Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fc07446-1d1c-45df-b08c-e1b58a120945/902e7a3103bc550e6ef7ed82b44747b51a05e97d.roa
File:                     902e7a3103bc550e6ef7ed82b44747b51a05e97d.roa (raw, json)
Hash identifier:          xUsOi4jjHa6lw9OsqAvcQ90CNDJSFzpCn7MlgaxIHN4=
Subject key identifier:   21:B1:01:62:FE:CB:74:47:F4:67:3F:72:38:AB:6A:D4:2C:EB:20:40
Certificate issuer:       /CN=c77540182b1e52f99236719a50a5e0d2a60dd1e8
Certificate serial:       0D2C9D
Authority key identifier: A8:2E:BB:57:9A:6F:1E:A8:21:96:58:9E:B3:EB:53:79:D9:9E:DA:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c77540182b1e52f99236719a50a5e0d2a60dd1e8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2fc07446-1d1c-45df-b08c-e1b58a120945/902e7a3103bc550e6ef7ed82b44747b51a05e97d.roa
Signing time:             Mon 26 Apr 2021 15:17:10 +0000
ROA not before:           Mon 26 Apr 2021 03:00:00 +0000
ROA not after:            Wed 26 Apr 2023 03:00:00 +0000
asID:                     263759
IP address blocks:        190.122.188.0/22 maxlen: 24
                          2803:4300::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863389 (0xd2c9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77540182b1e52f99236719a50a5e0d2a60dd1e8
        Validity
            Not Before: Apr 26 03:00:00 2021 GMT
            Not After : Apr 26 03:00:00 2023 GMT
        Subject: CN=902e7a3103bc550e6ef7ed82b44747b51a05e97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:72:db:09:32:d3:23:8f:76:3a:94:56:6b:
                    ff:d4:52:36:a7:80:f9:b3:09:06:4c:2a:31:7b:1f:
                    fb:33:95:8b:43:d2:f3:e3:d9:72:f6:59:aa:12:36:
                    0a:00:dc:49:80:fa:ad:f3:b6:3d:2f:e5:49:ef:a4:
                    01:bb:e8:c7:bc:ba:1d:9e:13:4d:3a:90:97:54:df:
                    31:8b:37:3c:4e:63:91:0f:67:c0:ec:ae:83:e8:7c:
                    c4:bd:77:c9:ea:f3:c7:6b:61:00:7d:8b:b6:33:b3:
                    23:31:ed:49:c5:a7:4b:7d:bc:8c:2e:dc:41:23:82:
                    12:2b:8d:ff:0f:8a:dc:8b:fe:0a:34:9b:11:4c:35:
                    9e:d7:38:62:df:9f:08:6a:89:de:dc:2a:3b:66:9b:
                    8a:8f:82:2e:7a:b3:4a:30:38:51:2e:64:b6:86:2b:
                    ed:d9:74:a5:99:4d:93:6b:8e:da:12:fd:ce:3c:03:
                    9c:e5:b0:84:4a:8e:5c:9d:d0:4a:d7:da:99:44:9e:
                    aa:6b:db:7d:1f:83:21:53:0c:db:2e:a6:9c:9a:9c:
                    af:00:d8:16:08:b2:6d:d5:1d:ca:4a:ce:79:7e:cd:
                    04:b5:fb:2d:c2:fd:6b:cb:eb:2d:cd:b9:65:1e:d7:
                    7b:8d:b1:a6:e5:0d:ea:90:82:83:29:84:17:ab:55:
                    9b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B1:01:62:FE:CB:74:47:F4:67:3F:72:38:AB:6A:D4:2C:EB:20:40
            X509v3 Authority Key Identifier:
                keyid:A8:2E:BB:57:9A:6F:1E:A8:21:96:58:9E:B3:EB:53:79:D9:9E:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c77540182b1e52f99236719a50a5e0d2a60dd1e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fc07446-1d1c-45df-b08c-e1b58a120945/902e7a3103bc550e6ef7ed82b44747b51a05e97d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2fc07446-1d1c-45df-b08c-e1b58a120945/c77540182b1e52f99236719a50a5e0d2a60dd1e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.188.0/22
                IPv6:
                  2803:4300::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:89:a0:7b:2e:50:32:1b:89:36:5c:d7:27:fd:00:e5:a6:08:
         eb:c1:c9:17:42:31:5c:0d:1a:5f:4f:90:96:1b:07:5d:1b:bf:
         1b:ef:ce:6d:85:53:2e:aa:ea:05:b3:0f:26:c5:5e:4c:c9:f6:
         96:70:94:f6:bc:15:66:24:fd:3c:22:ab:6a:52:fe:fa:1e:80:
         d3:fc:b0:a9:9e:56:47:a2:a7:af:c8:9f:4e:a7:ca:f3:69:9d:
         2e:60:c1:3d:62:85:2c:f1:6b:cc:fc:25:60:90:82:fe:f4:ae:
         51:6a:4e:e4:cf:09:c9:ef:a5:2e:2d:98:c5:b9:69:54:a1:fd:
         18:44:f5:86:77:5c:9f:2c:44:6d:18:44:73:de:9c:ac:a0:00:
         f4:8f:82:a7:26:b3:e1:a7:7f:81:c6:18:57:cc:78:7c:ad:29:
         ca:b7:9a:f7:60:7c:3a:cc:29:66:dc:e3:d5:59:9b:52:ea:4f:
         b1:d0:24:af:d2:e2:5a:fe:81:e2:21:dd:39:fe:06:57:38:6c:
         71:5c:75:37:4c:1e:bf:4a:f3:91:60:3f:db:46:48:66:42:86:
         de:29:0d:08:ec:73:d5:ee:8c:2f:c3:83:8f:b4:45:2b:bf:65:
         f0:15:7a:6f:80:0e:9e:c5:60:f1:eb:e2:78:53:73:26:d8:f0:
         78:ad:bf:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----