Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/f0ed0c70b799e99fe2f393ad7859f0d43efceb38.roa
File:                     f0ed0c70b799e99fe2f393ad7859f0d43efceb38.roa (raw, json)
Hash identifier:          KCoXpb3kz4H8sxRlx9qmiBFjd9FyJwnP5jR6cdkEqyk=
Subject key identifier:   BF:61:1D:48:0D:3F:04:57:8A:E3:3B:77:3E:8A:9A:F3:59:51:C6:DE
Certificate issuer:       /CN=70d0dea43310326c8a8f5fa6afb4d9c816721165
Certificate serial:       110E58
Authority key identifier: 09:19:A3:85:C9:62:54:B5:78:61:79:3B:EE:56:0B:9B:3A:C2:3B:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70d0dea43310326c8a8f5fa6afb4d9c816721165.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/f0ed0c70b799e99fe2f393ad7859f0d43efceb38.roa
Signing time:             Thu 05 Aug 2021 11:54:51 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     265751
IP address blocks:        190.108.216.0/22 maxlen: 24
                          2803:7600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1117784 (0x110e58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70d0dea43310326c8a8f5fa6afb4d9c816721165
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=f0ed0c70b799e99fe2f393ad7859f0d43efceb38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f5:f4:86:c2:3c:03:4a:75:4b:16:25:ca:3f:
                    35:be:f2:7e:81:8b:a9:07:53:29:f9:29:bb:1e:53:
                    1d:30:6c:32:05:e2:f1:9f:aa:4c:96:f2:2f:b4:91:
                    37:c8:11:f7:89:e2:e3:eb:1f:c3:92:a9:2d:68:26:
                    8e:6b:93:74:62:cb:1b:ef:a5:ac:e4:ac:10:ad:d9:
                    58:0e:82:21:3c:b1:64:9d:26:53:dc:70:e2:b2:ae:
                    15:ab:68:2f:e2:74:61:54:62:cf:e9:f3:75:3f:11:
                    ac:cc:f5:4c:ae:7c:74:39:e5:dc:3a:43:82:a3:b5:
                    a5:af:50:92:95:97:c7:a8:f1:17:a2:56:7d:30:c5:
                    a9:47:63:c2:ff:14:a9:24:73:09:06:35:bc:96:00:
                    10:5d:53:95:98:c2:9f:d2:48:25:c1:88:0c:05:05:
                    78:8e:70:14:7b:6f:5c:45:56:d3:b0:61:ec:78:6b:
                    89:aa:de:6e:7d:a4:30:a4:6c:91:54:54:8c:c4:61:
                    0d:22:a6:05:37:b6:47:f9:36:e4:c9:a9:5b:d5:e0:
                    41:10:e0:1a:e0:01:db:df:c9:b5:e3:f5:0e:8d:f6:
                    7b:8a:1e:b8:30:3e:38:4b:d1:7c:0e:39:99:47:9c:
                    9f:a2:0a:f7:77:57:61:86:11:47:a8:77:d9:74:9c:
                    6a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:61:1D:48:0D:3F:04:57:8A:E3:3B:77:3E:8A:9A:F3:59:51:C6:DE
            X509v3 Authority Key Identifier:
                keyid:09:19:A3:85:C9:62:54:B5:78:61:79:3B:EE:56:0B:9B:3A:C2:3B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70d0dea43310326c8a8f5fa6afb4d9c816721165.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/f0ed0c70b799e99fe2f393ad7859f0d43efceb38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/199c264d-5951-4ece-9f99-bd2040f2e8c0/70d0dea43310326c8a8f5fa6afb4d9c816721165.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.216.0/22
                IPv6:
                  2803:7600::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:df:7d:81:1b:85:95:0a:be:f7:7c:c7:10:16:d2:3b:6f:68:
         ba:11:4c:3c:cf:51:b7:5f:e5:b3:49:f9:7e:40:26:0e:0d:00:
         b1:f0:26:0b:d9:cb:58:2c:2f:f6:5f:87:f6:4e:f2:11:17:1c:
         08:01:c5:c4:83:d2:cd:ea:67:7f:db:11:43:d8:dd:5d:5d:2d:
         9b:40:95:84:91:bc:83:11:b2:7c:8e:f3:ac:bd:31:8b:3e:54:
         b3:58:57:d5:67:57:e4:08:13:aa:b9:d0:c1:ed:70:21:62:85:
         48:3f:0f:8d:e8:d1:d4:ea:07:dd:38:cf:09:a1:a2:2d:92:04:
         99:ee:22:20:48:94:79:84:10:79:06:9a:a2:ac:e9:f5:49:9f:
         c3:c9:ff:d9:13:48:fd:b5:d7:af:4d:54:cb:17:1c:ac:0f:12:
         ed:f1:a3:11:59:df:76:c3:58:28:8e:6f:35:d6:a1:cf:61:9a:
         bf:ce:45:69:b2:f5:a1:1b:eb:6f:ee:75:d5:c3:5f:af:72:14:
         b9:6c:4b:8b:d9:73:da:4e:f9:21:b3:3c:da:8d:e0:b4:2a:3c:
         17:9d:98:64:5a:73:a5:3c:6f:9e:b1:f4:d2:eb:7a:32:c4:d9:
         9d:cc:b4:69:79:92:fd:96:d3:c9:d1:2d:de:de:f0:86:f8:ae:
         45:fb:e3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----