Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2c4db898-59c8-4568-976e-2adddce7ebed/4fd914386eb45f3913291a47ced976995e60ee22.roa
File:                     4fd914386eb45f3913291a47ced976995e60ee22.roa (raw, json)
Hash identifier:          NmHMc44AWjb/QgoGcrZODoV3S9USWiYHDFytoRQL+Q4=
Subject key identifier:   23:F8:E3:3E:A5:7D:4E:99:81:98:91:ED:98:5B:1E:B3:FF:73:F6:9E
Certificate issuer:       /CN=969da9021496148ea803d6fd9b5a297aebfc905d
Certificate serial:       0D8A0B
Authority key identifier: 3C:FF:80:BF:78:CE:FB:91:D9:BA:3B:13:FE:C2:73:B1:A5:C0:3C:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/969da9021496148ea803d6fd9b5a297aebfc905d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2c4db898-59c8-4568-976e-2adddce7ebed/4fd914386eb45f3913291a47ced976995e60ee22.roa
Signing time:             Wed 24 Mar 2021 14:38:02 +0000
ROA not before:           Wed 24 Mar 2021 14:38:01 +0000
ROA not after:            Tue 24 Mar 2026 14:38:01 +0000
asID:                     13805
IP address blocks:        190.123.128.0/20 maxlen: 20
                          2803:d200::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 887307 (0xd8a0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=969da9021496148ea803d6fd9b5a297aebfc905d
        Validity
            Not Before: Mar 24 14:38:01 2021 GMT
            Not After : Mar 24 14:38:01 2026 GMT
        Subject: CN=4fd914386eb45f3913291a47ced976995e60ee22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:f0:d1:27:75:27:49:ea:77:e4:44:10:23:
                    8e:82:a5:97:82:cb:1e:4a:d1:82:5d:e5:13:43:5c:
                    30:87:86:92:59:9f:a2:24:3a:4e:5f:9d:d2:23:91:
                    81:54:86:88:9b:c7:65:fc:b0:bc:9d:f9:f9:8d:73:
                    31:d9:56:7e:16:d5:dc:85:4b:a4:65:29:57:34:14:
                    77:7a:06:fd:05:62:87:17:a1:6b:c8:d4:ba:be:38:
                    4c:fa:96:21:a0:ea:70:2a:9b:de:81:07:0e:5f:d9:
                    bc:9b:3d:ad:49:15:64:71:b8:72:87:fb:fb:b9:e6:
                    1d:99:40:a9:60:98:c5:5f:8d:39:f6:5b:c7:9c:b6:
                    2c:dd:c2:5e:8c:94:c4:7f:79:44:4c:c4:9a:17:4f:
                    0e:7e:f5:43:0d:33:6a:6f:02:00:4e:6e:4a:18:33:
                    a3:9c:8b:db:e0:9e:01:71:9f:65:09:a8:df:f8:4f:
                    aa:dd:2a:13:66:1f:e0:28:b4:82:fb:b7:aa:bc:36:
                    34:6e:2a:64:05:06:ad:31:11:c5:38:b7:d9:ad:75:
                    23:ff:65:6f:6e:7b:6e:ed:b4:20:37:ab:56:57:a3:
                    13:c0:54:a3:d5:f5:10:28:2d:28:8f:36:2e:bd:e6:
                    4e:44:42:fd:7d:4c:da:b4:07:0a:ed:4d:f7:84:33:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F8:E3:3E:A5:7D:4E:99:81:98:91:ED:98:5B:1E:B3:FF:73:F6:9E
            X509v3 Authority Key Identifier:
                keyid:3C:FF:80:BF:78:CE:FB:91:D9:BA:3B:13:FE:C2:73:B1:A5:C0:3C:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/969da9021496148ea803d6fd9b5a297aebfc905d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2c4db898-59c8-4568-976e-2adddce7ebed/4fd914386eb45f3913291a47ced976995e60ee22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2c4db898-59c8-4568-976e-2adddce7ebed/969da9021496148ea803d6fd9b5a297aebfc905d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.128.0/20
                IPv6:
                  2803:d200::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:73:ed:f0:95:ff:29:5a:04:df:cc:d2:50:dd:d8:bc:a5:05:
         ef:de:e8:32:d5:15:c1:af:91:ed:c7:9e:13:b6:54:0e:79:18:
         0e:c4:ec:e0:52:80:3b:01:6b:cd:e9:cd:4e:9a:c4:46:69:d7:
         93:97:c4:2d:8a:91:14:7b:4c:2c:a8:43:13:27:bf:29:e7:18:
         e4:8e:7d:45:b9:50:d8:9d:3d:a6:f5:93:97:49:d9:33:47:b5:
         77:7c:0d:8a:76:b5:45:8f:5f:66:ea:96:b7:d3:50:0e:20:0a:
         10:40:e9:2e:ee:4d:3c:35:b9:2d:49:91:a2:9e:d3:b8:25:77:
         dc:b9:a9:0a:d4:bd:69:e3:3b:a5:2a:9b:fd:eb:95:11:95:03:
         19:1a:fb:59:65:07:1c:ce:b3:01:b2:ac:fd:21:f6:ad:52:f8:
         74:1e:e2:d9:fc:80:04:d9:2d:57:b3:2b:7f:7d:4b:6a:8b:03:
         a7:0c:69:3d:b9:21:35:dc:97:78:fc:8d:6d:3f:d7:04:94:80:
         9c:5d:07:68:b1:94:95:05:11:2f:94:65:48:93:3f:1e:16:03:
         d6:4b:88:77:70:16:e7:b6:fd:08:26:85:23:7b:a4:88:96:2e:
         a9:f5:a4:89:76:ad:fd:56:f4:23:96:e2:b4:f6:5f:08:49:2c:
         32:b6:62:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----