Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b7924a2-bf21-496d-a8e0-cf890812a577/5456c414b71b1479e5cd72185017152b01ac8b0b.roa
File:                     5456c414b71b1479e5cd72185017152b01ac8b0b.roa (raw, json)
Hash identifier:          y2O4UQmwPZnAlNoSaNaiGmmq3Em+xy+DX1DKnbjZD+g=
Subject key identifier:   CB:6C:B2:EC:B8:8C:39:60:A7:AC:B7:16:6C:82:C8:61:50:B1:7F:98
Certificate issuer:       /CN=e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c
Certificate serial:       0D29B7
Authority key identifier: 17:73:3B:88:7C:39:A9:14:85:6A:EE:36:19:17:FC:E1:34:73:86:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b7924a2-bf21-496d-a8e0-cf890812a577/5456c414b71b1479e5cd72185017152b01ac8b0b.roa
Signing time:             Wed 24 Mar 2021 14:39:14 +0000
ROA not before:           Wed 24 Mar 2021 14:39:13 +0000
ROA not after:            Tue 24 Mar 2026 14:39:13 +0000
asID:                     23487
IP address blocks:        190.63.0.0/16 maxlen: 24
                          190.111.64.0/20 maxlen: 24
                          190.111.80.0/20 maxlen: 24
                          200.25.192.0/20 maxlen: 24
                          200.25.208.0/20 maxlen: 24
                          2800:430::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862647 (0xd29b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c
        Validity
            Not Before: Mar 24 14:39:13 2021 GMT
            Not After : Mar 24 14:39:13 2026 GMT
        Subject: CN=5456c414b71b1479e5cd72185017152b01ac8b0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1f:02:15:6b:48:a8:12:6d:9d:95:5b:04:e3:
                    b6:70:bc:2f:71:31:79:38:d1:da:6e:d8:1f:bf:02:
                    74:2f:19:79:99:32:6c:1c:59:f9:6f:f0:2e:8e:f4:
                    bc:e8:f3:dc:bc:0e:e2:52:ae:63:4d:b1:f4:c4:b1:
                    fc:0a:02:8a:57:60:d0:6d:6a:37:79:ca:97:77:ac:
                    2a:37:b6:ed:ad:21:0f:b2:58:dc:50:76:cf:30:4c:
                    bc:89:7f:f5:70:18:51:e8:b2:9a:f0:5d:42:c8:24:
                    b5:ab:39:ef:18:57:b4:94:fb:4a:10:f7:f0:b0:a2:
                    e5:e6:70:40:c6:b0:35:24:86:93:5a:7b:86:36:49:
                    bf:5c:5b:6a:be:40:ed:9c:83:b1:9c:e2:b6:56:33:
                    34:44:88:c3:6c:b8:6c:ce:f3:56:a2:1b:4b:7c:e5:
                    4c:a6:47:da:0d:40:27:75:6a:05:ff:a0:f3:35:b6:
                    41:7a:b5:e9:21:51:6c:b9:f7:24:c5:80:f5:26:d3:
                    52:a2:f2:df:e5:56:87:f9:8c:65:66:69:59:3e:3a:
                    44:f2:09:6f:9d:b6:6c:b2:b2:06:d7:94:42:9a:47:
                    e0:45:17:dd:6b:4e:8f:f1:5f:86:fa:ce:b1:81:64:
                    cc:cf:a1:56:29:69:a4:47:d9:58:1e:e2:f7:99:1f:
                    11:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:6C:B2:EC:B8:8C:39:60:A7:AC:B7:16:6C:82:C8:61:50:B1:7F:98
            X509v3 Authority Key Identifier:
                keyid:17:73:3B:88:7C:39:A9:14:85:6A:EE:36:19:17:FC:E1:34:73:86:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b7924a2-bf21-496d-a8e0-cf890812a577/5456c414b71b1479e5cd72185017152b01ac8b0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b7924a2-bf21-496d-a8e0-cf890812a577/e4c05daa3a6e5aa60346bc5b6a8b22c4c14ccb2c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.63.0.0/16
                  190.111.64.0/19
                  200.25.192.0/19
                IPv6:
                  2800:430::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:79:41:49:68:24:d4:3a:d5:74:68:04:91:bb:f2:48:c5:da:
         81:99:08:88:34:41:52:0a:34:70:1c:15:9a:e0:8c:ca:1d:58:
         96:ff:11:5e:14:9c:2e:0d:c0:70:93:f5:1b:d9:bf:9b:a3:5c:
         ae:65:ff:c7:a4:df:84:ef:28:e7:c5:54:c7:12:a9:ad:12:57:
         a9:49:b0:c0:29:aa:1f:7c:92:6b:6e:9f:8c:65:ae:4e:5f:9e:
         61:8b:92:50:72:f9:5b:2d:8b:37:1d:e5:fc:3a:61:ef:d3:36:
         4c:8e:15:f1:61:9a:db:ab:ab:9b:d8:03:e9:28:bd:03:47:8f:
         98:4a:cf:55:34:bc:5a:27:da:e5:4c:e1:50:1d:ec:ae:27:91:
         18:56:ba:0e:f5:4a:0f:88:74:8a:ea:42:18:b5:63:b4:ff:3a:
         f3:48:f5:5c:c0:3e:0f:74:d4:91:01:5f:70:1b:7e:6f:0d:7c:
         e6:09:87:29:e5:26:a8:8b:df:36:6b:66:f4:7e:8d:58:1b:dc:
         5f:16:d2:f8:e1:03:94:82:23:08:47:5b:06:e1:ec:23:4c:b7:
         5a:89:37:74:00:eb:ff:71:e5:9e:96:8b:4f:71:09:3b:f6:61:
         10:3c:9f:6c:7c:91:30:ab:2c:17:49:7d:82:9e:30:07:97:d1:
         d8:a2:c4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----