Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/539b8494-f826-4178-8b76-2ffe97373ef7/3348c672e0f2f725e4800166f74b1df1105aa0ed.roa
File:                     3348c672e0f2f725e4800166f74b1df1105aa0ed.roa (raw, json)
Hash identifier:          ropTPFn92xqIwts9Z+c9b8zs8CWu3wErVPyfMLcMvn4=
Subject key identifier:   67:57:74:A0:A6:43:00:C1:79:7E:4B:76:6F:25:46:62:43:5C:DF:11
Certificate issuer:       /CN=61ea6ac6314c234138b3aad8fa2c76a5b7d47ece
Certificate serial:       0DC630
Authority key identifier: 2D:9E:C7:20:B2:BB:98:79:67:D0:DE:5D:AF:DF:DC:2E:DB:D2:DE:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61ea6ac6314c234138b3aad8fa2c76a5b7d47ece.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/539b8494-f826-4178-8b76-2ffe97373ef7/3348c672e0f2f725e4800166f74b1df1105aa0ed.roa
Signing time:             Wed 24 Mar 2021 14:38:14 +0000
ROA not before:           Wed 24 Mar 2021 14:38:14 +0000
ROA not after:            Tue 24 Mar 2026 14:38:14 +0000
asID:                     262221
IP address blocks:        190.106.112.0/21 maxlen: 24
                          2803:6400::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902704 (0xdc630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61ea6ac6314c234138b3aad8fa2c76a5b7d47ece
        Validity
            Not Before: Mar 24 14:38:14 2021 GMT
            Not After : Mar 24 14:38:14 2026 GMT
        Subject: CN=3348c672e0f2f725e4800166f74b1df1105aa0ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:23:59:52:98:53:69:82:34:fc:49:19:e0:f9:
                    87:86:b5:dc:cb:f3:a9:97:9e:c7:12:d0:ef:44:64:
                    5a:35:09:f3:5c:d7:1e:02:3c:af:3e:a4:35:83:7a:
                    e6:4a:a8:12:09:ce:3a:19:ad:a1:33:19:81:ca:e6:
                    3a:49:2c:d2:da:b6:e4:7b:0d:6b:2e:a7:a3:2a:72:
                    fe:32:da:19:68:31:2b:df:01:da:fd:f7:d4:76:2e:
                    82:f8:e2:ad:57:ca:2f:37:52:b2:4e:32:74:01:8e:
                    c0:eb:a2:b6:8f:47:ad:f4:8e:e2:b6:54:90:a0:ea:
                    f7:94:16:c9:7a:70:a6:6a:6f:3c:06:78:e1:51:95:
                    95:20:ea:ea:42:d9:d0:34:37:a6:ab:f2:46:43:95:
                    71:68:73:22:ab:38:d5:13:3c:3a:61:4b:a9:16:6c:
                    6d:b5:37:8e:69:88:9c:ab:79:59:71:ba:3d:85:ed:
                    6b:af:bc:bc:71:e3:fa:79:3a:b4:03:53:15:56:ee:
                    64:40:67:21:fe:2a:60:a4:ef:d6:0f:d9:f8:39:8d:
                    0a:9f:cf:9f:3a:53:23:bf:22:3d:7a:93:6a:98:d1:
                    8b:ba:e1:a9:f3:1a:07:fe:0b:81:59:f0:52:dd:97:
                    0a:b1:55:90:7c:c0:8c:ae:cb:6f:19:83:0f:79:14:
                    26:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:57:74:A0:A6:43:00:C1:79:7E:4B:76:6F:25:46:62:43:5C:DF:11
            X509v3 Authority Key Identifier:
                keyid:2D:9E:C7:20:B2:BB:98:79:67:D0:DE:5D:AF:DF:DC:2E:DB:D2:DE:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61ea6ac6314c234138b3aad8fa2c76a5b7d47ece.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/539b8494-f826-4178-8b76-2ffe97373ef7/3348c672e0f2f725e4800166f74b1df1105aa0ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/539b8494-f826-4178-8b76-2ffe97373ef7/61ea6ac6314c234138b3aad8fa2c76a5b7d47ece.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.112.0/21
                IPv6:
                  2803:6400::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:8d:52:2e:a6:cf:5d:36:2c:df:ac:71:c9:c8:ce:9d:70:1b:
         69:f3:ff:c3:94:99:96:63:04:49:ad:86:1f:40:ce:ff:3c:bc:
         ff:65:ce:1b:96:73:f5:8f:10:0e:fe:20:1a:fe:9d:d3:e3:35:
         59:ef:3d:5a:4b:9f:51:5d:c6:6f:8a:e3:74:fa:85:81:ef:53:
         4f:09:6a:3b:10:9a:7d:eb:f2:b3:6a:3f:68:7e:c5:d7:b0:87:
         58:0e:07:2f:8c:7b:5a:12:3b:ff:8d:2f:e9:73:ee:b7:ef:ea:
         85:21:c0:fb:4d:6c:b5:bd:d2:95:ba:00:fb:fa:c8:a7:f7:c7:
         b1:21:e2:bd:5c:18:cf:36:66:f3:98:4c:14:49:d6:b2:67:f3:
         55:98:05:6c:f1:44:58:87:71:b7:54:78:99:b1:5b:40:2d:9c:
         13:bd:22:49:80:b4:d7:22:a9:ea:c9:66:23:20:ca:27:b2:ca:
         11:35:a9:af:88:72:5a:dd:ae:61:7c:46:3f:3a:a5:88:f1:c0:
         6f:de:f7:a6:22:42:c4:03:a3:03:17:f7:e5:4b:0d:4d:3d:a9:
         05:1b:a1:10:dc:60:42:93:5f:73:88:fe:98:d8:28:e0:c0:98:
         df:b8:05:bf:a5:09:8c:a5:ba:a7:ad:5f:84:f3:8f:1f:cb:9d:
         84:28:15:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----