Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/9479f7f468193d26cfef5addc622818bf894f05a.roa
File:                     9479f7f468193d26cfef5addc622818bf894f05a.roa (raw, json)
Hash identifier:          PVmjpuQ/wwpHS4Jl60N5QjG1O1VXUigeSpzyk2c3bOs=
Subject key identifier:   22:B7:A3:64:5C:3B:52:A6:BC:F5:CD:7A:A2:CF:53:BC:CA:A6:DD:F2
Certificate issuer:       /CN=b7e4d19c57f9e363d6970c924c1351eca876c872
Certificate serial:       0D1E32
Authority key identifier: C3:33:23:06:80:FA:F5:DE:62:33:71:9D:18:02:56:C2:02:14:95:91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7e4d19c57f9e363d6970c924c1351eca876c872.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/9479f7f468193d26cfef5addc622818bf894f05a.roa
Signing time:             Wed 24 Mar 2021 14:37:15 +0000
ROA not before:           Wed 24 Mar 2021 14:37:15 +0000
ROA not after:            Tue 24 Mar 2026 14:37:15 +0000
asID:                     263762
IP address blocks:        200.5.48.0/20 maxlen: 24
                          2803:5180::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 859698 (0xd1e32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e4d19c57f9e363d6970c924c1351eca876c872
        Validity
            Not Before: Mar 24 14:37:15 2021 GMT
            Not After : Mar 24 14:37:15 2026 GMT
        Subject: CN=9479f7f468193d26cfef5addc622818bf894f05a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fc:ae:b8:fe:2c:36:aa:a7:ab:25:24:3d:23:
                    ff:bb:b7:22:4c:8d:d2:e7:47:c2:87:b7:39:ac:90:
                    f9:f3:1f:f5:cc:c0:22:52:bd:79:05:7e:d3:b6:62:
                    7a:a5:7b:b5:cf:c7:6f:48:35:d3:fd:75:40:ad:94:
                    46:24:e7:da:36:10:30:6a:fd:e4:0b:e8:68:bf:33:
                    85:63:71:c5:45:d3:e2:a9:e1:2a:1a:4c:64:c5:7c:
                    6b:91:bc:25:0e:48:68:bd:64:17:c1:f7:b1:f0:37:
                    b7:24:bb:35:be:97:28:a2:e5:86:c3:f7:29:99:fd:
                    52:a8:8b:e6:39:2d:66:84:9b:8f:d9:7f:a5:6d:f0:
                    3e:c0:19:3a:5d:53:e5:33:00:98:b9:e2:6f:6c:24:
                    6e:d2:4e:09:24:26:70:1e:77:39:f3:f8:11:72:41:
                    ee:b2:9c:3f:27:88:57:a3:e3:53:70:f6:46:56:ec:
                    66:d7:2d:70:92:7e:cc:79:d1:9d:36:79:58:90:9c:
                    96:34:32:81:88:f7:82:65:64:7f:11:fe:ed:6c:18:
                    31:63:03:28:37:d3:85:ca:4e:42:b4:56:ec:30:7c:
                    09:5f:12:56:8b:54:e1:22:b6:70:9e:8c:59:e4:b1:
                    87:59:da:1f:9b:2d:78:7d:ea:9f:03:34:0c:31:99:
                    5d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B7:A3:64:5C:3B:52:A6:BC:F5:CD:7A:A2:CF:53:BC:CA:A6:DD:F2
            X509v3 Authority Key Identifier:
                keyid:C3:33:23:06:80:FA:F5:DE:62:33:71:9D:18:02:56:C2:02:14:95:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7e4d19c57f9e363d6970c924c1351eca876c872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/9479f7f468193d26cfef5addc622818bf894f05a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e95af83d-0868-4e73-9cf7-2816d3a1e5e9/b7e4d19c57f9e363d6970c924c1351eca876c872.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.48.0/20
                IPv6:
                  2803:5180::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:ae:b0:ee:3d:ad:c8:e0:27:38:07:73:c9:9e:e8:87:b5:44:
         49:f6:48:a6:b2:bd:c3:a1:5e:f1:6d:c5:9b:5a:be:22:71:f6:
         6f:ee:2f:0d:6f:aa:0f:df:73:32:78:15:71:94:a3:56:58:33:
         53:59:22:3c:6f:5d:4c:ab:dc:18:a8:90:40:2e:25:d4:c2:6f:
         70:01:27:a9:ed:40:f5:3d:93:bc:c9:25:16:46:ee:26:08:46:
         8f:fb:ec:6d:72:0f:a6:d5:28:0d:2e:0a:0f:79:2b:a5:06:0c:
         4c:94:48:64:2f:07:77:60:14:fe:22:da:46:25:ef:6c:dd:24:
         e9:1d:ef:5e:b8:6a:a6:b4:a3:8f:63:9c:a2:e4:28:6c:84:51:
         5f:09:7d:9d:82:ba:10:1c:a9:ce:4a:38:05:5a:09:c6:63:95:
         8f:9b:eb:99:bb:7a:3b:c2:1c:c7:4f:29:4f:7f:69:fb:2d:bd:
         f4:a6:3e:56:48:44:3a:ee:5f:08:ba:09:f0:5b:ad:ac:ca:95:
         79:05:62:6e:54:bf:4e:6d:b3:df:34:d3:eb:43:2e:dd:e4:d3:
         0a:2d:dd:19:b5:be:43:ed:e8:2e:6c:4e:d4:53:d1:d0:65:a1:
         14:c1:d1:15:17:ad:14:7e:ca:d8:39:2f:34:57:ec:f4:25:24:
         14:d4:e9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----