Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/121e76bcaa911993bcd3c59ce095f80b887ce8f0.roa
File:                     121e76bcaa911993bcd3c59ce095f80b887ce8f0.roa (raw, json)
Hash identifier:          iTmtlV2PTvZSuyA/0Gk+2sE2lzOsSA22cjgipeJ3mQc=
Subject key identifier:   47:AD:A9:88:DF:A5:72:53:E4:1E:46:2D:EB:CF:3E:BC:E9:FB:88:55
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       1084BF
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/121e76bcaa911993bcd3c59ce095f80b887ce8f0.roa
Signing time:             Mon 05 Jul 2021 19:00:38 +0000
ROA not before:           Mon 05 Jul 2021 03:00:00 +0000
ROA not after:            Wed 05 Jul 2023 03:00:00 +0000
asID:                     27836
IP address blocks:        191.117.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1082559 (0x1084bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Jul  5 03:00:00 2021 GMT
            Not After : Jul  5 03:00:00 2023 GMT
        Subject: CN=121e76bcaa911993bcd3c59ce095f80b887ce8f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f9:e1:4d:0e:1e:64:5d:81:84:99:d0:aa:8e:
                    01:70:94:ee:75:5f:d3:26:02:49:a9:45:b7:8e:33:
                    3d:b0:7c:d3:8d:52:8f:73:9c:ce:ae:6d:85:33:b3:
                    96:c5:04:62:9d:90:38:85:1c:46:87:86:85:7d:87:
                    eb:82:e3:87:06:48:67:4d:d8:5a:ff:14:aa:9e:c1:
                    5b:24:f9:8f:e1:b2:56:86:24:97:44:29:ae:d2:51:
                    88:51:47:98:d4:a0:9a:a5:8c:33:76:4a:3f:66:79:
                    63:65:53:aa:2e:37:9d:b0:45:6b:0f:27:86:2e:fd:
                    cf:0a:a8:1f:07:33:23:05:24:3b:8a:de:e2:ab:67:
                    b8:f2:1e:71:68:d2:56:33:8c:f0:b3:7b:47:d0:10:
                    c4:01:5d:c9:f3:96:d3:ec:fe:e2:10:bb:b2:f3:ad:
                    aa:df:8c:cf:2e:fb:8d:7f:16:0d:aa:92:a0:01:50:
                    3b:8a:1b:25:d2:f0:28:f8:05:e4:2a:3e:54:b7:78:
                    9f:3e:1b:86:5c:2a:f7:db:fb:dc:81:26:eb:47:35:
                    61:b6:44:10:e9:bf:ee:d6:96:4d:0c:8b:c1:bb:65:
                    10:3c:c6:42:38:c1:42:f7:f7:ab:2f:af:a6:21:56:
                    07:fa:6b:6e:ad:15:a3:b2:46:84:d9:21:71:f0:09:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AD:A9:88:DF:A5:72:53:E4:1E:46:2D:EB:CF:3E:BC:E9:FB:88:55
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/121e76bcaa911993bcd3c59ce095f80b887ce8f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.117.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         18:bb:26:26:19:de:3e:26:27:3b:00:4a:03:e7:75:68:b2:64:
         03:8c:9a:f8:d5:d0:3a:92:9f:4f:1a:65:b6:f6:f1:3d:79:3a:
         70:2d:a7:1a:88:4e:50:4a:e2:0a:5e:18:98:be:9e:fe:14:0f:
         58:3a:1c:69:c9:26:8b:6c:7c:53:47:c1:6e:38:95:fe:aa:94:
         d2:40:10:9a:54:24:79:22:e3:ef:ca:d7:5f:67:b7:ed:59:f0:
         f0:9d:0c:62:ee:94:57:b0:7d:1b:aa:f5:15:75:fb:50:50:58:
         fb:d7:3a:a0:ae:47:c0:26:7c:2e:7c:57:36:ef:34:24:d5:2f:
         12:bd:0f:77:b9:21:bc:6d:00:56:16:8a:61:8a:ca:91:67:18:
         ad:f2:e6:fe:b8:b3:28:12:b0:95:3d:bb:6f:01:6c:5e:4f:73:
         4e:41:ef:b9:f6:90:10:b5:dd:7e:c4:de:72:ec:31:50:60:a5:
         0b:d9:3e:e9:02:bb:f1:54:3e:a0:ad:21:c6:cd:02:65:06:d6:
         12:0a:a9:16:ed:a5:f4:09:25:8c:29:f2:b0:e7:0f:20:67:75:
         3a:1e:1c:3d:6c:b6:43:2c:31:18:62:84:e1:a5:76:bf:af:a9:
         0a:5a:9d:5c:24:e3:f9:33:54:4d:ec:91:43:83:5d:f8:da:b5:
         c7:c2:15:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----