Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/8535a3a37633ac8a157e4a7e4194d42de649a969.roa
File:                     8535a3a37633ac8a157e4a7e4194d42de649a969.roa (raw, json)
Hash identifier:          IOLo25QEpYr+0sEQYUoQozkybk0y7rPcfAEN+xfXqyI=
Subject key identifier:   98:66:65:40:D1:43:EE:69:3A:A1:D5:1C:EC:A2:9E:8C:41:0E:A5:4D
Certificate issuer:       /CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
Certificate serial:       1B4EDF
Authority key identifier: 4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/8535a3a37633ac8a157e4a7e4194d42de649a969.roa
Signing time:             Thu 27 Oct 2022 16:16:24 +0000
ROA not before:           Sun 21 Mar 2021 14:47:25 +0000
ROA not after:            Tue 24 Mar 2026 14:47:25 +0000
asID:                     27889
IP address blocks:        190.76.244.0/24 maxlen: 24
                          190.76.248.0/24 maxlen: 24
                          190.76.251.0/24 maxlen: 24
                          190.76.252.0/24 maxlen: 24
                          190.76.63.0/24 maxlen: 24
                          190.76.208.0/20 maxlen: 20
                          190.76.224.0/20 maxlen: 20
                          190.76.240.0/24 maxlen: 24
                          190.76.192.0/21 maxlen: 21
                          190.76.200.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1789663 (0x1b4edf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
        Validity
            Not Before: Mar 21 14:47:25 2021 GMT
            Not After : Mar 24 14:47:25 2026 GMT
        Subject: CN=8535a3a37633ac8a157e4a7e4194d42de649a969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:82:2d:5e:84:51:2b:d6:34:e7:5b:69:2b:cb:
                    7a:59:e7:3b:82:f5:1e:ad:44:79:aa:88:51:6b:87:
                    f6:0f:83:68:7a:5e:13:64:a6:e8:02:13:21:78:bf:
                    8f:34:45:24:3c:1f:0f:f7:2c:10:cf:0a:e3:97:d1:
                    d7:1f:3a:50:b9:7d:74:8c:4e:a0:c9:44:e1:fc:55:
                    62:0c:6c:c0:66:a9:ae:d6:68:d9:fa:62:ec:5d:08:
                    09:01:8a:ab:d9:fa:28:15:47:b2:02:a8:ce:09:fc:
                    fe:86:46:96:26:12:09:e3:e5:22:ad:8f:b8:e3:79:
                    55:f5:51:27:17:01:11:2a:ff:0f:36:2e:c6:3d:ee:
                    f7:88:c9:cc:36:62:56:0b:f6:a9:e2:9c:ad:61:84:
                    ab:ec:73:c2:af:e2:d0:06:b0:c1:d7:6f:cb:42:87:
                    6d:77:d8:2f:5a:3c:da:0d:9e:8b:93:3c:d1:f2:24:
                    ce:06:bd:fc:97:0c:a3:6b:6f:ca:79:97:fb:b1:18:
                    07:a0:90:30:46:40:91:78:92:50:22:09:aa:c3:e3:
                    db:f9:2b:82:98:bc:f8:cd:b4:26:6f:42:67:dd:8e:
                    d6:1d:a9:1e:68:b0:07:f7:ce:ba:3a:ac:dc:29:d8:
                    63:4d:90:db:51:c4:c7:7d:2d:e3:a5:86:12:35:69:
                    f6:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:66:65:40:D1:43:EE:69:3A:A1:D5:1C:EC:A2:9E:8C:41:0E:A5:4D
            X509v3 Authority Key Identifier:
                keyid:4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/8535a3a37633ac8a157e4a7e4194d42de649a969.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/e804a389c3b0880219ecf5f7a3c62d96a274b592.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.76.63.0/24
                  190.76.192.0-190.76.240.255
                  190.76.244.0/24
                  190.76.248.0/24
                  190.76.251.0-190.76.252.255

    Signature Algorithm: sha256WithRSAEncryption
         27:41:2b:51:33:96:ee:90:05:43:59:a4:e5:4b:b3:87:9d:83:
         80:ee:20:76:a6:d1:88:a3:e3:7c:18:ba:b6:2f:a0:14:53:4c:
         78:77:ed:2e:5f:14:b6:2d:ed:97:f4:79:12:15:c5:84:65:12:
         9b:e2:96:64:9e:42:ef:31:4e:6b:8b:a7:22:f6:99:65:b8:80:
         81:62:b5:24:4f:56:b8:24:fb:20:cf:ee:a7:91:3d:8e:98:5e:
         80:0b:1b:77:eb:a2:19:66:b1:44:f0:8f:e9:f4:65:b0:e5:ee:
         4b:0f:93:4d:92:ba:f5:93:8e:f4:c9:c0:16:b9:fb:cb:6b:6d:
         28:6c:24:11:96:7e:33:7e:9d:32:4f:8a:67:8d:cd:5c:36:1e:
         b5:71:58:7f:50:4e:f1:42:b5:a2:fb:25:7a:35:7f:d8:00:df:
         dd:8e:0d:67:c5:eb:49:24:77:7c:8b:69:11:2f:92:3c:9f:36:
         6a:df:53:d7:14:d0:c7:37:02:b1:f5:38:89:a0:c6:ce:e5:f9:
         d9:61:b7:18:a4:82:6f:13:d6:05:39:d2:f5:19:95:c6:30:90:
         8f:87:c3:d4:1a:cc:9d:74:99:20:9c:75:e1:20:48:04:ff:10:
         c6:ea:cf:7c:ec:af:cf:e6:b5:66:5b:a7:10:dd:5c:96:6b:ba:
         e9:94:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----