Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/43c2ff6e-d287-41f6-91bb-8f1ef8a19650/cd3e12a4d1d59cd8c4a6f94132b0bb86b110e939.roa
File:                     cd3e12a4d1d59cd8c4a6f94132b0bb86b110e939.roa (raw, json)
Hash identifier:          xrmOpIi0+jueyqRWQN8QZy+LUHZhsSxZY7XXDQXKokI=
Subject key identifier:   33:42:D0:7E:D8:1C:04:0F:01:44:75:C3:5B:B3:59:02:2A:C7:7D:13
Certificate issuer:       /CN=ca57cc8674af904566db892c5c1fdd4f24039f9e
Certificate serial:       0B5131
Authority key identifier: A6:42:2A:A5:79:39:C4:3D:E8:1C:08:40:E8:C8:0F:09:7D:BB:1C:E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57cc8674af904566db892c5c1fdd4f24039f9e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/43c2ff6e-d287-41f6-91bb-8f1ef8a19650/cd3e12a4d1d59cd8c4a6f94132b0bb86b110e939.roa
Signing time:             Wed 24 Mar 2021 14:45:17 +0000
ROA not before:           Wed 24 Mar 2021 14:45:17 +0000
ROA not after:            Tue 24 Mar 2026 14:45:17 +0000
asID:                     27796
IP address blocks:        190.14.192.0/20 maxlen: 24
                          190.14.208.0/21 maxlen: 24
                          200.12.208.0/21 maxlen: 24
                          2803:2e40::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 741681 (0xb5131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca57cc8674af904566db892c5c1fdd4f24039f9e
        Validity
            Not Before: Mar 24 14:45:17 2021 GMT
            Not After : Mar 24 14:45:17 2026 GMT
        Subject: CN=cd3e12a4d1d59cd8c4a6f94132b0bb86b110e939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:49:69:8b:79:7f:9c:85:2c:38:d5:ab:84:
                    15:80:4a:21:af:87:78:fb:ee:dd:e2:a0:ae:18:27:
                    9e:fc:ad:ba:b4:2b:c1:aa:ed:aa:10:dc:d8:50:04:
                    f6:5d:a0:4a:3e:24:28:49:f8:07:9c:89:ec:df:c8:
                    6c:bc:6c:72:90:29:b9:33:4c:0e:4c:d7:81:be:22:
                    e5:96:d3:d5:86:f4:87:df:9b:d7:4a:aa:00:4d:27:
                    f5:19:c2:2f:0f:7e:1a:e4:56:c9:cf:23:19:7a:e7:
                    e6:5c:fb:1c:65:f0:55:c7:c4:3c:df:0a:7b:48:67:
                    b5:b7:55:23:20:a4:6a:77:45:ab:15:06:51:02:5d:
                    db:3e:74:b7:9a:f9:95:ac:78:ff:db:a9:0f:b7:bb:
                    9d:fc:c5:37:ac:94:de:2f:2b:f1:21:60:47:7c:49:
                    56:a2:cc:93:40:dc:6e:97:74:0a:21:c3:d8:76:8a:
                    85:c1:0c:39:4c:13:b5:b0:0d:1c:86:43:8d:db:7e:
                    f8:28:6b:5e:e7:60:c9:21:89:d5:40:6c:19:a6:13:
                    e3:55:ba:5e:d2:13:28:01:7c:0f:a4:97:14:02:0b:
                    42:4f:8d:59:27:25:d4:78:bc:3d:3c:49:c1:10:a9:
                    ba:55:d5:e3:4c:d4:ac:39:fe:2a:98:b6:17:f8:8b:
                    e3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:42:D0:7E:D8:1C:04:0F:01:44:75:C3:5B:B3:59:02:2A:C7:7D:13
            X509v3 Authority Key Identifier:
                keyid:A6:42:2A:A5:79:39:C4:3D:E8:1C:08:40:E8:C8:0F:09:7D:BB:1C:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57cc8674af904566db892c5c1fdd4f24039f9e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/43c2ff6e-d287-41f6-91bb-8f1ef8a19650/cd3e12a4d1d59cd8c4a6f94132b0bb86b110e939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/43c2ff6e-d287-41f6-91bb-8f1ef8a19650/ca57cc8674af904566db892c5c1fdd4f24039f9e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.192.0-190.14.215.255
                  200.12.208.0/21
                IPv6:
                  2803:2e40::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:87:35:2d:eb:0b:74:36:35:c1:20:16:ea:77:e3:f6:a3:11:
         aa:b5:f2:61:9d:bb:4c:1c:f6:0d:3f:44:72:2f:b4:48:68:a1:
         4e:c9:4b:ed:68:07:bf:1c:7e:62:da:aa:b7:16:61:71:e7:1d:
         54:9c:4b:ed:a8:22:f3:75:9b:b6:4a:a7:c9:a9:e7:8b:e8:15:
         94:4a:bf:37:6a:27:0c:8a:d1:8d:8e:c9:2d:04:3d:fe:a5:2a:
         9c:22:69:cb:28:be:37:ce:db:68:ce:11:25:93:55:d8:64:77:
         c0:e3:0e:28:b0:9e:09:ea:c2:8e:71:73:ea:b2:30:ea:63:a6:
         b8:d0:42:7b:75:62:43:b4:ac:8e:c1:4d:dc:e5:ec:62:d6:3b:
         b7:d8:6d:5d:e9:88:36:f5:a4:1d:c3:fc:e8:79:ac:ed:eb:ff:
         eb:4e:f9:f1:6b:a3:ab:18:4e:2a:d7:63:b5:8d:c6:41:f1:82:
         74:19:2d:68:d4:78:0e:e9:70:e2:75:30:81:34:ac:5c:82:a9:
         18:e1:1e:ab:4e:7c:09:ac:ab:58:74:1f:82:e3:8e:24:41:25:
         92:be:19:6b:7d:11:5d:02:97:c3:34:89:98:46:4b:70:82:e8:
         62:5a:fc:77:a1:16:92:bb:64:fe:ea:1b:87:e1:bf:72:0b:37:
         b3:35:56:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----