Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10da8312-5c7f-4afd-99f7-97de81dfb189/fbd5c553ebe161825a24319bc5f1c717d7f25dca.roa
File:                     fbd5c553ebe161825a24319bc5f1c717d7f25dca.roa (raw, json)
Hash identifier:          wq/FQ4OVpfBERXpReziS26MXFRutlWxOGDdTEQMH9Vo=
Subject key identifier:   90:B3:E8:EA:05:C6:8C:01:68:4E:E4:A6:39:EA:82:EE:90:0D:95:E2
Certificate issuer:       /CN=c49e65f2a47cf3812758576517457a8d5bdcb549
Certificate serial:       0223
Authority key identifier: 55:4D:B7:65:06:02:C4:DA:1E:6F:30:86:52:B7:B8:A8:4B:8D:07:52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c49e65f2a47cf3812758576517457a8d5bdcb549.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10da8312-5c7f-4afd-99f7-97de81dfb189/fbd5c553ebe161825a24319bc5f1c717d7f25dca.roa
Signing time:             Wed 16 Jun 2021 21:49:51 +0000
ROA not before:           Wed 16 Jun 2021 03:00:00 +0000
ROA not after:            Fri 16 Jun 2023 03:00:00 +0000
asID:                     22698
IP address blocks:        190.13.192.0/20 maxlen: 29
                          179.18.0.0/16 maxlen: 24
                          2803:a80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c49e65f2a47cf3812758576517457a8d5bdcb549
        Validity
            Not Before: Jun 16 03:00:00 2021 GMT
            Not After : Jun 16 03:00:00 2023 GMT
        Subject: CN=fbd5c553ebe161825a24319bc5f1c717d7f25dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:66:e8:00:5a:eb:46:44:c6:3f:cf:5a:93:66:
                    5b:91:7f:29:26:49:34:67:f7:9a:37:7d:fa:05:cc:
                    87:27:c1:9f:1e:f5:32:df:b9:1f:b2:06:ee:e0:f0:
                    07:88:0b:89:93:03:cc:50:1f:2f:8a:55:eb:04:7d:
                    95:1c:d0:09:dc:02:97:b3:9b:63:85:89:e4:91:49:
                    df:10:cb:cc:16:8b:5b:21:78:30:ae:97:7a:d2:59:
                    7c:17:52:73:fd:f9:5f:29:2b:aa:bb:99:43:19:8d:
                    b9:29:ec:e4:31:73:99:46:a3:cd:5d:c9:cc:15:88:
                    30:d5:86:e9:93:dd:28:17:8e:e9:b8:a1:bb:cb:a0:
                    a4:47:58:98:99:10:be:d9:dc:ed:a5:40:a3:8f:93:
                    57:1e:66:82:bc:ab:f3:83:4b:ad:91:ea:c9:40:12:
                    ce:e5:af:6b:78:9a:79:53:8d:67:dc:4f:9f:6a:34:
                    92:07:c2:48:5c:c0:07:a8:d7:ac:f7:c5:f9:05:84:
                    6a:8c:bf:c6:63:a7:9c:92:88:0a:cf:5c:57:bd:37:
                    ec:3d:1f:a8:96:32:0a:d1:7b:8c:af:cd:8b:c0:c6:
                    cf:b8:ab:88:03:00:99:30:0a:74:1d:91:22:ce:ad:
                    6e:a0:f6:cb:e9:e2:24:b4:3f:1f:7f:4d:90:86:31:
                    7d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B3:E8:EA:05:C6:8C:01:68:4E:E4:A6:39:EA:82:EE:90:0D:95:E2
            X509v3 Authority Key Identifier:
                keyid:55:4D:B7:65:06:02:C4:DA:1E:6F:30:86:52:B7:B8:A8:4B:8D:07:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c49e65f2a47cf3812758576517457a8d5bdcb549.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10da8312-5c7f-4afd-99f7-97de81dfb189/fbd5c553ebe161825a24319bc5f1c717d7f25dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10da8312-5c7f-4afd-99f7-97de81dfb189/c49e65f2a47cf3812758576517457a8d5bdcb549.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.18.0.0/16
                  190.13.192.0/20
                IPv6:
                  2803:a80::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:ba:9c:09:03:6a:05:f9:db:d0:91:7b:8f:c0:b0:3f:43:0b:
         dc:26:e5:d0:21:c2:90:6c:68:4a:b1:50:08:c3:ff:71:6d:c8:
         e4:71:c5:95:a0:af:9b:83:98:8a:82:f2:6e:1f:4d:79:22:31:
         0a:ae:79:c6:35:ea:11:9d:b4:28:5c:25:0e:ae:b3:af:dd:4f:
         90:14:de:e0:92:ce:a8:97:78:2c:56:68:21:00:a9:3b:67:9e:
         b8:a7:d9:cd:98:72:96:32:b6:a4:df:21:f9:21:fb:1d:d4:40:
         15:41:f1:89:a7:d7:dd:46:1c:99:91:ad:a0:fb:21:3c:b4:27:
         e4:f4:3e:fd:11:36:00:47:e3:ae:e4:45:c9:25:f0:3e:7d:ad:
         36:e8:15:5e:5f:1e:0a:77:49:9a:9d:c0:0d:52:40:4a:72:af:
         b8:fa:f9:c0:7d:1c:5a:5f:15:f0:37:75:5c:73:b2:02:eb:0e:
         0a:49:09:9b:e3:b7:0d:a2:64:f5:2e:e5:00:d8:35:a8:b2:b1:
         80:71:e8:ba:eb:d9:9f:c2:72:1f:3e:a9:0a:94:7f:f6:bd:06:
         eb:86:e9:c2:bd:97:d4:c7:30:a9:4f:72:a0:3c:c7:01:4e:0d:
         53:70:3b:e9:12:65:a5:b0:b4:b5:72:e5:5a:8b:9e:2f:b0:6c:
         dc:49:20:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----