Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/056075f4309641afd20b07617257ea3a09d066b8.roa
File:                     056075f4309641afd20b07617257ea3a09d066b8.roa (raw, json)
Hash identifier:          /1yWAfqi9YcCA05LEoaGN10PxMmn9Wx2zG3GRUx9TBs=
Subject key identifier:   6F:2F:FA:CF:82:C4:17:9B:28:E4:B7:C9:4C:99:85:36:76:97:31:1B
Certificate issuer:       /CN=3f7aac1ebb4a94b7e0894611ee24072627e16f9e
Certificate serial:       0D3A43
Authority key identifier: 55:12:0B:90:13:D3:A8:DC:DD:47:B6:84:9A:E3:8D:91:F2:6B:12:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/056075f4309641afd20b07617257ea3a09d066b8.roa
Signing time:             Wed 24 Mar 2021 14:34:03 +0000
ROA not before:           Wed 24 Mar 2021 14:34:03 +0000
ROA not after:            Tue 24 Mar 2026 14:34:03 +0000
asID:                     27678
IP address blocks:        200.1.120.0/22 maxlen: 24
                          190.124.24.0/23 maxlen: 24
                          190.124.26.0/24 maxlen: 24
                          200.7.6.0/23 maxlen: 24
                          200.16.113.0/24 maxlen: 24
                          200.16.114.0/23 maxlen: 24
                          2001:1398:1::/48 maxlen: 48
                          2001:1398:3::/48 maxlen: 48
                          2001:1398:4::/48 maxlen: 48
                          2001:1398:5::/48 maxlen: 48
                          2001:1398:16::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866883 (0xd3a43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f7aac1ebb4a94b7e0894611ee24072627e16f9e
        Validity
            Not Before: Mar 24 14:34:03 2021 GMT
            Not After : Mar 24 14:34:03 2026 GMT
        Subject: CN=056075f4309641afd20b07617257ea3a09d066b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cf:56:1c:51:16:6d:68:bd:77:47:fe:b0:65:
                    75:5d:1b:d6:7a:6d:94:1e:70:bc:69:b1:84:63:a1:
                    0c:c8:97:ca:09:b5:9e:c6:17:ea:53:36:d3:f1:aa:
                    13:31:a9:8d:c8:6b:4b:f9:37:39:d2:61:0f:61:3c:
                    70:53:35:52:60:07:60:37:d0:8c:75:64:37:68:7c:
                    f7:79:bb:6f:35:a0:57:a6:0c:ef:03:51:4a:3c:24:
                    e5:57:7e:44:13:31:47:aa:25:6e:11:1b:e5:e3:c3:
                    e9:84:8e:61:eb:af:fb:69:37:71:7d:1a:22:1b:29:
                    72:af:99:85:53:47:82:6b:98:ac:be:53:2e:da:69:
                    57:68:57:e3:f2:45:73:18:9b:43:a5:24:de:07:28:
                    15:ab:22:d4:4e:7a:a2:27:33:d5:96:ca:16:90:b7:
                    14:72:0a:fa:0a:68:ba:c8:d8:3a:94:99:4f:c1:fb:
                    da:5a:b9:ea:6f:dd:cc:9c:33:1a:3c:e2:90:b3:06:
                    47:f8:1b:21:52:35:4e:4d:7e:21:4e:a2:22:da:d3:
                    31:26:9b:94:70:0f:31:46:7d:2f:cc:46:19:ac:29:
                    b7:00:70:21:c6:05:6c:bf:c5:fd:f7:9a:8a:df:fb:
                    60:a5:c3:05:75:e2:9a:42:05:69:59:bf:9b:cc:f4:
                    ec:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2F:FA:CF:82:C4:17:9B:28:E4:B7:C9:4C:99:85:36:76:97:31:1B
            X509v3 Authority Key Identifier:
                keyid:55:12:0B:90:13:D3:A8:DC:DD:47:B6:84:9A:E3:8D:91:F2:6B:12:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/056075f4309641afd20b07617257ea3a09d066b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.24.0-190.124.26.255
                  200.1.120.0/22
                  200.7.6.0/23
                  200.16.113.0-200.16.115.255
                IPv6:
                  2001:1398:1::/48
                  2001:1398:3::-2001:1398:5:ffff:ffff:ffff:ffff:ffff
                  2001:1398:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:47:a8:58:21:51:0a:70:bb:d9:44:97:93:c5:b3:b5:db:1e:
         b4:b0:ef:33:4f:7f:35:f3:1b:5f:1d:27:a6:e1:57:13:44:dc:
         c8:c3:21:20:76:66:e9:b1:40:fe:20:1b:37:ee:5c:45:cc:de:
         02:cc:f6:ed:66:26:ac:2a:fc:67:10:2b:a3:5c:f5:bb:d0:e6:
         81:42:57:57:f1:4e:18:b4:ab:f0:9c:57:30:7c:73:8e:98:5b:
         c9:5b:9b:d6:6a:1c:88:39:7c:e5:07:73:62:2e:0b:89:b3:e0:
         b2:43:32:1c:ca:7b:38:85:e5:62:7e:cc:40:be:2f:0a:b0:07:
         a2:43:ce:36:e2:48:54:b3:34:6f:1d:ab:a4:65:4c:89:6d:4a:
         03:81:53:2d:87:79:b1:82:55:f4:7f:22:ec:39:3c:65:83:b6:
         bb:8c:9e:30:3e:de:4c:65:d1:a5:eb:49:f5:40:6a:9d:4c:b1:
         d8:9e:cd:59:62:83:3e:22:f1:7b:67:b5:7e:4e:ec:27:eb:bd:
         c2:bb:52:e0:04:b4:f0:44:1f:5f:38:08:7a:86:f4:01:2d:58:
         75:c8:14:67:39:ec:3e:73:96:9d:7b:3e:46:e0:ab:90:8e:76:
         85:de:dc:5b:bd:84:92:6a:32:c8:d2:bc:e6:8e:10:1a:22:41:
         b6:2d:b4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----