Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/122794d25cebb7b927e8dde39d273384d9868dd6.roa
File:                     122794d25cebb7b927e8dde39d273384d9868dd6.roa (raw, json)
Hash identifier:          SCT29NfNIPLl6awPbOoVkQFE9Aocnv27FYAz2PPdo6o=
Subject key identifier:   62:0F:10:37:A2:DA:BF:64:84:10:B8:3A:C5:A1:D5:B2:A6:FF:6B:C3
Certificate issuer:       /CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
Certificate serial:       119287
Authority key identifier: C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/122794d25cebb7b927e8dde39d273384d9868dd6.roa
Signing time:             Thu 16 Sep 2021 21:43:01 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52483
IP address blocks:        200.110.120.0/24 maxlen: 24
                          2001:13c7:6f80::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1151623 (0x119287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e6abb9e295aea3473895245eb2e4f25f175b38
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=122794d25cebb7b927e8dde39d273384d9868dd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:6f:9e:44:be:1e:00:36:0e:99:dc:c0:28:
                    db:6a:4f:da:a2:02:8c:a7:92:76:49:9b:0a:e7:41:
                    9f:6e:fd:ed:2a:c4:fd:ce:14:d6:6b:21:c4:6d:63:
                    9f:88:bd:24:18:40:57:08:b3:4c:0d:6c:b5:26:13:
                    8e:eb:71:f1:6f:c6:30:91:02:44:72:f9:92:e5:5a:
                    92:15:da:40:9b:d4:48:60:c1:7c:ea:4b:c0:13:6b:
                    b4:3d:68:0c:bd:d4:ec:0b:77:5d:70:9b:8f:4b:77:
                    ad:46:f6:c6:d4:c3:e2:fa:91:b8:ec:70:8a:c7:50:
                    29:78:d7:5c:d9:e7:73:07:6f:fa:8d:ac:4a:e4:dc:
                    63:0f:f4:07:90:0b:39:46:ce:42:00:fb:63:d5:2e:
                    ab:83:d6:4b:00:a5:5a:1d:e1:b7:7c:14:96:a4:cb:
                    86:c3:6a:bc:ba:39:a4:36:80:0f:96:5c:19:93:48:
                    c5:99:23:81:c2:c2:78:5f:a1:84:f9:8e:05:b7:f7:
                    80:f2:f2:98:89:ac:b2:14:2b:16:1e:b7:9b:ce:43:
                    8f:93:ef:e7:91:ac:4b:fd:76:70:16:b5:e8:28:b6:
                    0c:ac:7f:7d:44:b2:d8:2f:4e:c9:df:47:a7:dc:da:
                    6e:84:95:b1:3e:d4:71:a5:88:56:8c:5e:cc:fe:f6:
                    58:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0F:10:37:A2:DA:BF:64:84:10:B8:3A:C5:A1:D5:B2:A6:FF:6B:C3
            X509v3 Authority Key Identifier:
                keyid:C0:CA:27:17:C5:5C:E3:9E:55:4B:B4:3B:F7:AD:12:09:3C:36:7E:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e6abb9e295aea3473895245eb2e4f25f175b38.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/122794d25cebb7b927e8dde39d273384d9868dd6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e55a4c42-fd1c-46c9-ac18-eff6281c8c38/c6e6abb9e295aea3473895245eb2e4f25f175b38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.110.120.0/24
                IPv6:
                  2001:13c7:6f80::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:85:e3:8e:5c:13:a2:d0:b9:03:1b:e9:68:62:0b:09:a8:18:
         94:ab:3c:12:ff:ab:6c:33:19:51:46:45:5a:2e:cb:29:94:8c:
         48:ca:14:b2:d9:b5:2b:87:4a:5c:a1:84:da:04:79:18:e1:ac:
         79:df:57:95:89:f7:2b:3a:36:d8:47:4d:23:f1:76:f4:0b:0f:
         e0:f6:6e:5a:71:36:3f:f0:05:fd:7c:6d:ba:1b:e8:b2:47:8c:
         7b:29:4b:5f:e7:aa:a7:a3:3a:8c:0d:29:dd:62:b3:f7:6f:06:
         de:05:89:20:46:09:d9:90:82:47:b3:d9:ee:9b:ac:d6:91:d4:
         3f:3a:50:65:38:dd:eb:ba:47:a2:da:8e:dd:d5:3e:04:a6:76:
         c3:2e:1e:0d:0b:63:e6:bf:a8:aa:78:68:5f:60:e4:69:fd:25:
         9b:8d:1c:ea:29:f7:e5:2d:b5:20:97:45:66:03:49:21:94:01:
         c8:ad:c0:f9:f7:dd:cf:cc:a4:b9:7b:d5:68:bf:c3:af:72:bb:
         a3:7b:1b:22:e3:a7:66:23:9f:13:b0:be:11:f2:65:7c:49:70:
         df:0d:89:6d:ff:33:6e:a9:04:82:01:96:e9:84:b8:3c:4e:86:
         aa:13:ca:e4:ca:a2:1d:77:ca:65:b3:15:f8:7d:11:37:6a:db:
         3b:c9:38:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----