Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/39ca6f0fed593614243667e57c5cae2ab871f6db.roa
File:                     39ca6f0fed593614243667e57c5cae2ab871f6db.roa (raw, json)
Hash identifier:          TiIu1JQY1wQO9otjEX0OQaiimCZ9QZUfw6UfF0juYTA=
Subject key identifier:   53:98:4A:84:E5:E7:B6:67:DD:3C:DE:4E:3B:3E:1D:F4:A1:AB:2C:68
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EC0C9
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/39ca6f0fed593614243667e57c5cae2ab871f6db.roa
Signing time:             Wed 24 Mar 2021 14:37:58 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.160.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966857 (0xec0c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=39ca6f0fed593614243667e57c5cae2ab871f6db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0a:16:e9:21:cf:50:a8:ca:a2:5c:fa:15:03:
                    23:ea:9a:6d:08:2a:50:7e:6d:23:3e:12:6f:3b:e3:
                    fe:0a:3a:88:6b:d9:e3:21:c8:92:de:bc:31:e1:6a:
                    fb:5f:3c:3d:48:ae:8a:3d:fd:73:22:82:91:e5:88:
                    f7:9e:54:f6:fc:bb:3b:e0:2a:0c:f7:eb:57:e9:50:
                    ee:29:25:d8:dc:88:b7:b3:a2:d0:c6:0a:55:86:e5:
                    94:a0:67:fa:b3:8b:f0:eb:c8:b4:ee:d0:19:23:10:
                    5d:6a:f2:34:b7:55:8c:10:4d:78:b6:65:93:54:34:
                    45:10:ca:44:8d:49:6e:f2:bc:88:2a:e1:22:f8:59:
                    c1:08:05:cb:4d:73:6e:37:59:99:da:0e:2b:6d:0c:
                    ad:44:b2:70:46:bb:67:ba:24:83:9e:39:fc:d9:5e:
                    54:6f:57:6f:0a:b1:de:8e:38:af:b6:21:31:b9:96:
                    9a:e7:7b:65:8a:9c:e2:02:6e:e7:b3:67:25:b1:6c:
                    9e:45:c9:ec:cc:01:37:90:9d:39:5c:70:b8:bd:cc:
                    ad:0c:91:86:de:1c:06:7b:50:8f:1e:89:fe:66:9f:
                    6e:ea:68:58:e2:e0:2f:7d:86:60:6b:4b:68:94:c8:
                    51:01:c1:fb:67:b4:d5:19:20:57:67:63:21:1d:0c:
                    65:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:98:4A:84:E5:E7:B6:67:DD:3C:DE:4E:3B:3E:1D:F4:A1:AB:2C:68
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/39ca6f0fed593614243667e57c5cae2ab871f6db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:3f:78:84:91:f7:32:33:90:17:62:a3:89:36:dd:54:9e:84:
         7d:f4:13:bb:49:5e:56:9b:26:c3:5a:d9:f5:60:06:6a:f4:69:
         cf:08:62:31:74:73:07:db:5f:0f:01:01:eb:3c:57:c3:34:1d:
         9d:22:35:75:a9:e0:09:eb:f6:f8:3d:e6:48:67:9b:83:bf:bf:
         7d:2d:c7:a1:79:8a:03:0b:a0:f8:98:77:96:e8:46:e0:1e:e6:
         69:73:14:c5:8c:b3:89:0c:61:94:13:92:a1:a1:7b:cd:4a:4e:
         af:e8:e8:03:1e:65:91:a6:be:7c:e4:18:b8:57:11:44:ad:2a:
         57:f4:44:0d:1b:bd:a5:ef:d7:41:71:ed:ed:ec:ee:46:cb:c8:
         3d:76:a2:3c:14:e1:a7:47:06:57:76:1d:ce:63:7d:9a:82:7a:
         dc:f0:d7:ce:3c:77:64:25:68:73:9c:a0:1b:04:49:2c:e3:51:
         c5:75:f3:0e:6f:ae:55:41:63:22:19:3a:69:f1:9c:28:fd:ca:
         99:d2:3c:0e:91:c3:3e:19:fd:9a:d8:0b:bb:46:4f:17:bc:09:
         dd:0b:f9:eb:53:ad:a2:be:05:c8:62:e9:10:84:47:6f:ae:4e:
         b3:ce:31:7e:d8:b6:1d:92:98:8a:46:d5:ba:09:b1:1f:4d:8b:
         12:00:f9:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----