e:e2:df:c2:
         4b:71:6d:d8:73:96:d1:e6:db:e3:5d:08:e2:30:d6:3e:ea:64:
         c4:9b:cf:e3:ba:a7:a2:ba:eb:b1:e0:20:ed:78:58:5d:0f:11:
         24:0b:9b:3d:23:21:28:7c:01:2d:cb:8f:4a:c0:b8:b7:82:d3:
         af:c8:0e:20:67:5a:52:dd:25:3f:86:f8:20:af:94:3c:e6:2e:
         ca:93:ba:b7:53:9f:66:34:49:6d:a2:d7:26:f8:ab:96:99:91:
         d3:5a:0d:6c:79:2b:51:00:30:01:ef:89:e2:24:74:02:be:80:
         72:0d:56:97:19:63:58:a2:12:01:54:22:9c:3d:5e:3e:ca:e6:
         62:0d:d9:dd:2a:ab:64:4c:85:83:73:e2:ee:b1:1d:ea:a3:5c:
         53:76:c1:4c:4f:0f:eb:df:69:a5:12:f5:28:d8:d8:24:c6:b5:
         54:15:92:27:d9:6e:5f:09:20:86:f1:ae:56:c4:f3:e5:d4:fb:
         f9:4a:be:34:56:6f:ea:a3:6f:b7:ee:99:a9:2d:fe:f1:9e:c0:
         62:a1:fa:ef:41:75:f9:a5:03:46:2f:c9:31:62:66:fe:76:f1:
         e3:49:b2:dd:db:c5:7f:c6:51:9d:01:4d:3e:8f:e6:72:dc:85:
         9e:0f:95:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----