Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/b1e9943c6ef4c8d370bdf55c4a132dc32b3fa5d2.roa
File:                     b1e9943c6ef4c8d370bdf55c4a132dc32b3fa5d2.roa (raw, json)
Hash identifier:          ZMuABehNLOpbbgsSmdrUSLsUjy7Vln50ov9P5MPENd4=
Subject key identifier:   E2:27:74:2A:5C:03:92:41:0B:55:6E:D9:62:6C:B4:FF:20:C4:D8:A3
Certificate issuer:       /CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
Certificate serial:       181F0B
Authority key identifier: 44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/b1e9943c6ef4c8d370bdf55c4a132dc32b3fa5d2.roa
Signing time:             Sat 11 Jun 2022 17:41:29 +0000
ROA not before:           Wed 26 May 2021 03:00:00 +0000
ROA not after:            Fri 03 Sep 2027 03:00:00 +0000
asID:                     60022
IP address blocks:        190.121.241.0/24 maxlen: 24
                          190.121.244.0/24 maxlen: 24
                          190.121.246.0/24 maxlen: 24
                          190.121.247.0/24 maxlen: 24
                          190.121.248.0/21 maxlen: 21
                          190.121.240.0/24 maxlen: 24
                          190.121.242.0/23 maxlen: 23
                          190.121.245.0/24 maxlen: 24
                          2803:1100::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1580811 (0x181f0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcc25171c7921fdcd117ca7096ecea5ba6358873
        Validity
            Not Before: May 26 03:00:00 2021 GMT
            Not After : Sep  3 03:00:00 2027 GMT
        Subject: CN=b1e9943c6ef4c8d370bdf55c4a132dc32b3fa5d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c2:f5:de:78:40:c7:37:2c:21:84:70:8f:18:
                    b9:9e:d3:90:72:a2:29:78:36:44:6c:cd:23:ac:b2:
                    72:c9:94:06:a7:3e:32:84:6e:5c:bb:49:b0:1d:27:
                    a1:05:48:0d:48:01:88:3e:0f:47:60:79:63:37:87:
                    7e:cc:80:8d:ad:7f:1c:54:4f:9b:fb:1c:bb:1f:b8:
                    b0:b2:ae:03:29:c2:b1:ea:cc:2c:44:e6:15:07:2d:
                    6b:70:f9:3a:85:52:f8:86:46:7f:1a:e9:42:23:c7:
                    1b:38:5f:74:77:15:28:7e:97:0e:f4:e4:b8:cc:38:
                    3f:e1:78:81:e6:79:55:74:43:db:47:c4:eb:6a:2d:
                    a8:9c:7c:20:d5:14:02:09:4b:e7:1e:28:01:d2:e9:
                    42:e4:79:fe:69:ab:ab:a5:43:81:98:6d:a6:f5:3e:
                    23:48:03:4a:36:f7:19:db:24:20:81:d6:90:6d:83:
                    ba:77:31:af:95:90:97:74:37:4c:06:02:56:0e:75:
                    a1:08:fb:3b:b6:f4:73:3d:8f:53:4c:a5:3c:b9:d0:
                    60:f1:c7:b6:4a:60:f4:ba:ce:29:92:ef:11:f6:87:
                    f0:e0:b9:b5:5d:f4:fa:04:aa:4e:fd:cd:74:01:5e:
                    79:49:c0:be:39:1e:98:76:bd:81:af:a8:ab:da:16:
                    0c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:27:74:2A:5C:03:92:41:0B:55:6E:D9:62:6C:B4:FF:20:C4:D8:A3
            X509v3 Authority Key Identifier:
                keyid:44:F3:59:51:C4:50:1C:3F:A9:A0:56:06:9E:A2:3D:D1:38:E5:90:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcc25171c7921fdcd117ca7096ecea5ba6358873.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/b1e9943c6ef4c8d370bdf55c4a132dc32b3fa5d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2fad4d38-15b4-4576-902e-6555c096728e/fcc25171c7921fdcd117ca7096ecea5ba6358873.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.240.0/20
                IPv6:
                  2803:1100::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:60:e9:bb:92:7e:fc:63:4f:22:91:ff:5d:52:f5:64:33:3e:
         26:3d:94:fc:e0:bf:ed:41:10:f5:6c:7c:57:4f:16:17:e6:6f:
         a0:85:c6:e0:22:dc:db:34:cb:6f:5a:75:79:5f:41:18:34:19:
         9e:bc:77:c6:98:c1:08:be:9a:df:5c:45:58:2c:7f:8d:13:df:
         0d:57:9e:39:0b:e6:87:54:d5:5b:57:4d:96:27:bc:49:99:d5:
         3a:bc:b4:ed:d8:29:ac:64:b9:0c:19:26:b2:ab:6a:a9:cb:34:
         a8:da:29:a7:91:b5:b9:42:20:c8:32:60:be:65:fa:c7:22:cc:
         f3:d5:ab:a6:c2:bf:ac:ab:88:b6:f6:1d:52:c5:79:03:14:26:
         fb:f8:bb:53:9d:35:ee:c3:52:de:2a:66:a7:04:db:e8:50:6f:
         ee:be:f3:2f:3e:73:bf:05:6a:54:aa:9f:37:12:38:6b:4d:6a:
         40:b0:67:02:5f:f2:a4:a4:85:84:8a:ad:da:f7:83:19:84:de:
         d7:4d:8b:54:13:e5:31:8d:70:cc:e3:03:ea:db:e9:b7:65:55:
         95:db:d4:80:cd:63:f0:91:c0:0b:06:2b:07:00:11:38:28:62:
         83:33:4e:4e:3f:74:e3:28:3b:90:9c:86:7c:8f:2f:f1:f2:b7:
         f1:83:56:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----