Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/1f0a2522e7fcb3e839aaed97a1d5426357270093.roa
File:                     1f0a2522e7fcb3e839aaed97a1d5426357270093.roa (raw, json)
Hash identifier:          SCJB03Z4g8seHKDRgGlFVZ2P9FhoHq0q0VsVzaoiC7A=
Subject key identifier:   2F:C5:61:47:60:DF:72:2E:37:C3:29:A4:1B:05:75:F1:D4:DE:29:B0
Certificate issuer:       /CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
Certificate serial:       1832F8
Authority key identifier: 44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/1f0a2522e7fcb3e839aaed97a1d5426357270093.roa
Signing time:             Sun 12 Jun 2022 05:34:44 +0000
ROA not before:           Wed 26 May 2021 03:00:00 +0000
ROA not after:            Fri 03 Sep 2027 03:00:00 +0000
asID:                     60022
IP address blocks:        190.121.240.0/24 maxlen: 24
                          190.121.241.0/24 maxlen: 24
                          190.121.242.0/23 maxlen: 23
                          190.121.244.0/24 maxlen: 24
                          190.121.245.0/24 maxlen: 24
                          190.121.246.0/24 maxlen: 24
                          190.121.247.0/24 maxlen: 24
                          190.121.248.0/21 maxlen: 21
                          2803:1100::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585912 (0x1832f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
        Validity
            Not Before: May 26 03:00:00 2021 GMT
            Not After : Sep  3 03:00:00 2027 GMT
        Subject: CN=1f0a2522e7fcb3e839aaed97a1d5426357270093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:74:4d:bd:b7:e9:8f:a1:9d:c0:0a:d1:cd:
                    90:9d:c6:36:b4:49:85:89:7a:7d:19:8d:ff:cf:66:
                    b8:7c:50:b4:33:73:57:1e:d9:bc:c0:36:61:6d:c1:
                    39:b8:d9:05:e8:07:a6:33:37:dc:d9:e6:b0:68:59:
                    c8:9f:7c:b3:cb:46:ba:21:8e:8a:90:b7:ab:2c:a2:
                    65:22:32:24:c4:46:94:b7:60:a4:e5:bc:12:18:36:
                    2b:f0:cf:28:34:56:24:ff:4e:b5:44:a4:b2:8b:a9:
                    45:f1:0b:0c:53:02:fb:ac:49:bb:97:38:c4:80:c4:
                    9e:ab:b8:26:c2:b6:39:e3:57:3b:b1:9a:54:5c:18:
                    4b:e7:bc:44:6c:ed:f9:22:2e:7a:1d:04:51:b1:2c:
                    54:1b:3d:73:17:e4:c3:4d:e1:ca:09:5d:19:64:52:
                    47:5e:00:42:97:35:36:2c:0a:5f:d2:10:55:4d:30:
                    a0:13:43:42:c7:ab:eb:9d:6f:67:9a:7f:54:ab:b8:
                    e4:6d:d9:97:08:3c:91:e0:a3:2d:e9:0b:72:7a:bc:
                    46:b8:cc:2e:d9:bc:32:6d:d0:8f:bc:9b:ca:ee:b0:
                    8f:27:5c:3b:da:64:b2:35:80:1c:01:0a:4e:7c:9d:
                    fc:a5:02:85:02:c9:bc:55:e3:8d:0b:a3:65:f9:e5:
                    f9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C5:61:47:60:DF:72:2E:37:C3:29:A4:1B:05:75:F1:D4:DE:29:B0
            X509v3 Authority Key Identifier:
                keyid:44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/1f0a2522e7fcb3e839aaed97a1d5426357270093.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/fcc25171c7921fdcd117ca7096ecea5ba6358873.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.240.0/20
                IPv6:
                  2803:1100::/32

    Signature Algorithm: sha256WithRSAEncryption
         a1:2b:a4:5b:60:b4:40:17:ef:97:b1:5f:f7:68:da:db:44:aa:
         e2:9d:bd:73:98:6a:4c:53:c4:f0:eb:6f:29:07:80:b1:2e:1b:
         c6:82:25:01:0d:31:3f:0d:48:ca:7d:55:ac:a1:92:83:7c:fa:
         36:be:fc:e8:62:a7:46:37:26:f8:24:30:aa:eb:99:ca:91:11:
         e0:e5:31:f9:89:b1:01:fb:64:a3:0c:6e:f9:bd:5e:d3:0e:03:
         a9:81:44:56:3c:5d:6d:9a:43:6b:e9:ce:ac:d7:3c:ce:ae:3a:
         9b:6c:f0:ed:b5:c6:33:6c:3c:ae:19:8a:fc:f3:e8:46:9f:b0:
         11:54:f2:ad:87:e7:e0:d4:4f:ed:3a:7e:75:eb:50:94:c3:96:
         6c:5c:66:98:e2:aa:2d:60:ec:8b:ba:ae:c4:bc:fa:9b:16:c8:
         35:3d:97:96:f5:e1:f4:62:10:33:84:30:c1:7b:7a:b1:ab:a4:
         16:a4:ca:c8:fd:ab:06:99:df:d3:b8:52:69:7b:04:e1:21:d6:
         32:89:c4:ed:be:6d:1f:0c:87:bc:ca:13:1c:df:4b:7a:ff:a5:
         a7:7c:d9:d2:7e:15:c0:5f:e6:2c:3b:4a:c2:a8:b2:24:c5:22:
         ee:7c:d8:f1:3e:2c:34:90:58:03:59:d3:6d:8a:c5:c6:92:78:
         f5:9d:c0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----