Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e1d170b9-8a92-4943-bf9a-80c50cc59f4b/f723ea82d15932d3c12bfd5f7806a6cdb341e511.roa
File:                     f723ea82d15932d3c12bfd5f7806a6cdb341e511.roa (raw, json)
Hash identifier:          oZXLMt9qk7vPyNPf6tmRIPmijR3cWAe7pa/fVjx5sg8=
Subject key identifier:   69:0E:98:50:E7:F1:EE:0E:C1:F0:A0:6D:2A:56:A7:90:58:8F:27:3C
Certificate issuer:       /CN=951ba54fe923a031f2cdd9c6bc26d2f6606cd26f
Certificate serial:       04C2
Authority key identifier: 3C:4C:E2:F6:4F:8D:E0:9C:36:F6:26:35:BC:41:58:A3:49:24:D3:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/951ba54fe923a031f2cdd9c6bc26d2f6606cd26f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e1d170b9-8a92-4943-bf9a-80c50cc59f4b/f723ea82d15932d3c12bfd5f7806a6cdb341e511.roa
Signing time:             Wed 27 Oct 2021 14:20:09 +0000
ROA not before:           Wed 27 Oct 2021 02:00:00 +0000
ROA not after:            Fri 27 Oct 2023 02:00:00 +0000
asID:                     52378
IP address blocks:        200.124.112.0/21 maxlen: 24
                          2801:0:1d0::/45 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1218 (0x4c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=951ba54fe923a031f2cdd9c6bc26d2f6606cd26f
        Validity
            Not Before: Oct 27 02:00:00 2021 GMT
            Not After : Oct 27 02:00:00 2023 GMT
        Subject: CN=f723ea82d15932d3c12bfd5f7806a6cdb341e511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ca:2c:b1:ab:a0:d5:2c:22:76:ed:91:ce:ab:
                    bf:eb:6a:3c:fb:a6:12:2e:e6:a7:a2:34:4c:7d:5c:
                    09:47:3c:ae:70:c3:72:d5:2c:b1:ba:d5:ef:f7:cb:
                    95:a7:b5:3d:a4:75:d8:32:84:2d:fc:30:54:89:2a:
                    a8:cd:61:8a:1c:cd:9f:45:14:41:aa:71:c7:20:21:
                    4e:8c:6d:42:e1:4e:5f:55:b9:2b:45:cb:53:be:56:
                    1b:b7:17:91:ca:54:93:59:28:c0:f8:29:42:88:43:
                    31:a2:89:51:f4:21:b7:b3:b8:fb:0d:e5:db:76:21:
                    3e:5b:70:47:44:a7:76:ba:3d:03:e6:7e:f4:33:c1:
                    b4:b5:6b:61:88:d6:96:c1:28:8c:49:69:68:2d:98:
                    07:18:27:57:e5:e3:d5:40:f8:0f:6a:88:63:62:89:
                    5a:07:83:4b:60:59:4a:ae:46:ff:e9:44:49:e7:ca:
                    ba:82:37:60:1f:b3:33:09:63:de:c0:fe:6c:45:d0:
                    5c:92:e9:36:21:5d:f0:ef:34:6c:f6:22:f8:68:4d:
                    ba:09:28:57:0d:e9:ea:96:14:e2:e8:b6:32:dc:a9:
                    05:98:1f:c5:70:47:59:62:f1:13:f9:77:bc:c9:18:
                    df:84:64:0e:0d:34:4d:e4:5c:9e:9c:78:4c:0c:cb:
                    9b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:0E:98:50:E7:F1:EE:0E:C1:F0:A0:6D:2A:56:A7:90:58:8F:27:3C
            X509v3 Authority Key Identifier:
                keyid:3C:4C:E2:F6:4F:8D:E0:9C:36:F6:26:35:BC:41:58:A3:49:24:D3:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/951ba54fe923a031f2cdd9c6bc26d2f6606cd26f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e1d170b9-8a92-4943-bf9a-80c50cc59f4b/f723ea82d15932d3c12bfd5f7806a6cdb341e511.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e1d170b9-8a92-4943-bf9a-80c50cc59f4b/951ba54fe923a031f2cdd9c6bc26d2f6606cd26f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.112.0/21
                IPv6:
                  2801:0:1d0::/45

    Signature Algorithm: sha256WithRSAEncryption
         7d:fb:b2:b0:d1:4d:c4:a2:b6:1f:c8:89:c8:b8:9e:5e:13:11:
         58:d5:74:db:9e:74:96:ab:d0:53:67:e8:d5:b5:f8:9a:68:2d:
         e0:c0:1a:18:ef:d3:16:05:ca:fe:c9:e8:fe:92:48:c5:a4:86:
         fd:2c:5c:cd:ca:63:3d:d5:b6:92:d5:a0:22:4c:06:32:5e:8e:
         41:7d:d7:c6:45:dd:35:66:35:5b:a8:0a:1b:15:f5:2e:5c:0a:
         13:82:2a:da:a5:7e:b4:b5:da:2c:24:6b:37:36:61:3e:30:3b:
         09:73:c6:72:cf:97:c6:20:2e:9f:e4:0d:f4:6f:45:69:3e:75:
         25:a2:c4:77:ab:a2:c0:64:58:5d:a7:47:4f:5e:ff:cf:20:0b:
         12:bb:9d:4a:a6:b0:ed:80:52:33:a2:e6:6f:bb:4f:f4:e3:7c:
         bd:d2:66:96:54:78:c8:ef:72:5c:bc:32:28:36:e0:aa:4d:a8:
         e6:9d:c6:21:da:83:02:d1:30:99:27:08:cb:7d:6a:66:2b:b1:
         6d:e3:b1:c4:3e:0d:ff:bd:9f:1c:f3:cb:9e:93:da:8b:0c:1f:
         bc:69:03:a5:be:af:53:3e:f1:bf:33:73:07:2e:a8:be:d2:dc:
         2c:ed:e0:04:2f:02:70:93:ce:f8:8c:1e:21:7d:37:0e:c0:e5:
         88:b5:b6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----