Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/520ac3bb4e49a6c91c768ef637a1297b419b7b67.roa
File:                     520ac3bb4e49a6c91c768ef637a1297b419b7b67.roa (raw, json)
Hash identifier:          qKK+RyRgocuD/HcuAv9dhghWRYnn2ZiulnRIWk62lLs=
Subject key identifier:   DE:68:61:7B:EF:98:62:C0:AF:07:95:D8:D6:3E:F3:8F:8A:D2:72:41
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EAE10
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/520ac3bb4e49a6c91c768ef637a1297b419b7b67.roa
Signing time:             Wed 24 Mar 2021 14:37:48 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962064 (0xeae10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=520ac3bb4e49a6c91c768ef637a1297b419b7b67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ed:ce:91:08:70:7d:b1:95:b0:27:94:6e:b1:
                    8a:03:0e:fc:aa:4d:88:c8:7f:f8:c2:f1:8d:00:c8:
                    d6:c6:89:c8:cf:73:e3:67:e5:c7:19:aa:8f:51:06:
                    0e:7c:43:b4:57:5b:e9:a2:33:2b:21:92:c5:53:e6:
                    a3:a9:73:4b:df:fa:b6:55:1c:1c:b9:b1:41:d2:9d:
                    8c:a9:97:3e:49:76:79:37:1f:d3:a5:3b:d1:95:f2:
                    6f:b2:5e:e0:df:1a:8c:09:b2:a4:7f:e3:49:32:dc:
                    c9:dc:63:c1:74:1f:85:18:00:3d:a9:b8:ae:29:96:
                    6b:97:cb:e6:03:3a:a9:b5:c2:1d:f7:a1:bb:d0:8e:
                    bd:5e:4d:da:4e:fa:a9:72:41:a4:1a:d3:64:fc:f0:
                    ae:2d:8a:28:27:c6:db:ad:22:a7:51:f8:4f:98:40:
                    e4:99:e5:8f:a2:4e:4c:9e:2f:52:3c:63:66:4b:b8:
                    00:c4:23:aa:1c:1a:d9:a9:7c:56:cb:58:d8:93:aa:
                    63:1a:c3:a0:09:b3:6a:11:bc:b1:26:06:d8:82:74:
                    d6:9b:7c:26:1e:16:ad:4c:af:75:ed:d4:0b:65:6a:
                    10:79:4b:0b:6d:1c:e3:93:54:d5:a8:95:37:3a:dc:
                    05:d6:92:8e:12:8a:0e:13:60:59:f5:19:80:4f:74:
                    bb:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:68:61:7B:EF:98:62:C0:AF:07:95:D8:D6:3E:F3:8F:8A:D2:72:41
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/520ac3bb4e49a6c91c768ef637a1297b419b7b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:78:a4:cb:9a:71:a0:a3:be:87:16:41:29:74:da:f6:51:86:
         1e:ac:f9:eb:ac:4b:c5:76:21:21:9f:26:d7:7a:6d:79:90:6b:
         76:37:51:49:7f:51:04:c7:39:fd:a5:e5:fc:47:65:c9:18:a5:
         f5:3a:70:ee:09:0f:c2:2d:40:d7:06:15:47:65:24:95:55:cb:
         51:14:be:e1:bb:99:43:82:b9:f5:f2:d2:6a:59:d3:0f:8a:ba:
         10:2e:bb:a5:99:7f:51:0c:c0:eb:16:3c:3a:40:c4:76:42:fb:
         bb:ca:0f:59:a7:4e:14:09:ae:20:b2:55:28:e5:f2:07:f7:3c:
         44:74:ef:1d:3d:c4:87:ae:38:90:a2:35:db:d2:0e:d6:94:62:
         fe:13:cb:7c:49:50:08:0c:ed:80:79:d9:fc:a4:61:5e:40:1c:
         61:e4:9d:a1:15:51:1a:ef:ce:ab:87:ec:b4:89:54:2a:63:40:
         68:5f:bf:93:56:fd:68:df:38:eb:b0:a0:92:40:6c:a7:37:28:
         17:95:a7:12:4b:6f:e3:83:10:2d:d6:0f:97:9d:3c:96:2c:05:
         10:65:71:46:fb:83:eb:91:7b:c9:eb:75:9c:57:e4:97:91:21:
         95:d8:40:32:c2:f4:f8:64:46:f7:94:96:21:17:7e:8f:e9:5e:
         c1:f7:10:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----