Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/5a8ccac21681e2b19a9b1b5ca11aa2171c32468f.roa
File:                     5a8ccac21681e2b19a9b1b5ca11aa2171c32468f.roa (raw, json)
Hash identifier:          Ypcb78D0dgmxletZg9LVSslS70YvZMcmNs9FjDiPlTQ=
Subject key identifier:   D0:2D:CA:CD:36:59:7F:65:3E:C3:64:FD:88:68:C8:FC:2F:8B:8E:95
Certificate issuer:       /CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
Certificate serial:       131FD7
Authority key identifier: FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/5a8ccac21681e2b19a9b1b5ca11aa2171c32468f.roa
Signing time:             Thu 30 Sep 2021 18:29:26 +0000
ROA not before:           Thu 30 Sep 2021 03:00:00 +0000
ROA not after:            Sat 30 Sep 2023 03:00:00 +0000
asID:                     28075
IP address blocks:        201.190.187.0/24 maxlen: 24
                          2803:6604:8000::/35 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253335 (0x131fd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88d3b38fb9bfced57c6ad5eb160c130acf32641c
        Validity
            Not Before: Sep 30 03:00:00 2021 GMT
            Not After : Sep 30 03:00:00 2023 GMT
        Subject: CN=5a8ccac21681e2b19a9b1b5ca11aa2171c32468f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:54:6b:f5:1b:73:f4:28:cb:c5:32:e9:d0:
                    d9:98:11:9e:2c:3e:29:f5:0a:a6:54:a2:ce:3d:52:
                    17:8c:53:fe:8f:2a:48:58:c4:ac:57:4c:7f:28:c0:
                    96:7a:e0:e7:58:3e:ea:6c:7f:66:78:21:61:7d:8e:
                    c1:2d:69:a1:6f:3e:23:16:a8:ed:dc:f6:5b:e1:b3:
                    a1:0b:30:a1:70:67:d8:41:e5:2a:aa:45:88:c8:0b:
                    7b:db:40:8d:8d:53:10:da:d8:d6:79:16:ba:49:4e:
                    38:ce:27:b5:55:4a:25:51:9e:6f:49:bf:87:8e:9a:
                    08:58:ef:13:27:a9:0b:95:e0:9a:03:37:29:ea:ef:
                    ae:2f:c6:ed:af:fd:0a:5a:31:01:dd:bb:ae:7f:6a:
                    c7:ff:40:a4:8a:3d:ed:7f:4f:49:54:e7:05:93:a5:
                    a8:dd:46:b7:a2:42:c1:43:56:28:76:a4:85:61:20:
                    35:ad:a1:7b:2d:25:eb:a4:5a:ad:7a:7e:c1:0d:fa:
                    c3:f6:df:f7:46:1b:d6:b1:6b:aa:24:4a:c2:30:8b:
                    9a:ad:c8:ed:dc:7b:31:b3:6a:78:4d:7c:43:d7:1a:
                    0c:a8:42:8a:66:9d:16:b1:84:75:d4:46:28:4d:10:
                    cc:ed:e5:75:f5:d7:5f:e7:25:33:84:3f:96:77:57:
                    6f:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:2D:CA:CD:36:59:7F:65:3E:C3:64:FD:88:68:C8:FC:2F:8B:8E:95
            X509v3 Authority Key Identifier:
                keyid:FB:1B:2A:C1:49:DD:65:34:44:95:86:34:F9:B3:B7:A7:B7:69:E9:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d3b38fb9bfced57c6ad5eb160c130acf32641c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/5a8ccac21681e2b19a9b1b5ca11aa2171c32468f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f015c46b-1540-49eb-b969-0f3c40e00140/88d3b38fb9bfced57c6ad5eb160c130acf32641c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.190.187.0/24
                IPv6:
                  2803:6604:8000::/35

    Signature Algorithm: sha256WithRSAEncryption
         86:ad:cb:58:f8:cd:38:83:ad:7f:e2:cd:62:06:94:68:9b:46:
         0a:45:b7:62:e3:0b:8b:91:56:6a:0e:b5:b7:25:af:b1:1e:fe:
         06:f8:12:f1:aa:7f:8a:a8:63:78:4c:eb:db:e7:e5:a6:f9:50:
         06:8f:69:9b:ac:ac:14:07:11:0f:09:3e:bc:ce:22:7b:21:45:
         ca:6c:08:fe:99:0c:4f:da:83:61:66:cc:06:81:05:fe:ee:e8:
         7f:01:44:7c:f1:99:e9:63:56:d4:f6:a1:2c:5c:2c:e6:ec:7d:
         12:58:6f:6a:11:23:63:28:66:ca:e4:73:83:53:c0:07:41:a8:
         49:2c:78:2d:0f:90:0f:34:c3:ae:ec:3f:7b:3b:4d:18:4d:57:
         a6:7d:98:df:0b:95:38:32:b2:dc:57:6d:13:b5:c4:8a:78:9d:
         a2:fc:61:ad:da:4c:15:7a:6b:ac:90:be:b2:35:41:6c:4e:7e:
         da:42:5f:b8:28:9d:e2:d3:dc:15:f3:c7:ac:c8:ce:c5:75:e4:
         3d:dc:24:a5:51:8f:74:f1:ed:1c:19:cf:09:ba:f3:3e:8c:72:
         2a:79:57:24:54:50:27:e2:bb:d7:19:2e:db:7a:f7:f5:a5:ff:
         cf:cd:d7:94:e4:93:e6:32:f4:16:6a:c9:93:b0:b8:3c:72:03:
         d6:b0:41:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----