Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/23a6a726a7cd746a6883de6770ed6bafc2c9cdc9.roa
File:                     23a6a726a7cd746a6883de6770ed6bafc2c9cdc9.roa (raw, json)
Hash identifier:          eWC9qzz+SSLWavRJm7xg7ORYYwEqE8/2HpVA9t34I40=
Subject key identifier:   1F:5F:F2:C7:7E:9D:32:55:2F:DA:99:53:83:09:1A:6A:EB:F5:6B:55
Certificate issuer:       /CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Certificate serial:       0E1196
Authority key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/23a6a726a7cd746a6883de6770ed6bafc2c9cdc9.roa
Signing time:             Wed 24 Mar 2021 22:50:39 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     27995
IP address blocks:        191.117.0.0/16 maxlen: 16
                          191.118.0.0/16 maxlen: 16
                          191.119.0.0/16 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 922006 (0xe1196)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=23a6a726a7cd746a6883de6770ed6bafc2c9cdc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:c8:0f:a1:a7:33:d5:4d:6d:8a:29:9a:2b:64:
                    31:05:22:ad:c4:60:4e:4f:f8:d2:f7:03:e1:08:47:
                    af:eb:74:5b:ca:a5:d1:56:41:1c:4d:8e:f2:b3:5c:
                    a5:88:e5:69:ce:61:1e:c9:dc:70:3d:d1:3d:1e:0c:
                    b9:55:2a:2b:f4:a6:ae:39:2b:be:a4:3f:3b:1b:26:
                    7c:b8:bb:bd:bb:27:a1:ab:52:b0:a6:49:e8:aa:ec:
                    17:cd:b5:0f:5b:c4:45:f6:f3:fc:a0:82:16:18:cd:
                    0d:98:c6:e9:18:34:83:f3:93:b2:ad:41:c5:bf:73:
                    a4:a5:5d:7f:a1:10:9a:91:4f:0f:b0:3b:00:3c:1e:
                    f0:1f:f5:1b:09:26:6f:c5:42:3c:00:e9:6d:ed:65:
                    5a:e1:c8:26:65:b9:ae:95:c8:be:04:94:20:ce:05:
                    43:dd:fb:80:c0:9c:73:f1:88:1e:53:97:2a:5a:46:
                    19:e1:62:30:79:d2:26:f5:3e:83:03:36:05:a7:9c:
                    cc:86:bb:70:91:8d:a9:8d:98:18:29:87:be:74:dc:
                    4d:66:f4:fc:d0:8e:16:12:ae:e7:5e:11:e4:58:19:
                    46:17:aa:0e:f6:55:71:42:dc:ee:38:2c:ab:b6:8e:
                    a3:bf:4f:44:b6:12:b0:53:bc:37:51:36:9c:d4:cd:
                    0a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:5F:F2:C7:7E:9D:32:55:2F:DA:99:53:83:09:1A:6A:EB:F5:6B:55
            X509v3 Authority Key Identifier:
                keyid:87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/23a6a726a7cd746a6883de6770ed6bafc2c9cdc9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.117.0.0-191.119.255.255

    Signature Algorithm: sha256WithRSAEncryption
         27:c5:09:d9:f3:f0:84:c2:11:41:49:99:92:41:ff:30:16:c5:
         6c:b5:56:9a:53:35:1a:d4:79:0c:e3:f1:f5:4e:3a:c2:20:e5:
         b0:2f:01:eb:15:94:de:67:36:22:3e:75:90:38:09:0d:bb:96:
         21:ed:95:7c:6b:dd:95:37:fc:91:c7:36:5b:0b:23:c3:22:47:
         56:a0:55:cf:c8:a8:3b:1c:b1:89:c2:26:0f:31:e0:e7:ff:25:
         87:a5:18:22:8c:8d:e1:68:6e:24:99:8d:9a:ed:a3:58:60:00:
         da:57:9b:52:a2:5d:7b:5e:c4:ad:ba:78:69:2c:91:65:78:fa:
         f5:bd:e9:e7:5f:f5:48:f5:b3:42:61:cb:22:7e:49:29:cf:ed:
         62:1e:3d:03:d2:4b:5a:42:ea:92:71:6e:d3:ff:68:65:ce:f0:
         86:25:99:8a:e8:5f:01:39:b9:86:8d:af:72:d7:61:a8:50:f1:
         36:da:c3:ae:b1:8d:2a:68:52:9d:42:73:f0:0d:77:8f:65:6f:
         80:8a:0f:3b:75:b3:15:b2:af:4d:d9:15:84:01:08:2a:20:29:
         1f:ab:ce:18:68:10:82:94:68:f4:61:49:09:d8:ac:68:c7:d0:
         02:5b:f2:3e:fa:a7:85:c7:03:5b:5e:de:36:c9:8a:dd:43:29:
         2a:6d:fa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----