Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0760bd7f-83ee-40b9-9290-d2bb3fa54690/eb2aeb178b3c1ac06f638a0200596a13a8a648a8.roa
File:                     eb2aeb178b3c1ac06f638a0200596a13a8a648a8.roa (raw, json)
Hash identifier:          uXD40N03UphiSu5FY+4XZecS7ElnyFspgxMwjSdmO5s=
Subject key identifier:   FA:C1:E9:9A:08:55:05:93:A7:C5:0C:74:AB:CF:91:8C:49:BB:ED:F1
Certificate issuer:       /CN=d590b2b0a721f48828604c97f912f283f0658e8a
Certificate serial:       0DB3FC
Authority key identifier: FE:2A:E8:40:FB:E3:9B:2F:13:12:00:F9:6F:D9:6C:1A:FF:7E:9D:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d590b2b0a721f48828604c97f912f283f0658e8a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0760bd7f-83ee-40b9-9290-d2bb3fa54690/eb2aeb178b3c1ac06f638a0200596a13a8a648a8.roa
Signing time:             Wed 24 Mar 2021 14:29:46 +0000
ROA not before:           Wed 24 Mar 2021 14:29:46 +0000
ROA not after:            Tue 24 Mar 2026 14:29:46 +0000
asID:                     52367
IP address blocks:        190.104.48.0/20 maxlen: 24
                          2803:400::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 898044 (0xdb3fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d590b2b0a721f48828604c97f912f283f0658e8a
        Validity
            Not Before: Mar 24 14:29:46 2021 GMT
            Not After : Mar 24 14:29:46 2026 GMT
        Subject: CN=eb2aeb178b3c1ac06f638a0200596a13a8a648a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0f:ee:07:dd:58:d9:77:95:78:e5:90:60:1c:
                    db:17:2b:03:35:5f:b2:ce:ce:9f:6e:2d:83:82:fc:
                    5b:37:4f:13:5b:49:32:bd:e5:b3:bf:71:b3:0a:29:
                    c3:8d:c8:07:42:70:41:49:0c:6f:cf:6e:17:c0:ea:
                    fa:50:7c:4e:2f:a2:14:8b:23:e6:7e:05:8f:43:e6:
                    b8:81:cc:f5:2a:34:42:5e:7a:23:da:ec:ad:b8:fd:
                    95:bc:83:74:98:59:ed:5e:e0:2f:a2:08:80:fe:7c:
                    c8:55:20:f8:af:53:52:44:d0:13:e1:07:65:b1:34:
                    9e:10:d5:52:a7:a8:6d:ab:9c:48:8f:ba:91:1b:40:
                    11:fa:7f:f8:c2:77:0b:bd:a0:38:d9:26:51:09:6d:
                    35:b4:d1:3d:21:04:b1:ed:90:e0:ff:8f:58:7a:ea:
                    af:46:9f:c8:32:26:c4:9a:98:fe:24:14:64:c9:c3:
                    7b:6d:99:7b:eb:71:e1:dd:73:fc:e0:08:20:26:64:
                    81:50:58:98:77:93:c7:39:0c:5f:9c:b1:37:54:40:
                    eb:3b:fc:27:25:fb:a2:d5:49:d0:9e:2e:6a:e5:37:
                    23:7f:50:4f:13:99:31:ce:ce:f0:af:0b:60:49:0c:
                    03:ce:a0:70:4f:10:e2:54:f7:fe:81:88:a6:68:b9:
                    0b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C1:E9:9A:08:55:05:93:A7:C5:0C:74:AB:CF:91:8C:49:BB:ED:F1
            X509v3 Authority Key Identifier:
                keyid:FE:2A:E8:40:FB:E3:9B:2F:13:12:00:F9:6F:D9:6C:1A:FF:7E:9D:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d590b2b0a721f48828604c97f912f283f0658e8a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0760bd7f-83ee-40b9-9290-d2bb3fa54690/eb2aeb178b3c1ac06f638a0200596a13a8a648a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0760bd7f-83ee-40b9-9290-d2bb3fa54690/d590b2b0a721f48828604c97f912f283f0658e8a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.48.0/20
                IPv6:
                  2803:400::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:e1:50:f8:03:13:51:8e:52:92:dc:8a:c4:5f:5e:e8:31:6d:
         aa:46:b6:1d:67:80:52:e4:0a:70:7b:dc:86:68:2d:f3:4e:02:
         cf:22:f5:f3:d6:ae:71:50:78:ed:1f:fe:36:c4:74:a4:f2:21:
         3c:37:81:25:86:99:7f:85:b5:df:39:d6:a7:1c:1e:89:d5:5c:
         dc:6f:8a:db:8d:be:75:e0:24:ab:e5:9d:66:34:fc:29:7c:53:
         33:b1:e5:a6:2f:70:5d:94:91:3f:32:5b:29:71:6f:a4:35:5e:
         4b:11:59:90:27:f6:4b:58:2e:2d:ac:2e:21:b1:df:0a:b8:b0:
         ec:ca:f4:3f:59:17:28:10:f5:ea:44:67:68:e1:ec:fb:98:ab:
         f9:d7:b7:03:cd:6e:d1:e5:9a:d0:be:f6:61:48:ae:d3:89:c5:
         97:67:ad:c8:e0:0c:01:46:57:ad:18:9b:7b:da:d5:2f:0a:4f:
         b7:2c:73:90:d7:c5:1d:be:37:a1:e8:96:e6:99:92:d2:33:60:
         41:20:37:32:39:67:5b:83:81:59:68:73:a8:3c:ee:e9:52:b6:
         44:e6:ea:a8:1c:4b:e5:25:fa:f5:01:73:fe:ce:33:4e:84:c8:
         dc:b9:57:e8:5d:14:ae:65:fc:1c:53:f0:51:76:7d:75:9e:40:
         5c:fc:07:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----