Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/20c2a7129ec68c3c6f257b5a62bca0106ff1cbe8.roa
File:                     20c2a7129ec68c3c6f257b5a62bca0106ff1cbe8.roa (raw, json)
Hash identifier:          jstUXyw6yFPeudGqv8wbFfvGaxLRS1+fl6QYPa5TRtY=
Subject key identifier:   32:FA:A2:16:69:42:D1:93:46:40:CF:49:32:37:B6:46:D9:56:9F:40
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EA286
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/20c2a7129ec68c3c6f257b5a62bca0106ff1cbe8.roa
Signing time:             Wed 24 Mar 2021 14:37:43 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959110 (0xea286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=20c2a7129ec68c3c6f257b5a62bca0106ff1cbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ee:0a:be:7d:60:4e:91:ae:c5:de:2b:c5:d2:
                    fd:83:a2:85:6c:c2:72:80:36:3a:7c:2d:55:a8:3f:
                    1a:92:b1:28:45:e1:bd:aa:f1:97:a1:87:42:cb:2e:
                    89:9c:8a:0c:65:66:d7:00:33:eb:b6:98:a1:90:de:
                    e4:41:5e:4a:be:be:bf:3c:1d:61:9a:2b:f3:c9:a5:
                    c0:0b:37:89:2b:c8:86:e4:d7:8f:09:2a:92:7b:fe:
                    36:23:f8:7c:77:ef:26:5c:b0:bb:c5:04:77:c9:b4:
                    7a:ed:86:e2:4b:8b:be:25:18:b3:0f:d9:21:54:46:
                    54:f7:82:c4:18:17:bc:ec:62:6b:9f:02:47:32:84:
                    71:8b:6b:ae:57:08:35:69:2c:d7:4e:df:e4:04:7d:
                    a1:00:15:c5:ea:8b:d2:26:38:fc:09:47:60:84:1a:
                    1c:16:e0:7c:5b:b3:46:2a:cf:ec:cf:10:39:68:8a:
                    22:35:5b:c0:aa:43:27:db:67:45:1f:80:d2:4e:66:
                    3d:5d:ad:29:89:d1:e7:63:7d:15:39:13:25:bc:1d:
                    41:5d:d6:f7:ab:2c:21:76:2c:24:f3:a7:27:e0:c5:
                    19:e4:a3:f0:5b:f5:a5:64:4b:48:22:24:73:98:7f:
                    7a:6f:74:fd:93:8b:ee:66:a5:0d:45:9f:d4:fa:3b:
                    a6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:FA:A2:16:69:42:D1:93:46:40:CF:49:32:37:B6:46:D9:56:9F:40
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/20c2a7129ec68c3c6f257b5a62bca0106ff1cbe8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:c8:f1:e3:53:3c:86:d0:d7:32:7a:bf:91:93:20:3d:8d:be:
         86:98:a0:52:d6:4f:d5:89:53:7b:5f:a7:a5:37:d1:5d:c2:47:
         f8:4f:08:fc:94:b5:fc:a6:07:35:1b:eb:94:33:a6:5d:23:bb:
         ba:0d:35:f3:04:de:c5:bf:5c:7c:9f:88:c9:10:85:9c:e7:ad:
         31:eb:38:b0:45:58:44:05:b1:00:77:bd:3f:2e:ed:16:0b:e2:
         2f:7e:f1:3d:9e:ea:89:a5:dd:fe:d2:eb:74:f8:13:f4:f4:ae:
         92:5c:f9:42:5a:b8:4f:d3:f8:6e:c3:bf:bc:5a:ef:a0:76:c7:
         0f:de:3c:c5:c1:d6:68:cf:b2:ce:c3:18:97:31:f8:b8:bc:c6:
         85:ac:f3:9c:6f:39:e1:ae:8a:f8:76:d0:fa:0c:25:97:bb:6a:
         b4:fe:e4:60:be:e8:6d:e7:29:40:9f:ac:2f:9e:20:c3:76:5a:
         c7:a8:c9:27:49:58:25:2b:53:72:bd:73:ed:81:eb:96:fe:86:
         9a:d1:61:fd:40:cd:fc:d4:d2:15:3f:94:33:fe:d5:f1:8d:dd:
         7a:fd:a5:c7:91:98:de:33:ec:c1:01:e0:a4:69:9e:5b:1e:55:
         4c:b6:c2:bf:3d:e5:ab:84:32:ab:13:09:c1:f9:7d:01:71:5f:
         ea:c1:9a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----