Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e382157c-7713-45b6-a967-87cb8be92ab6/e7f807b76c02ca8fb9db4c975111f27aaa0d136f.roa
File:                     e7f807b76c02ca8fb9db4c975111f27aaa0d136f.roa (raw, json)
Hash identifier:          RsyshhbaGc6mlI3NfqMkCLlxJxhl0TULoK+NOg1Zjlg=
Subject key identifier:   02:B4:DD:BE:62:42:89:60:53:11:93:E5:A9:74:A1:A8:3C:B2:8D:1F
Certificate issuer:       /CN=527d885f64977eb75a29def1b96d007407e75b41
Certificate serial:       0CF4E5
Authority key identifier: 9A:F2:34:29:7B:C9:0A:B4:CA:49:27:D1:5F:DC:4B:0E:65:D7:BD:46
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/527d885f64977eb75a29def1b96d007407e75b41.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e382157c-7713-45b6-a967-87cb8be92ab6/e7f807b76c02ca8fb9db4c975111f27aaa0d136f.roa
Signing time:             Wed 24 Mar 2021 14:47:20 +0000
ROA not before:           Wed 24 Mar 2021 14:47:20 +0000
ROA not after:            Tue 24 Mar 2026 14:47:20 +0000
asID:                     22726
IP address blocks:        200.35.0.0/19 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849125 (0xcf4e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=527d885f64977eb75a29def1b96d007407e75b41
        Validity
            Not Before: Mar 24 14:47:20 2021 GMT
            Not After : Mar 24 14:47:20 2026 GMT
        Subject: CN=e7f807b76c02ca8fb9db4c975111f27aaa0d136f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:57:7b:89:e2:f5:31:26:ae:a1:8c:33:48:c8:
                    70:30:4c:85:36:a1:c8:cb:d1:8d:be:eb:6d:84:0c:
                    9c:61:df:15:f5:c4:b4:b6:5f:18:5e:42:98:78:20:
                    c2:d2:66:ad:2b:14:a7:54:c1:85:f7:ba:46:32:69:
                    6e:83:20:27:1b:d0:22:1f:0d:ec:fc:cb:12:ef:45:
                    d7:61:69:ae:4a:59:5b:05:6b:9f:10:0d:de:da:57:
                    75:09:ed:a4:cd:43:bf:40:7b:d2:a9:1d:40:95:07:
                    9a:d0:8e:bc:64:4f:ce:f2:95:29:8f:d6:46:f9:13:
                    43:b9:aa:ab:71:39:8d:00:96:99:7d:8f:6b:e5:ea:
                    88:0d:c1:fc:44:de:2b:98:76:cf:ad:9c:19:18:47:
                    d5:87:7a:15:62:9f:29:98:ea:b5:a7:8f:5f:45:71:
                    2d:a5:4b:27:ca:86:a8:e2:f3:cc:44:41:89:d8:1a:
                    7b:8b:b4:cd:5a:04:f9:36:95:83:21:77:ac:13:7a:
                    55:8a:0b:26:d6:90:9b:d9:11:82:49:f8:b3:d6:c2:
                    2f:3d:d1:90:79:59:af:99:20:23:f0:a9:98:53:95:
                    e4:c1:aa:95:db:ba:61:b3:df:b8:7c:74:c9:0c:b0:
                    a7:3b:af:fe:96:c4:0a:33:cd:3d:62:b8:76:27:09:
                    07:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B4:DD:BE:62:42:89:60:53:11:93:E5:A9:74:A1:A8:3C:B2:8D:1F
            X509v3 Authority Key Identifier:
                keyid:9A:F2:34:29:7B:C9:0A:B4:CA:49:27:D1:5F:DC:4B:0E:65:D7:BD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/527d885f64977eb75a29def1b96d007407e75b41.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e382157c-7713-45b6-a967-87cb8be92ab6/e7f807b76c02ca8fb9db4c975111f27aaa0d136f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e382157c-7713-45b6-a967-87cb8be92ab6/527d885f64977eb75a29def1b96d007407e75b41.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.35.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         28:25:c1:d7:1a:e0:01:4d:80:64:68:90:64:89:d3:85:94:7e:
         20:7e:a8:10:ba:7c:a2:0e:6f:ac:50:3b:25:d3:d7:d3:59:cb:
         dd:c2:b1:e1:12:e9:3a:6c:c4:4c:30:42:69:c3:95:52:73:5d:
         76:72:be:89:f3:db:37:ba:bd:d9:1a:55:0f:2e:e2:d1:1e:a2:
         54:45:dd:fc:17:2a:94:a2:e3:a9:a7:31:51:04:ce:db:37:3f:
         18:24:e6:19:0e:6b:77:08:1d:b5:ec:ba:2c:0d:c4:69:06:5f:
         da:0a:23:8d:f7:01:97:77:b9:1b:86:c2:c8:be:36:1c:32:c4:
         61:df:34:a9:bc:47:04:12:53:75:fc:4c:38:0d:4b:67:78:ff:
         4a:74:b6:9e:da:29:e3:b9:83:70:85:8c:87:12:aa:4e:b2:fe:
         b8:4d:50:d9:29:02:49:76:82:1e:70:de:c4:a7:b8:99:66:7b:
         a1:4a:f0:64:b3:a8:0b:22:97:19:4d:57:c3:77:bc:35:ab:1b:
         32:d0:cd:1f:7c:73:c3:17:f9:cc:1b:7c:ff:53:68:0c:73:d9:
         ec:3b:ca:e9:4d:74:ab:13:ac:db:16:e7:16:02:fc:1a:42:bf:
         7e:64:ba:12:94:63:c6:5f:7c:e1:d1:1e:5e:30:16:38:18:ef:
         2c:87:d7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----