Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/bc179159ff498f4c7c6e6ceb1391b75b8fda0b00.roa
File:                     bc179159ff498f4c7c6e6ceb1391b75b8fda0b00.roa (raw, json)
Hash identifier:          BXZmsOE0bWSm6JcP1/26TZDu5cGlq/FZ4KDFPIlxbic=
Subject key identifier:   46:4C:B4:4C:84:AF:63:FA:A7:B8:BA:7F:8B:7E:02:8B:EE:0A:DD:BB
Certificate issuer:       /CN=e96ad0760fe41dfa57b0ded382e54d4a9f8cba25
Certificate serial:       010DBE
Authority key identifier: A8:D7:AF:27:9E:5F:AB:1A:CC:05:3B:0A:62:16:4E:DE:C8:24:FA:97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/bc179159ff498f4c7c6e6ceb1391b75b8fda0b00.roa
Signing time:             Tue 06 Apr 2021 14:00:21 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     269905
IP address blocks:        190.112.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69054 (0x10dbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96ad0760fe41dfa57b0ded382e54d4a9f8cba25
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=bc179159ff498f4c7c6e6ceb1391b75b8fda0b00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:88:82:ad:19:35:22:00:26:a5:04:db:aa:dc:
                    c2:d8:dc:01:76:a7:c5:9c:5d:7e:fb:2a:cd:3d:5c:
                    ee:59:3a:62:af:e2:cf:f3:23:c3:8a:c1:bd:88:ed:
                    01:d6:36:71:c4:8d:b9:6a:74:16:4d:a9:35:8f:54:
                    2e:1c:87:8b:83:76:d8:85:dc:06:93:02:3f:7f:19:
                    f1:96:a5:6f:b3:09:af:fc:a9:1a:eb:cb:ad:17:f2:
                    74:94:81:05:a3:e6:07:a2:a2:8f:20:dc:0a:c7:d4:
                    f3:63:3a:1f:46:57:13:9d:10:da:bf:7a:41:23:cd:
                    ca:2b:c4:b7:c8:4a:5c:74:ec:58:40:9b:1b:ec:c5:
                    1d:b1:ab:25:a2:91:22:75:67:e4:2d:a2:77:0a:ac:
                    31:94:db:d9:12:8d:8b:fe:59:57:65:aa:f6:95:19:
                    18:75:20:73:cf:6d:a8:e9:fa:b5:99:7f:27:ae:ef:
                    e0:74:de:2e:52:02:d2:fb:25:7b:b7:2a:4d:58:1e:
                    a9:ab:cd:a8:33:d4:80:3e:81:a8:4e:dd:a5:33:b6:
                    5f:fb:9d:ee:e1:d6:59:46:cd:fe:cb:9d:d6:a2:95:
                    e8:a6:72:e2:3d:e3:59:57:a8:d7:17:07:7a:8d:fb:
                    a1:87:52:27:c7:69:21:3f:06:49:3f:39:18:75:d6:
                    88:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4C:B4:4C:84:AF:63:FA:A7:B8:BA:7F:8B:7E:02:8B:EE:0A:DD:BB
            X509v3 Authority Key Identifier:
                keyid:A8:D7:AF:27:9E:5F:AB:1A:CC:05:3B:0A:62:16:4E:DE:C8:24:FA:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/bc179159ff498f4c7c6e6ceb1391b75b8fda0b00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4001e17d-a25e-4e9b-883f-c6164a249357/e96ad0760fe41dfa57b0ded382e54d4a9f8cba25.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:5b:11:ea:ad:e1:29:cf:54:43:f0:6b:97:b3:81:01:17:92:
         cc:06:6a:37:d8:3b:03:27:76:17:9a:26:d7:fa:8c:7d:14:c5:
         6d:01:5c:e6:de:6d:f8:43:54:58:da:ba:7a:fa:78:c2:ab:03:
         f7:96:f6:72:9f:c6:42:0f:4c:40:69:7d:8b:c5:c2:0a:6a:74:
         32:0f:98:9f:0a:6f:0f:ae:ca:60:ba:03:0f:5d:c8:4f:56:7a:
         d2:d4:65:fd:2c:da:ed:e5:fa:60:b9:7f:a4:d3:93:dc:16:64:
         c3:9d:7e:5b:28:0e:5e:00:48:e1:a9:5a:dc:0f:c9:b4:ab:e4:
         f0:ff:e0:7f:fb:36:89:14:cb:c5:dd:8d:27:a1:9c:87:77:44:
         50:7b:ab:a7:24:45:cc:45:e7:06:96:77:2e:ae:84:0f:af:a6:
         4b:a8:c4:67:48:a0:44:34:5e:56:51:d7:c2:6c:70:ec:7c:5a:
         06:d4:c4:90:28:1d:c6:fb:5b:ca:a8:23:fc:41:38:80:d9:63:
         64:0d:e8:39:cc:7d:53:a0:af:9e:83:9f:a1:ab:73:5b:ad:ae:
         fd:e2:1f:6d:3f:d9:6c:e5:7f:09:d5:60:00:86:af:c4:46:c5:
         0f:41:cb:9c:63:dc:d4:e2:f1:fd:1c:87:c4:9b:8f:29:b0:b4:
         0d:66:81:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----