Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3758cc68-c770-4dfe-b908-3288cba7d522/a11d59cd2bfa081bd9677fb9d2fb6e2ed2a37ae4.roa
File:                     a11d59cd2bfa081bd9677fb9d2fb6e2ed2a37ae4.roa (raw, json)
Hash identifier:          Cg4c/KtPKQ9FCW7Oz4TgxpurQQiQ+cxY3w/EJMlh+L0=
Subject key identifier:   79:24:CD:75:C1:1A:15:2A:D3:33:F1:0D:E5:67:D9:2F:E5:71:69:AE
Certificate issuer:       /CN=d9dcc4557e432f1ab19bac82aca733fa3689b707
Certificate serial:       0858
Authority key identifier: 32:76:AC:21:1E:D7:67:5F:9F:51:D5:B6:5C:08:32:5D:2D:0F:D4:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9dcc4557e432f1ab19bac82aca733fa3689b707.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3758cc68-c770-4dfe-b908-3288cba7d522/a11d59cd2bfa081bd9677fb9d2fb6e2ed2a37ae4.roa
Signing time:             Tue 24 May 2022 16:15:13 +0000
ROA not before:           Tue 24 May 2022 03:00:00 +0000
ROA not after:            Fri 24 May 2024 03:00:00 +0000
asID:                     272154
IP address blocks:        190.103.188.0/24 maxlen: 24
                          2801:14:5800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136 (0x858)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9dcc4557e432f1ab19bac82aca733fa3689b707
        Validity
            Not Before: May 24 03:00:00 2022 GMT
            Not After : May 24 03:00:00 2024 GMT
        Subject: CN=a11d59cd2bfa081bd9677fb9d2fb6e2ed2a37ae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fe:88:d1:a7:62:39:b5:01:7c:a6:dd:b2:4c:
                    51:d6:7b:40:00:63:b3:6e:c6:f8:d1:6b:7d:32:9c:
                    f3:42:41:ca:d0:85:6f:11:b4:ef:be:60:03:fd:ad:
                    ac:43:f2:e1:45:d2:fa:9e:78:e5:fa:91:f6:e6:b1:
                    86:06:96:6e:0d:e8:79:03:32:b2:11:a3:47:36:cd:
                    8f:64:97:76:cf:56:c9:fd:3f:96:40:44:9a:22:42:
                    b8:9c:ad:ab:3f:74:f3:bd:4d:f0:17:6c:2d:4b:2d:
                    c2:a1:5c:e0:94:f7:ee:0a:57:a5:c0:e1:bd:df:8a:
                    4f:23:b5:f2:93:a4:a8:65:16:ea:ad:8c:8b:bf:cf:
                    97:3f:d4:1b:bc:ba:e4:f1:8e:d7:f0:90:be:01:3a:
                    6b:a3:6c:c6:8c:93:b9:67:0b:f1:93:99:6b:63:d2:
                    56:90:71:6b:b6:c0:d0:64:38:e1:38:57:51:54:1b:
                    aa:8f:0b:88:77:e0:c8:f8:61:61:18:91:37:10:7d:
                    a2:75:c8:48:b0:e7:6b:35:f1:b4:d8:4c:09:88:aa:
                    19:76:34:4b:a0:0a:b5:52:9b:09:c1:29:6c:fc:83:
                    c3:2c:a9:2c:c9:26:62:e9:2f:42:6f:fe:b7:70:05:
                    3f:33:bb:e6:ff:51:88:f5:21:9a:bb:d1:b2:d5:54:
                    ab:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:24:CD:75:C1:1A:15:2A:D3:33:F1:0D:E5:67:D9:2F:E5:71:69:AE
            X509v3 Authority Key Identifier:
                keyid:32:76:AC:21:1E:D7:67:5F:9F:51:D5:B6:5C:08:32:5D:2D:0F:D4:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9dcc4557e432f1ab19bac82aca733fa3689b707.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3758cc68-c770-4dfe-b908-3288cba7d522/a11d59cd2bfa081bd9677fb9d2fb6e2ed2a37ae4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3758cc68-c770-4dfe-b908-3288cba7d522/d9dcc4557e432f1ab19bac82aca733fa3689b707.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.188.0/24
                IPv6:
                  2801:14:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:e0:f0:91:67:32:7e:74:09:8d:c3:96:e6:f1:a9:45:4b:ed:
         b1:df:0a:d8:51:64:f6:bc:e7:90:ba:6c:18:e2:be:0d:35:9e:
         99:91:c8:35:50:22:36:f9:69:52:85:98:b1:45:c9:46:54:76:
         22:bf:f4:79:2f:32:51:d8:a5:98:4f:ca:f0:36:b1:13:a9:40:
         d6:5c:ab:f2:76:6c:6a:c6:55:c0:da:49:a1:94:21:cf:b3:ef:
         9b:c7:49:40:6f:b8:87:f5:64:e9:55:9e:36:53:20:bd:44:d4:
         06:b0:99:8f:60:dc:11:e8:db:4f:58:4b:bf:1b:1e:68:ad:10:
         26:f3:75:1f:3c:e1:ce:78:a6:8e:79:94:e4:21:ec:da:66:54:
         23:ba:c3:8d:30:cd:a3:35:4a:b0:59:8a:63:99:03:f4:27:35:
         4f:71:e2:a4:70:02:ee:85:7e:68:9c:72:b3:cc:d1:71:c3:64:
         fc:b3:cc:6a:ee:4e:0b:e9:c6:c8:3c:94:e9:fd:5e:6e:b5:67:
         3d:8d:d9:a2:4f:ed:e6:2b:04:22:9b:d8:c3:25:74:a4:40:f1:
         60:e1:59:7a:bf:1e:37:d1:80:ab:2f:a7:6d:a6:6d:7b:f1:61:
         79:b6:75:b0:4c:00:a2:39:5e:ad:ac:02:f0:06:ee:14:fb:fc:
         6d:85:fe:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----