Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/a79cd88505a2a80f060f6d64f496a8bfc89ef9f0.roa
File:                     a79cd88505a2a80f060f6d64f496a8bfc89ef9f0.roa (raw, json)
Hash identifier:          1xmRKu/Ubw/AsPX1bQjlWZSujqgkmyqNyqd9WL6TJts=
Subject key identifier:   0B:28:48:C6:34:F6:21:20:90:81:82:D5:F2:06:E4:74:19:90:CF:1C
Certificate issuer:       /CN=b7f1296c01cda2bce364cd2e1662759a0dfc92bd
Certificate serial:       0D895E
Authority key identifier: CB:8E:5F:B1:CF:1C:FC:20:81:36:1B:EB:51:E0:A2:36:F6:EB:87:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/a79cd88505a2a80f060f6d64f496a8bfc89ef9f0.roa
Signing time:             Wed 24 Mar 2021 14:37:26 +0000
ROA not before:           Wed 24 Mar 2021 14:37:26 +0000
ROA not after:            Tue 24 Mar 2026 14:37:26 +0000
asID:                     263248
IP address blocks:        200.192.236.0/22 maxlen: 24
                          2803:980::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887134 (0xd895e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f1296c01cda2bce364cd2e1662759a0dfc92bd
        Validity
            Not Before: Mar 24 14:37:26 2021 GMT
            Not After : Mar 24 14:37:26 2026 GMT
        Subject: CN=a79cd88505a2a80f060f6d64f496a8bfc89ef9f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:96:b4:77:f4:c4:e1:f4:2d:bb:24:17:fe:5e:
                    6a:13:02:65:a0:ae:fb:e3:3a:1c:da:5f:2d:f4:f3:
                    42:a9:42:e2:cf:01:98:b3:6d:24:f5:cc:36:5a:a2:
                    46:2a:25:65:42:9d:69:f3:6a:7b:58:82:07:1e:29:
                    6b:03:d4:cd:d4:30:b4:5b:9d:bd:26:82:cc:a0:05:
                    17:0d:eb:46:6f:85:77:c7:82:cf:2d:80:af:5e:3e:
                    50:c3:a1:f7:86:de:2b:9b:5b:ab:2a:c8:e1:1c:87:
                    28:c3:a1:11:65:65:12:f8:18:8b:2d:b7:c7:be:93:
                    c0:27:e3:d2:ef:3f:66:3e:41:87:eb:43:08:44:e1:
                    20:0c:fb:44:9e:e3:a7:a4:c6:f4:fe:87:57:5c:01:
                    ef:0e:67:41:b7:34:4a:eb:b5:c7:12:ec:f4:b1:7a:
                    34:01:0e:2d:5f:bc:ad:90:22:ff:75:f7:d2:f8:cf:
                    f7:be:1c:72:28:66:00:2e:e3:58:8b:8b:e6:ab:33:
                    bb:9f:5e:99:99:6f:0b:95:15:46:ed:0b:d2:ac:db:
                    2e:f9:0d:b0:61:71:6f:a6:ea:b0:f6:86:9c:62:ea:
                    98:a9:32:ff:cc:0f:ef:36:d8:fd:ec:3a:14:e5:d2:
                    03:e2:68:28:bf:84:99:99:c5:41:4f:bf:18:6b:03:
                    42:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:28:48:C6:34:F6:21:20:90:81:82:D5:F2:06:E4:74:19:90:CF:1C
            X509v3 Authority Key Identifier:
                keyid:CB:8E:5F:B1:CF:1C:FC:20:81:36:1B:EB:51:E0:A2:36:F6:EB:87:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/a79cd88505a2a80f060f6d64f496a8bfc89ef9f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.236.0/22
                IPv6:
                  2803:980::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:7a:5a:4b:44:b0:64:48:32:e4:00:e2:2b:6e:9d:e7:5f:2a:
         83:36:ea:fd:e6:0a:6b:a3:68:d1:89:38:bc:5d:92:ea:f4:cc:
         a2:39:6f:5a:89:cf:cc:70:85:f9:55:2c:03:c9:fb:de:1d:27:
         d8:35:e0:0b:9e:7b:04:e9:a2:4b:f0:38:ee:a3:05:85:12:c8:
         08:29:41:2b:a6:95:2c:59:d7:c6:5e:9f:75:d4:0c:9a:31:76:
         f4:57:27:ae:a8:dc:8c:d7:8d:da:48:9b:f7:db:fb:8a:68:51:
         49:09:dd:4d:7c:0d:b0:0a:29:5f:19:b6:78:c1:d0:f8:12:8b:
         c0:64:ba:30:d7:8b:92:b0:02:fa:29:a4:b9:6a:a3:aa:c0:f5:
         43:f8:df:4d:9e:41:82:47:2b:16:2e:37:45:bb:a3:f2:1d:bd:
         26:e1:b2:14:99:8c:47:63:d8:fe:26:8e:99:76:7d:72:b7:7a:
         94:cc:e2:f7:a9:71:b0:44:0e:49:ac:b5:9e:13:36:21:41:07:
         8f:de:7d:14:53:c9:c0:c6:5a:49:5c:7c:a2:46:cf:5e:10:03:
         4e:81:88:c4:fa:5c:60:d4:8d:c4:6e:f8:6a:1a:d8:19:17:04:
         5d:a4:12:dd:c1:63:4c:a6:5c:5b:f4:b9:19:aa:ff:c8:b6:89:
         9b:b8:a3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----