Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/64fa80bf06a44142d6d980a11ecdaef340c5b432.roa
File:                     64fa80bf06a44142d6d980a11ecdaef340c5b432.roa (raw, json)
Hash identifier:          dRMEtRS+yXChI/PFLh1niEQf4gFbO66lC9PqWTxzDyU=
Subject key identifier:   E5:16:10:FB:24:7A:2A:CD:C5:34:79:8C:F7:B3:59:EE:A6:44:75:E1
Certificate issuer:       /CN=b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d
Certificate serial:       04F766
Authority key identifier: FE:B3:2F:06:F6:24:DA:72:93:81:BF:21:F5:D3:27:6B:74:12:07:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/64fa80bf06a44142d6d980a11ecdaef340c5b432.roa
Signing time:             Wed 24 Mar 2021 14:46:35 +0000
ROA not before:           Wed 24 Mar 2021 14:46:35 +0000
ROA not after:            Tue 24 Mar 2026 14:46:35 +0000
asID:                     16592
IP address blocks:        190.5.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 325478 (0x4f766)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d
        Validity
            Not Before: Mar 24 14:46:35 2021 GMT
            Not After : Mar 24 14:46:35 2026 GMT
        Subject: CN=64fa80bf06a44142d6d980a11ecdaef340c5b432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:44:52:71:06:17:3c:39:31:b3:e4:aa:8c:1b:
                    fe:32:6a:7c:5c:c6:1b:f7:e3:43:86:ba:94:ff:df:
                    2b:69:b5:ab:3b:b5:d7:d4:a6:89:48:b9:e9:00:da:
                    cf:52:89:d2:38:45:22:4c:95:00:ed:58:51:7e:b7:
                    2c:63:88:f4:df:8b:02:42:17:92:20:c9:57:06:be:
                    2a:fe:65:7b:b9:46:bb:9b:53:d2:d9:20:5b:06:04:
                    ed:18:ca:73:84:d0:4e:23:2a:f8:c3:3f:d2:f5:e9:
                    a8:28:0a:08:ac:00:01:3f:60:f3:b3:16:72:b2:df:
                    92:53:9a:48:70:81:27:a5:88:cf:d6:b3:7b:e0:5f:
                    c6:c3:cd:a9:51:70:4a:eb:62:8b:7e:47:fe:b8:da:
                    67:57:24:53:4a:6f:3f:49:11:59:86:75:eb:10:1d:
                    1e:97:d6:35:40:48:c1:4c:df:89:da:55:bc:8b:f8:
                    eb:a0:49:7d:d3:24:f2:f6:95:05:8b:e9:ea:94:60:
                    ed:11:81:e9:58:1f:82:07:72:13:be:80:b7:52:71:
                    33:21:1f:87:69:8f:e4:d2:fc:55:a8:3d:7d:15:5d:
                    a3:c1:c3:a2:ae:66:4b:39:d2:a9:5d:36:e4:f3:66:
                    94:55:22:57:89:04:21:29:39:51:2c:e8:de:4f:0b:
                    87:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:16:10:FB:24:7A:2A:CD:C5:34:79:8C:F7:B3:59:EE:A6:44:75:E1
            X509v3 Authority Key Identifier:
                keyid:FE:B3:2F:06:F6:24:DA:72:93:81:BF:21:F5:D3:27:6B:74:12:07:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/64fa80bf06a44142d6d980a11ecdaef340c5b432.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/27535cfd-7d45-4d5e-b490-55be79de1bea/b65ca7a0a3b98a6b43e5ffdd004829462ab68e2d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.5.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7f:7a:40:93:25:95:94:20:b6:35:9f:e0:3f:40:c9:45:23:26:
         9a:49:21:54:bb:46:1a:59:4c:ce:c5:eb:e6:a0:c9:cc:e5:41:
         50:63:b3:81:90:6c:3c:31:2c:c7:fe:f8:e0:01:2b:00:d9:de:
         24:9b:6f:b6:e5:9f:b7:9b:99:36:3b:02:30:c6:cf:39:f1:0f:
         f4:31:6a:4f:be:c6:1c:8d:65:d4:1a:2f:04:2f:72:04:ab:e0:
         58:10:ca:70:b3:8d:27:52:ea:e6:2a:34:c9:67:67:4d:0d:d1:
         b2:a8:b1:47:d5:11:ff:2e:51:36:a3:81:31:0a:b3:ac:96:be:
         e7:7a:fe:db:d1:19:83:ce:93:55:72:17:91:11:1a:be:d9:0a:
         31:6c:b7:1b:99:05:dc:6a:05:24:20:df:a3:fc:fd:01:08:33:
         6e:71:2b:6d:09:a8:21:94:cc:01:a7:9c:17:a8:11:fa:f6:d3:
         1f:39:86:30:3a:81:51:0a:de:18:2f:29:56:92:75:81:3c:ec:
         72:03:b9:7c:56:76:8f:ba:bf:be:23:5e:dd:e3:4a:2a:59:67:
         cc:56:b2:53:7d:9e:74:eb:f4:85:1f:c0:a4:e2:dd:7d:5a:d8:
         93:20:24:09:fd:8b:3b:b4:b7:52:30:96:76:1d:28:88:f2:51:
         75:53:9a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----