Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/0017b3616482c7262834bb0e37aede7f1018f618.roa
File:                     0017b3616482c7262834bb0e37aede7f1018f618.roa (raw, json)
Hash identifier:          j/R3SnTftF/HSAocpECB28yU8IAoOK5x1KRfO81nlaU=
Subject key identifier:   4A:96:77:53:D9:95:39:6E:7C:EE:DB:C0:7F:80:BB:AB:07:57:BB:68
Certificate issuer:       /CN=77235f66b6c5d5c31869066c4d405d67062012cf
Certificate serial:       177888
Authority key identifier: 0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/0017b3616482c7262834bb0e37aede7f1018f618.roa
Signing time:             Tue 10 May 2022 19:26:29 +0000
ROA not before:           Thu 28 Apr 2022 03:00:00 +0000
ROA not after:            Sun 28 Apr 2024 03:00:00 +0000
asID:                     16509
IP address blocks:        200.12.197.0/24 maxlen: 24
                          2801:0:60::/48 maxlen: 48
                          2801:0:62::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1538184 (0x177888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77235f66b6c5d5c31869066c4d405d67062012cf
        Validity
            Not Before: Apr 28 03:00:00 2022 GMT
            Not After : Apr 28 03:00:00 2024 GMT
        Subject: CN=0017b3616482c7262834bb0e37aede7f1018f618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:46:77:40:f5:b5:62:d0:da:01:1c:95:ab:
                    72:9e:24:f5:a3:5c:b5:13:69:7f:63:8d:59:12:0e:
                    0d:33:d6:dd:30:5d:8e:d2:e0:01:9a:3b:19:b6:a6:
                    1d:58:2e:a7:27:b7:59:43:11:86:61:57:69:63:e6:
                    66:62:fe:14:c6:2c:7d:a7:da:bd:d3:7b:32:ef:43:
                    eb:58:02:5f:2f:ce:83:24:8f:48:03:66:93:81:f7:
                    d9:46:62:94:45:27:91:f5:c9:57:e1:90:04:7f:90:
                    fc:b8:15:48:73:75:67:ba:04:46:7a:46:53:84:c0:
                    78:58:ac:00:71:61:a9:a5:4a:83:4f:ec:39:c3:ce:
                    47:84:96:0f:58:f0:27:74:71:d9:da:43:db:de:c4:
                    e0:ed:ff:80:91:8e:08:88:ad:0b:75:ce:42:f4:27:
                    08:58:8a:d7:da:58:14:7c:fe:39:88:be:e9:c4:ed:
                    88:29:a2:f2:8a:c0:34:b5:4c:00:45:e6:c1:17:22:
                    a1:01:c0:d2:10:7f:bb:9c:d1:be:03:b4:c7:87:d5:
                    bd:af:75:b8:ba:f2:be:1c:b8:f7:bb:33:02:67:9c:
                    f2:4f:28:c5:55:45:c4:d5:71:f9:e9:36:11:f5:38:
                    15:d9:87:60:74:a3:79:c8:85:ed:01:b7:51:cf:f2:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:96:77:53:D9:95:39:6E:7C:EE:DB:C0:7F:80:BB:AB:07:57:BB:68
            X509v3 Authority Key Identifier:
                keyid:0A:4A:B9:05:85:69:40:10:64:D0:F6:94:9F:37:33:29:72:06:DD:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/77235f66b6c5d5c31869066c4d405d67062012cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/0017b3616482c7262834bb0e37aede7f1018f618.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e22c3773-9773-4eb6-983f-4bc0ea8c932b/77235f66b6c5d5c31869066c4d405d67062012cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.197.0/24
                IPv6:
                  2801:0:60::/48
                  2801:0:62::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:47:84:f3:ba:15:dd:9c:17:a8:3f:01:5f:8e:7f:ae:f5:8e:
         25:ae:35:eb:ff:6e:0b:47:81:ac:6c:64:07:a7:af:94:e0:6d:
         48:d2:7b:fc:dd:31:e1:27:9d:07:2c:c7:f3:9e:ec:31:5f:3c:
         14:22:4d:8c:d4:7b:e1:ad:c9:e6:ef:a4:48:49:86:9e:35:54:
         da:ed:4c:cb:2d:05:0a:c6:b8:d6:00:fb:19:3f:ac:69:ef:44:
         f5:96:79:ec:32:34:c1:42:a4:93:55:0e:9a:49:bd:d9:e3:38:
         fe:af:ba:ac:20:ef:41:27:66:00:42:e1:a5:9f:a9:f1:b7:fe:
         ac:6f:68:1e:15:51:c8:1b:a1:e1:ba:ef:91:0e:9e:7d:61:8a:
         49:d8:c5:5c:6e:51:83:08:fa:91:2c:69:86:2c:78:7c:55:c4:
         bd:c9:6a:88:76:36:d1:45:dd:0f:fc:c3:d5:e8:ca:fd:7c:b4:
         1e:eb:4d:d9:9a:f1:cc:c8:2a:b6:c3:29:02:19:b5:55:b8:9f:
         69:50:2c:3f:79:3e:f6:5d:31:c9:f8:0c:53:a9:81:86:26:29:
         3b:7e:dd:08:68:0b:4a:bf:80:87:81:0c:6b:be:3d:a4:0a:73:
         42:c8:57:24:34:2f:7d:24:8d:97:04:a1:1c:b2:4b:94:4a:55:
         cc:0e:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----