Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/d3e93a5ddcfe98e1f74882dc7fd91be5a92ad8c9.roa
File:                     d3e93a5ddcfe98e1f74882dc7fd91be5a92ad8c9.roa (raw, json)
Hash identifier:          uZ8Vz5UwZ+HByz+j0o64pl6gdqFtWacm5/wUkHRf+0U=
Subject key identifier:   57:50:98:34:B8:2A:62:68:F4:05:E7:11:C6:88:A7:CF:7F:3F:24:EF
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EA49C
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/d3e93a5ddcfe98e1f74882dc7fd91be5a92ad8c9.roa
Signing time:             Wed 24 Mar 2021 14:37:44 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959644 (0xea49c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=d3e93a5ddcfe98e1f74882dc7fd91be5a92ad8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:81:57:2f:8b:88:45:fd:db:e8:7f:f5:74:27:
                    ea:ae:82:57:4f:4e:a2:5b:d5:03:8f:6d:85:81:78:
                    0b:bc:bf:8b:ba:01:d3:75:a6:09:73:ac:58:c9:28:
                    6a:f3:38:0a:51:c2:b7:f2:61:ad:c4:c6:de:68:8b:
                    d2:54:ca:54:39:cb:7d:2c:4b:10:d0:76:71:8b:4f:
                    83:52:12:17:c0:8c:40:98:ba:ee:91:4c:9e:f5:9f:
                    3f:38:01:74:86:7c:72:82:e8:95:75:d8:88:47:a1:
                    c1:28:e2:47:11:95:4c:11:69:e3:e6:b3:33:f5:5a:
                    65:e9:2e:55:3c:d2:aa:8f:64:9e:cb:6e:67:d6:7f:
                    83:1c:36:a1:0d:5a:d2:d6:3c:60:a2:c7:ec:21:13:
                    35:16:bb:2f:2d:25:03:e0:0b:b5:fd:13:0d:d7:7b:
                    97:fd:20:73:fa:04:8c:8d:56:be:8d:fb:1b:64:f2:
                    40:f0:30:49:10:00:d8:80:b4:e8:a2:4a:70:af:c8:
                    99:8f:8f:09:81:51:6b:72:17:40:ea:b2:75:31:c9:
                    50:13:37:3b:ea:4a:cf:49:7f:36:db:19:69:40:96:
                    30:7e:3a:9c:8e:81:91:52:30:3c:6c:48:e3:8a:5e:
                    4a:76:98:45:a4:05:c2:a7:2d:91:f8:88:49:1f:2d:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:50:98:34:B8:2A:62:68:F4:05:E7:11:C6:88:A7:CF:7F:3F:24:EF
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/d3e93a5ddcfe98e1f74882dc7fd91be5a92ad8c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ef:36:53:a1:85:53:03:68:3c:25:5c:3d:2e:34:bc:96:00:
         63:42:bd:cb:11:d5:ec:32:04:5b:99:d3:3b:b2:0e:c7:89:8c:
         a8:93:ca:9a:0e:0c:99:51:97:6f:2a:f4:d8:3a:86:fe:05:14:
         c3:4d:2e:91:3f:13:38:a0:d5:77:5f:3e:7d:52:a6:db:6b:8e:
         36:2a:2b:e4:80:59:b2:28:f6:2d:59:27:36:7d:e8:1d:3e:2f:
         bc:a9:26:5b:09:17:89:4c:f0:be:1c:10:8c:2d:d9:a3:e7:a5:
         ce:a8:03:f8:dd:ff:09:2c:e6:51:43:f7:7b:59:0b:96:16:77:
         b6:80:d5:41:7c:0f:c1:a4:96:98:a7:dc:7d:04:82:4d:29:17:
         41:1d:d9:50:18:a5:c2:32:9c:1c:0a:3a:86:04:46:1c:3b:4a:
         49:99:a8:34:64:ce:84:ed:18:a8:ed:dd:e4:53:17:3b:12:2b:
         f0:cb:81:7d:55:ac:a1:4a:73:ba:94:24:9f:60:92:2e:bd:d4:
         22:23:b6:fd:51:6c:d1:9f:5d:96:21:11:bf:49:8c:f1:4d:d5:
         c9:6d:6e:d1:47:b4:d7:c7:0d:78:79:1c:75:83:95:68:d1:a0:
         e1:3a:0d:31:ca:ad:4a:ca:c2:81:03:2b:f2:fe:66:2c:e7:9d:
         67:57:0d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----