Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fe0a37a0-166a-4a06-a48b-44df7521fa4e/b830bf083a1b8d4b09a8984c87289b593a86fcb1.roa
File:                     b830bf083a1b8d4b09a8984c87289b593a86fcb1.roa (raw, json)
Hash identifier:          vRapU4XAt1rVZXMKFKgEZLjRgOBFz1e3DNp81AGzpNU=
Subject key identifier:   71:F7:5A:B7:5D:C2:A5:71:EB:0F:D0:F1:63:DA:BC:6F:58:41:D2:43
Certificate issuer:       /CN=23091c63c58ba27ebd4d56345b541e6a9f5d1923
Certificate serial:       0D8685
Authority key identifier: FC:C5:DE:7D:91:EE:FC:28:49:91:6D:DA:53:BB:B7:7D:16:F9:53:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23091c63c58ba27ebd4d56345b541e6a9f5d1923.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fe0a37a0-166a-4a06-a48b-44df7521fa4e/b830bf083a1b8d4b09a8984c87289b593a86fcb1.roa
Signing time:             Wed 24 Mar 2021 14:28:33 +0000
ROA not before:           Wed 24 Mar 2021 14:28:32 +0000
ROA not after:            Tue 24 Mar 2026 14:28:32 +0000
asID:                     28017
IP address blocks:        200.0.20.0/23 maxlen: 25
                          2001:13c7:6004::/47 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886405 (0xd8685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23091c63c58ba27ebd4d56345b541e6a9f5d1923
        Validity
            Not Before: Mar 24 14:28:32 2021 GMT
            Not After : Mar 24 14:28:32 2026 GMT
        Subject: CN=b830bf083a1b8d4b09a8984c87289b593a86fcb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:fb:3b:cb:b0:23:53:36:44:e2:00:86:95:c7:
                    71:34:90:b1:f3:7c:03:74:35:21:a2:e2:c3:6a:ce:
                    61:00:10:4a:09:42:7f:bc:ab:8f:0a:a3:6d:47:fa:
                    e7:c4:0f:d0:a0:36:62:a5:34:98:76:5c:10:7f:79:
                    f3:de:f5:08:d6:45:6d:89:ae:60:d8:d6:fe:16:69:
                    8a:ac:25:0b:f3:91:47:18:18:9c:b4:c7:97:f8:54:
                    e5:f7:11:ed:c9:d5:0c:72:5b:96:bb:c8:91:91:05:
                    44:0e:98:db:79:ed:81:74:eb:89:d6:41:7e:f0:09:
                    2a:ff:d4:e1:f2:ea:68:10:c1:4a:f5:31:e7:74:1d:
                    b6:0c:8c:89:e8:0e:60:0d:4c:db:df:5d:81:02:e1:
                    41:b1:d4:54:d3:94:7f:94:b1:6a:c9:82:c7:bc:6c:
                    ba:00:ee:af:25:d8:a8:ea:d5:07:18:79:94:b4:50:
                    da:b0:b1:f8:0a:be:aa:d4:d5:43:87:f7:6a:fa:13:
                    1a:c2:7d:3c:b6:17:8c:ad:61:82:7f:ea:0d:33:38:
                    80:c1:43:8b:4f:08:bd:63:d5:45:61:71:a7:fb:36:
                    42:0e:fb:7a:26:5c:8e:83:2a:e2:ce:ca:19:d6:7d:
                    37:6d:8b:0a:5c:18:80:bd:88:d6:39:be:16:de:d6:
                    58:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:F7:5A:B7:5D:C2:A5:71:EB:0F:D0:F1:63:DA:BC:6F:58:41:D2:43
            X509v3 Authority Key Identifier:
                keyid:FC:C5:DE:7D:91:EE:FC:28:49:91:6D:DA:53:BB:B7:7D:16:F9:53:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23091c63c58ba27ebd4d56345b541e6a9f5d1923.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fe0a37a0-166a-4a06-a48b-44df7521fa4e/b830bf083a1b8d4b09a8984c87289b593a86fcb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fe0a37a0-166a-4a06-a48b-44df7521fa4e/23091c63c58ba27ebd4d56345b541e6a9f5d1923.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.20.0/23
                IPv6:
                  2001:13c7:6004::/47

    Signature Algorithm: sha256WithRSAEncryption
         33:1f:5e:6c:30:6a:66:9f:4d:bc:e1:d3:33:4c:a3:4d:f1:f3:
         c4:8e:a2:df:ae:40:05:3f:29:cf:19:81:67:bd:1d:9a:9b:2e:
         a1:0e:1e:1a:e6:0a:49:e3:a2:d7:90:d8:68:01:64:14:49:c1:
         ec:fc:12:3d:d2:81:2a:c8:f5:7f:6b:22:19:fe:e0:e3:a1:a8:
         f7:e6:38:82:6a:8d:d7:df:4a:3e:0f:49:ac:fb:fd:82:b1:42:
         53:e8:30:c5:14:0f:24:8f:05:3a:68:2f:09:68:59:78:f9:6a:
         d2:1c:94:cd:93:00:f2:b2:21:df:f6:85:2e:c9:00:a2:11:5b:
         65:87:ca:9a:0c:e1:59:00:7f:8a:d3:ea:32:61:fd:a5:14:70:
         53:ef:33:b6:0f:fa:43:6a:8a:b4:10:28:07:a0:aa:1b:0e:63:
         6a:12:57:81:21:d5:c4:f1:34:7e:2c:0b:e0:f6:52:46:c0:38:
         1d:7a:a2:62:d1:3a:be:68:94:a3:26:56:01:d2:ce:ff:3b:72:
         a1:13:1f:8b:d8:de:1f:ed:ae:93:83:bb:59:6f:39:19:25:34:
         cb:11:56:6f:26:89:cc:b2:78:d0:2a:d9:1c:1a:1a:22:92:d3:
         5b:86:64:a9:1d:b9:79:e9:b4:b8:f8:2e:d3:24:5a:c3:1e:71:
         ab:a1:0e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----