Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/0d6143b794102d96e39a84c027be2f1bc5262ebc.roa
File:                     0d6143b794102d96e39a84c027be2f1bc5262ebc.roa (raw, json)
Hash identifier:          eekUMsUm18fr5Ck89rc8FizCGLUmI5ldF8sUHc9nIUY=
Subject key identifier:   21:4D:FD:A4:31:28:10:35:61:B0:64:32:C8:A0:60:A0:53:5C:74:B1
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EA78C
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/0d6143b794102d96e39a84c027be2f1bc5262ebc.roa
Signing time:             Wed 24 Mar 2021 14:37:45 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960396 (0xea78c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=0d6143b794102d96e39a84c027be2f1bc5262ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:40:e5:e0:29:1c:ba:b5:8e:23:fd:4c:7e:2a:
                    b5:96:fd:28:d6:ae:fb:af:b5:81:0f:d5:2f:f1:cd:
                    ca:8a:fd:1e:c4:53:0e:1a:35:25:09:bf:2a:8f:5b:
                    af:7f:93:bc:16:ea:4c:c2:21:b6:2b:64:b8:db:27:
                    24:fe:9e:78:32:04:89:12:56:a7:38:c7:35:fc:65:
                    ca:9c:7a:59:d9:e7:37:ca:55:ad:a1:83:80:47:ae:
                    c4:4c:e5:49:02:fe:03:10:22:63:51:0e:d4:60:a0:
                    e3:d5:0a:30:d4:c0:1d:92:ed:09:38:60:c0:52:45:
                    1f:01:33:4b:f5:88:fc:19:33:66:00:b8:e0:d6:fc:
                    a5:3f:0e:66:e5:4c:80:3d:a7:b6:e8:b5:e3:4a:df:
                    97:96:ea:0d:45:ff:1d:30:ed:3c:6f:60:0e:9a:e2:
                    be:55:76:18:70:f9:4f:21:f3:58:f1:55:ad:a5:e7:
                    e8:10:bc:64:c4:03:8f:07:73:d3:e6:6f:5c:3a:c4:
                    1c:96:f9:b5:0e:3b:02:b4:98:8e:49:67:87:bd:fb:
                    b3:2c:45:26:f5:3a:ad:47:3e:b3:b6:d4:c8:4c:b8:
                    b9:21:2e:ae:0f:52:a8:df:3d:bf:8d:c4:7e:32:54:
                    4c:85:da:40:4a:07:e4:11:f4:cf:63:bd:18:59:f6:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:4D:FD:A4:31:28:10:35:61:B0:64:32:C8:A0:60:A0:53:5C:74:B1
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/0d6143b794102d96e39a84c027be2f1bc5262ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:fc:fc:eb:0b:b1:ac:99:7d:0b:0c:85:14:94:2f:d0:35:8f:
         c9:ef:ca:3f:b1:aa:63:74:32:5b:8f:99:61:26:20:b6:08:c1:
         1a:c4:ac:e1:2f:72:af:91:83:74:38:68:1f:bb:4b:ba:c4:a5:
         c1:8e:7b:76:2d:64:87:b9:ec:bc:cc:07:8e:5b:fe:12:6d:61:
         97:e6:59:53:cb:37:bc:1a:e5:73:4f:17:33:1f:7c:af:b0:a2:
         c9:82:57:83:91:c0:a3:b3:5d:e0:fa:5b:dd:78:97:8e:a0:b9:
         ff:9c:90:51:fa:f6:91:2c:d4:f5:4e:f3:ba:28:02:b0:97:a7:
         d2:69:10:d4:7b:c1:68:ae:7d:34:b4:68:9c:36:65:23:1e:01:
         d1:e7:67:b8:8e:3b:13:0f:6c:ab:df:df:5a:4d:af:ee:04:ce:
         04:db:0f:76:44:85:58:1e:34:21:5e:54:12:52:17:bf:65:b6:
         fc:c9:c5:76:6e:d5:a5:31:e6:2a:80:4d:20:cb:1a:cc:b9:d3:
         08:4d:89:17:9b:1c:a1:cb:1e:20:68:ca:91:13:c7:21:48:85:
         01:72:c8:25:3d:9c:ef:f0:bc:d7:55:b1:dc:4f:2e:ad:78:37:
         39:20:af:ae:5b:6c:0a:60:c3:b3:10:ed:f2:7d:c9:3b:70:49:
         fc:dd:b8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----