Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/ba624ba30772e8dea8e776eea4a42c94b0ace65c.roa
File:                     ba624ba30772e8dea8e776eea4a42c94b0ace65c.roa (raw, json)
Hash identifier:          TYjg3cphd3J1ExSyisy9gplb0IniNmIQvb3NwVrawqM=
Subject key identifier:   74:31:16:EA:18:72:AC:B0:56:8F:5B:DC:52:32:74:C7:97:3A:F0:0D
Certificate issuer:       /CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
Certificate serial:       0C00FB
Authority key identifier: 26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/ba624ba30772e8dea8e776eea4a42c94b0ace65c.roa
Signing time:             Wed 24 Mar 2021 14:43:23 +0000
ROA not before:           Wed 24 Mar 2021 14:43:23 +0000
ROA not after:            Tue 24 Mar 2026 14:43:23 +0000
asID:                     7438
IP address blocks:        201.162.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 786683 (0xc00fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82a0f3b8699157d02e2e70513969f2e77b6b9db5
        Validity
            Not Before: Mar 24 14:43:23 2021 GMT
            Not After : Mar 24 14:43:23 2026 GMT
        Subject: CN=ba624ba30772e8dea8e776eea4a42c94b0ace65c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:95:81:b6:16:3c:7c:87:10:90:5a:7a:27:08:
                    45:70:f3:7b:d4:df:98:de:cd:ed:73:5f:93:f8:db:
                    af:b0:b3:8e:1b:56:2d:0a:9d:8e:a1:6c:4f:94:74:
                    a3:51:13:8c:73:eb:35:70:b9:c8:4b:06:45:17:b4:
                    77:64:9f:34:e7:6a:28:3f:f8:55:10:18:2a:61:93:
                    0d:20:5a:11:a1:84:ac:81:6f:76:52:55:b1:b5:a6:
                    11:68:b3:1b:c5:ab:72:0a:38:98:c9:6d:14:5b:e7:
                    f6:3e:67:4f:86:10:47:65:23:50:29:f9:cf:f8:96:
                    13:10:51:ad:4f:b8:f6:0b:1a:c2:67:26:dc:80:b7:
                    01:ff:bf:23:42:75:62:60:ac:bb:11:eb:1f:04:47:
                    7b:22:8e:02:fa:1e:64:18:b9:bc:e8:be:be:48:a0:
                    9c:b0:fd:00:ad:52:98:64:4b:a1:52:f7:c9:75:7f:
                    83:8d:c2:79:ae:14:b9:3d:25:98:a0:4e:92:80:16:
                    59:f1:2f:c3:a5:1f:00:53:cc:30:47:b9:f2:a0:3c:
                    be:2b:38:84:b3:db:23:6f:5e:85:9d:f9:17:1f:9a:
                    04:b2:54:cd:06:93:cb:8c:b3:d9:a0:c4:79:4f:8d:
                    e6:bf:6f:9e:c1:09:3d:b0:67:31:ec:b1:24:15:57:
                    88:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:31:16:EA:18:72:AC:B0:56:8F:5B:DC:52:32:74:C7:97:3A:F0:0D
            X509v3 Authority Key Identifier:
                keyid:26:E4:47:4D:F2:87:F7:F9:E4:DD:84:AA:2B:A6:B2:D0:ED:E4:EA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82a0f3b8699157d02e2e70513969f2e77b6b9db5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/ba624ba30772e8dea8e776eea4a42c94b0ace65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ead99edc-7c47-4c4d-a47a-3f7261ead2e3/82a0f3b8699157d02e2e70513969f2e77b6b9db5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.162.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4c:cf:e4:08:83:32:95:9d:75:cb:51:a0:f8:33:26:f4:20:13:
         e2:ea:c8:7d:d8:83:c4:e0:ad:22:ee:d4:51:8f:65:c8:41:b2:
         2e:e4:1c:3d:84:b3:6c:c7:2d:7a:55:df:ab:23:0d:40:45:1c:
         27:6f:0c:80:5c:1c:8e:5d:71:c3:ed:3a:03:04:2a:1e:d3:ab:
         7c:a9:92:94:08:79:73:d3:d9:c1:ae:a4:1a:41:1a:d3:a5:fb:
         8b:ee:bc:69:52:11:2c:04:0e:05:ae:49:21:24:89:e0:ea:a7:
         49:de:0f:57:2e:ef:cd:03:b2:99:50:ae:a7:52:81:f2:66:07:
         a2:1a:eb:e5:b3:00:f3:c5:3b:b1:ba:58:70:90:29:4f:10:5e:
         55:99:af:54:83:7d:ae:5d:f2:1f:1a:4d:4d:35:6c:ec:bb:b3:
         35:66:59:4b:86:9a:a7:b0:0d:98:cf:b5:9d:81:86:86:95:8f:
         ec:62:3d:41:4e:6c:3f:3a:77:84:e7:98:f5:7e:54:eb:7e:2b:
         dc:fd:ff:a1:10:81:86:3f:d1:1f:3f:01:35:ba:b9:e9:4a:cd:
         5f:99:3f:1d:e6:68:7d:b2:e6:ce:b7:ee:39:b1:e4:93:18:f8:
         c5:a4:6a:a2:06:4e:b3:0b:ac:e5:e7:26:6d:01:10:11:a5:30:
         65:65:e3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----