Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/87f6358dd6fda30f6ba734b4a904d2faeb375469.roa
File:                     87f6358dd6fda30f6ba734b4a904d2faeb375469.roa (raw, json)
Hash identifier:          xg2l/VDgE8mh4RHFuiU4Y/w6TIeb20DqXoQLuO8fg5c=
Subject key identifier:   98:65:67:BC:E0:13:DB:52:B0:B6:DF:F0:F9:CE:59:70:D1:76:7D:E3
Certificate issuer:       /CN=1c19bb58bf30a6b5633338f01c9003f7c46c52e6
Certificate serial:       10F6A9
Authority key identifier: D8:D1:38:88:F9:CA:FE:3A:32:13:BE:AD:07:4E:F1:CB:36:16:9A:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/87f6358dd6fda30f6ba734b4a904d2faeb375469.roa
Signing time:             Wed 02 Mar 2022 23:32:56 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269949
IP address blocks:        190.83.124.0/22 maxlen: 22
                          2803:eae0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1111721 (0x10f6a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c19bb58bf30a6b5633338f01c9003f7c46c52e6
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=87f6358dd6fda30f6ba734b4a904d2faeb375469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9d:c8:83:cb:6e:46:87:d1:c8:e8:7f:32:61:
                    6e:28:64:5c:a6:15:1b:27:c5:23:45:f4:71:4a:82:
                    71:67:ad:71:ba:03:e2:5f:0f:48:0e:3b:f0:58:8d:
                    00:ad:12:86:2b:70:97:10:9c:44:d2:ab:36:cc:43:
                    88:d8:d1:05:2c:76:79:04:ee:cb:50:ff:9d:16:e4:
                    e2:4d:1e:69:eb:3b:58:84:66:98:2d:98:25:75:74:
                    bd:43:9b:a6:8d:e6:bb:fa:d0:00:ca:0b:a1:6c:78:
                    fd:c4:c8:7e:4c:fe:1d:4b:7d:c8:9a:08:5b:47:2d:
                    c2:e6:ea:35:14:d9:17:4d:21:4d:ce:d9:cf:f4:04:
                    0c:09:a5:24:d5:95:52:5c:51:1b:83:5b:2e:4b:c5:
                    5c:c1:6d:9c:81:b9:9b:ee:14:24:e2:9a:d3:9b:28:
                    ca:21:4e:5f:f3:77:f2:64:b0:19:54:13:b8:91:c1:
                    fe:d5:c0:59:70:87:4b:82:ca:c7:e5:d5:64:2a:9d:
                    0d:3f:f5:e5:6d:cd:64:ea:d5:6f:39:41:a4:73:04:
                    c5:4e:ea:12:02:32:56:e6:eb:73:38:77:4f:5f:88:
                    83:a1:56:ed:34:ad:1b:f3:39:27:d0:7f:ba:f2:fc:
                    2e:68:84:90:7d:bd:dd:7a:69:2b:a2:a4:86:0c:9e:
                    dc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:65:67:BC:E0:13:DB:52:B0:B6:DF:F0:F9:CE:59:70:D1:76:7D:E3
            X509v3 Authority Key Identifier:
                keyid:D8:D1:38:88:F9:CA:FE:3A:32:13:BE:AD:07:4E:F1:CB:36:16:9A:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/87f6358dd6fda30f6ba734b4a904d2faeb375469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3fc38026-6b9d-4919-8047-4d693ba8ecc4/1c19bb58bf30a6b5633338f01c9003f7c46c52e6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.124.0/22
                IPv6:
                  2803:eae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:62:03:7f:a8:82:a5:81:85:b9:6a:2d:72:a3:18:2f:97:01:
         22:6e:a3:b3:63:b3:82:cb:8b:69:a4:6b:4e:77:3e:f2:55:89:
         8f:1d:16:c6:59:7b:1b:ec:70:72:6a:77:42:0a:b1:62:61:24:
         5b:52:27:5d:d5:53:1e:50:1f:d9:7a:70:6b:82:41:90:32:17:
         54:5d:83:43:4a:81:72:93:86:c9:ae:e3:8b:19:02:c0:94:66:
         cf:2a:62:ea:df:5a:db:c2:9f:27:b5:dc:6c:61:40:8c:14:2d:
         75:44:17:5b:0e:9a:d0:e3:73:9c:fe:d3:7b:e4:5c:c1:2e:5d:
         94:34:a8:de:b8:ca:b4:81:47:0c:58:cd:7b:08:30:c9:d0:ed:
         2b:0d:ae:6a:5e:66:f8:58:b2:51:f9:e9:58:10:17:5d:93:ee:
         6f:bd:38:64:be:da:97:14:2a:40:3a:19:02:39:56:20:78:c9:
         74:a2:ee:d4:dd:d5:45:29:d4:3a:a3:24:0c:03:1b:42:5c:c2:
         db:da:00:d7:32:01:86:34:fc:20:96:f2:64:d7:bb:2b:59:4c:
         77:c5:3e:a2:f2:c1:90:dd:2c:fd:e2:d9:98:f9:ab:53:ff:1e:
         19:63:7e:0d:4c:56:49:4f:65:9c:2a:69:c9:9b:9d:e4:c0:0f:
         a6:44:ad:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----