Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/e27ff73dbc1b0cfd8276155c6fee5781b5b94537.roa
File:                     e27ff73dbc1b0cfd8276155c6fee5781b5b94537.roa (raw, json)
Hash identifier:          Tux1ko+axo7o0D+No1kk8FYvlV43/myMQe0ftakAQCs=
Subject key identifier:   F7:84:0D:19:99:03:BF:B1:9B:6C:63:52:2F:DB:80:D0:F8:28:09:85
Certificate issuer:       /CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
Certificate serial:       0EA9E0
Authority key identifier: 76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/e27ff73dbc1b0cfd8276155c6fee5781b5b94537.roa
Signing time:             Wed 24 Mar 2021 14:37:46 +0000
ROA not before:           Wed 24 Mar 2021 14:37:41 +0000
ROA not after:            Tue 24 Mar 2026 14:37:41 +0000
asID:                     262171
IP address blocks:        190.93.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960992 (0xea9e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3db4f69b92441a5930cef4f542ae0c43e4d8cf
        Validity
            Not Before: Mar 24 14:37:41 2021 GMT
            Not After : Mar 24 14:37:41 2026 GMT
        Subject: CN=e27ff73dbc1b0cfd8276155c6fee5781b5b94537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:f2:dc:c2:3d:c3:a7:5f:27:7f:cc:e8:2c:
                    d4:73:e9:2e:e3:30:fa:c2:a0:44:29:65:7e:52:c3:
                    75:cd:8c:e3:81:53:e7:0c:cf:6c:bd:8b:a3:9f:96:
                    40:6b:e3:b1:4a:a7:9a:73:72:b9:92:f3:a0:22:77:
                    7e:3d:07:0c:70:e1:87:9a:36:ec:c3:df:88:13:61:
                    ef:82:aa:36:62:df:28:84:8e:d8:08:3d:c3:89:69:
                    44:78:e6:04:67:33:23:3b:2c:6d:86:a5:f6:fb:19:
                    76:06:0e:e8:68:2a:de:a4:c0:8d:4c:bb:f1:8b:c1:
                    f6:07:9c:64:7f:3e:14:17:4e:a3:cc:13:01:13:50:
                    5f:58:1c:34:fa:90:f5:5a:f5:0f:5b:5e:d3:c8:26:
                    48:5d:2a:3c:d2:50:b5:62:77:a6:5d:dc:81:32:c1:
                    fe:06:c6:3f:71:b2:43:4e:b8:b6:5a:6c:40:c6:2b:
                    97:14:38:e0:fa:b7:52:94:fa:a5:55:dc:bf:a1:27:
                    dc:12:97:41:41:66:de:24:a0:eb:21:a3:0f:c9:ca:
                    27:8c:32:84:68:c7:e0:f3:fa:4e:c8:d3:e8:a1:02:
                    e5:63:3b:ed:c1:74:84:14:1b:92:29:2c:eb:be:76:
                    68:62:98:fa:e2:f3:0d:dd:1f:72:9c:4e:8c:49:79:
                    7c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:84:0D:19:99:03:BF:B1:9B:6C:63:52:2F:DB:80:D0:F8:28:09:85
            X509v3 Authority Key Identifier:
                keyid:76:22:29:71:B2:99:56:63:7D:97:D4:01:0C:C5:C5:1C:9B:1B:84:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/e27ff73dbc1b0cfd8276155c6fee5781b5b94537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/8a3db4f69b92441a5930cef4f542ae0c43e4d8cf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ba:e8:59:64:90:b3:b3:96:c4:32:d8:23:db:7d:0d:a3:e4:
         7d:88:86:87:88:31:f2:db:c8:06:ce:c2:c6:d3:a2:8d:05:16:
         f3:3e:ba:82:74:ac:ec:55:c4:cb:58:99:21:69:58:fb:4d:bb:
         77:f0:db:94:87:aa:13:31:6f:d5:40:b8:50:88:7a:13:80:b4:
         8b:ce:ac:bb:a5:3f:e2:28:a9:26:6d:af:69:6b:f0:9b:78:d0:
         b4:8c:f3:72:50:84:a4:3f:bc:1b:52:43:05:7d:6c:97:13:ad:
         d0:b1:88:7c:58:88:5f:37:61:9f:bf:f3:d9:5b:37:5a:18:72:
         48:14:6d:d5:01:36:8c:51:ac:b8:32:a4:11:c3:59:23:b6:30:
         5b:c6:8c:df:1c:68:ea:09:ec:8d:af:23:18:f9:18:a1:67:a2:
         8d:69:a2:53:6b:29:5e:dc:d1:3d:5c:0d:c7:64:87:0a:4c:1b:
         19:ab:3b:71:bd:ff:8a:09:88:47:37:da:da:c5:ad:1e:e3:17:
         bf:bb:cc:fd:c3:db:52:2a:f3:59:f5:db:f0:f1:33:ed:1a:2b:
         a1:a5:0f:b1:6d:26:6d:d6:39:27:c1:64:14:32:8d:d0:70:39:
         83:77:52:11:f2:40:aa:1d:d1:78:96:9a:b4:c0:5d:4e:1e:dd:
         36:bd:72:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----