Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/77d71cd072ef68acac10c4a61c3ec9263cbc6cb5.roa
File:                     77d71cd072ef68acac10c4a61c3ec9263cbc6cb5.roa (raw, json)
Hash identifier:          xnKuchQoLoxysLDincvL9mT6gtGspW+tfR3oIUQ14L8=
Subject key identifier:   5D:F1:18:4E:80:01:88:9F:71:2B:A0:36:CB:25:4D:C5:BB:9A:14:01
Certificate issuer:       /CN=fc4cfd946a0eeb5645e4de745f0b1bd955372749
Certificate serial:       0962
Authority key identifier: A4:03:9C:2C:3E:1E:90:3F:57:08:3D:A1:81:A3:16:49:3A:CC:E3:56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc4cfd946a0eeb5645e4de745f0b1bd955372749.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/77d71cd072ef68acac10c4a61c3ec9263cbc6cb5.roa
Signing time:             Fri 26 Mar 2021 14:10:43 +0000
ROA not before:           Fri 26 Mar 2021 03:00:00 +0000
ROA not after:            Tue 26 Mar 2024 03:00:00 +0000
asID:                     271806
IP address blocks:        190.113.40.0/22 maxlen: 24
                          2803:d010::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2402 (0x962)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4cfd946a0eeb5645e4de745f0b1bd955372749
        Validity
            Not Before: Mar 26 03:00:00 2021 GMT
            Not After : Mar 26 03:00:00 2024 GMT
        Subject: CN=77d71cd072ef68acac10c4a61c3ec9263cbc6cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:35:74:02:9c:0a:3d:78:e5:05:ea:67:f1:8e:
                    3d:54:77:91:6c:4a:9b:81:f9:5d:1a:8d:55:cf:fb:
                    b6:ee:cd:d8:69:5b:b0:f7:7a:52:32:4f:7b:5d:a3:
                    d3:72:35:ec:10:e8:88:e9:56:11:81:b7:fb:ae:12:
                    48:0b:ea:8c:49:88:33:c6:22:96:0b:fb:c7:5a:01:
                    6c:e7:3d:27:bb:2d:de:47:d7:2d:09:c8:4d:ca:da:
                    58:95:93:d9:75:b8:79:3d:4e:07:5e:24:96:a5:9d:
                    ce:af:e0:f0:27:42:2c:21:73:48:62:9c:3d:2c:9d:
                    69:92:c1:70:91:91:0f:41:ec:98:cf:7d:4f:fb:33:
                    10:22:ad:27:9d:23:57:40:5d:86:46:6c:fa:1d:8d:
                    0b:c8:47:ea:96:d2:97:e7:99:e6:0f:fd:ba:82:56:
                    c4:89:13:bf:1b:d7:b3:59:26:4e:99:b8:af:5f:e6:
                    de:b4:18:68:2c:80:85:b0:c7:83:ee:97:d3:26:63:
                    c9:ef:c8:be:41:39:23:c8:e7:84:08:b9:bb:80:ba:
                    00:34:0d:7d:08:3c:7d:04:3a:54:e8:9b:e4:8a:88:
                    47:f5:d5:03:33:06:72:58:eb:4c:39:b6:ed:36:0e:
                    e2:a4:41:99:36:df:25:b7:dc:7f:45:17:3a:0d:da:
                    0c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F1:18:4E:80:01:88:9F:71:2B:A0:36:CB:25:4D:C5:BB:9A:14:01
            X509v3 Authority Key Identifier:
                keyid:A4:03:9C:2C:3E:1E:90:3F:57:08:3D:A1:81:A3:16:49:3A:CC:E3:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc4cfd946a0eeb5645e4de745f0b1bd955372749.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/77d71cd072ef68acac10c4a61c3ec9263cbc6cb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/30dec7b1-98c9-40e1-b13e-1b20c016eaba/fc4cfd946a0eeb5645e4de745f0b1bd955372749.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.40.0/22
                IPv6:
                  2803:d010::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:4b:db:71:64:fa:52:80:e9:7d:38:bb:76:46:a8:02:cb:56:
         a1:b4:09:4f:7b:b7:e8:c5:21:ee:4b:c7:ae:a9:f9:a6:d8:41:
         c1:3c:9e:ba:de:61:5a:00:b6:ea:57:1f:7b:40:ad:f0:a7:0d:
         57:29:a5:1c:b5:0c:51:05:21:57:59:2a:2b:d3:e2:6f:f4:71:
         fd:4b:0a:97:88:bb:43:d7:22:6b:0b:8f:19:da:c4:67:83:fe:
         f6:4f:af:7d:fe:9b:fd:a9:2b:7c:f3:fb:fd:f8:57:5c:a4:65:
         cd:9b:93:23:11:92:71:a5:f5:e7:35:38:9e:7e:43:bd:d0:f4:
         b8:7e:43:94:44:73:62:af:2d:6c:f5:14:21:54:f6:9f:f3:1e:
         2d:8d:15:41:35:60:8c:83:01:5c:80:0b:4c:7c:c7:fb:93:fe:
         e2:a1:f8:44:8b:52:98:f8:8b:39:d6:f7:28:0e:80:28:09:e2:
         f9:a8:e4:f8:e4:b5:13:1e:c2:b5:79:57:0c:27:36:df:05:56:
         3b:18:26:3b:3d:86:88:16:38:18:6f:fe:80:4c:8e:d9:53:f9:
         ed:71:df:10:ec:b8:ca:f8:e0:c1:88:8f:52:7c:d3:21:b4:b0:
         c2:3a:e2:39:66:36:50:40:e8:ce:4c:7a:21:0d:10:cd:09:27:
         96:6e:c8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----