Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/b77303aaad6823910d98d63fe157b909aec65f5c.roa
File:                     b77303aaad6823910d98d63fe157b909aec65f5c.roa (raw, json)
Hash identifier:          N/zrKsFKiNI4eHN30xNKQmuNwGB0NFhLbb/vGJaf8zE=
Subject key identifier:   CB:39:C1:4F:E6:1F:93:0D:0D:80:A7:2E:61:F4:1D:7B:2C:B1:7C:7F
Certificate issuer:       /CN=b7f1296c01cda2bce364cd2e1662759a0dfc92bd
Certificate serial:       0D8051
Authority key identifier: CB:8E:5F:B1:CF:1C:FC:20:81:36:1B:EB:51:E0:A2:36:F6:EB:87:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/b77303aaad6823910d98d63fe157b909aec65f5c.roa
Signing time:             Wed 24 Mar 2021 14:37:26 +0000
ROA not before:           Wed 24 Mar 2021 14:37:26 +0000
ROA not after:            Tue 24 Mar 2026 14:37:26 +0000
asID:                     263248
IP address blocks:        200.192.236.0/22 maxlen: 22
                          2803:980::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 884817 (0xd8051)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7f1296c01cda2bce364cd2e1662759a0dfc92bd
        Validity
            Not Before: Mar 24 14:37:26 2021 GMT
            Not After : Mar 24 14:37:26 2026 GMT
        Subject: CN=b77303aaad6823910d98d63fe157b909aec65f5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:77:f5:e7:c1:4a:24:c4:00:65:28:c4:62:4c:
                    d8:66:96:2d:da:7b:96:ad:ec:3f:c6:e5:41:d1:bc:
                    33:f6:23:40:73:eb:70:7a:bc:a0:a8:21:5d:f3:39:
                    11:ef:92:4d:fa:00:84:a0:b2:ab:74:a1:41:b6:de:
                    18:ee:84:a1:c4:16:87:7e:62:b7:f7:36:c8:eb:05:
                    62:cf:95:32:1d:18:60:ed:9c:44:b4:bc:79:c8:bf:
                    f9:7a:63:95:b8:91:87:05:c4:09:f0:5e:ea:6a:03:
                    33:df:89:65:31:6d:5b:e0:0d:18:2f:4a:6e:ed:76:
                    03:bc:4d:bf:61:d0:c9:4a:f1:df:3c:23:0b:91:dc:
                    0f:37:c4:4e:50:69:7e:7a:2d:17:68:10:7d:eb:cc:
                    2c:6e:bb:a4:19:84:d5:7a:fe:2c:80:5b:b4:1c:8a:
                    c4:26:b8:74:68:66:b4:c1:3b:f0:2a:fa:92:a4:a6:
                    2d:76:53:03:f7:16:ab:c1:c5:08:49:13:ec:8f:1e:
                    a1:35:dd:33:67:d7:bd:a1:ae:86:bf:2a:1c:31:c0:
                    18:06:c2:35:a5:5a:96:dd:95:08:b5:c4:4e:cf:33:
                    ae:52:5d:79:90:2c:ce:a4:69:05:3e:58:8b:31:ab:
                    43:9c:32:f2:54:f6:a8:ff:b2:fa:4d:8d:26:19:f2:
                    2a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:39:C1:4F:E6:1F:93:0D:0D:80:A7:2E:61:F4:1D:7B:2C:B1:7C:7F
            X509v3 Authority Key Identifier:
                keyid:CB:8E:5F:B1:CF:1C:FC:20:81:36:1B:EB:51:E0:A2:36:F6:EB:87:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/b77303aaad6823910d98d63fe157b909aec65f5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebd47514-f940-45be-bac4-9cf8dc814028/b7f1296c01cda2bce364cd2e1662759a0dfc92bd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.236.0/22
                IPv6:
                  2803:980::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:43:dd:78:8a:f9:ac:8f:3e:5c:fb:d9:ee:0c:71:e4:78:9d:
         c9:dd:85:36:22:73:f6:5c:23:09:62:47:8a:2e:92:13:db:ab:
         3f:9e:83:e7:e8:cd:d2:3d:f7:2a:45:6f:61:31:7f:08:31:10:
         13:9f:ea:58:7c:68:d7:02:21:bf:e3:1a:a8:37:67:56:c8:8d:
         c7:e7:fc:59:94:55:5b:ea:42:22:cc:df:c9:2e:84:41:83:2d:
         1f:03:56:64:41:da:7d:14:59:07:d6:ba:d6:7e:f6:1b:28:c4:
         8b:5f:d8:48:de:96:b8:87:b5:c6:f7:8f:ca:b6:3b:15:78:4e:
         29:6a:15:39:f3:79:b6:2f:f5:83:96:fc:c8:0b:7f:d2:b7:7f:
         c0:76:6e:42:4a:9f:90:8b:48:52:5c:b2:53:4d:30:a0:92:49:
         63:4b:4a:9d:0a:92:ea:96:bd:7d:5a:d8:76:ac:14:cc:86:cf:
         e1:35:eb:1c:a9:ec:ac:69:d1:b6:d5:fe:41:d7:77:d8:3d:dc:
         8e:04:41:5d:d4:b5:d7:3d:76:fc:b5:50:46:45:ac:32:c0:e5:
         b3:74:19:05:2c:56:a6:fa:0a:c1:14:81:2b:cc:d7:f0:52:cf:
         9b:6c:a6:b6:1a:a6:c4:d6:d6:87:7e:86:c1:b6:e0:71:9b:bc:
         c7:9f:a8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----