Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/924d9f2e808e81faae93be9a0c6164d7ce32648a.roa
File:                     924d9f2e808e81faae93be9a0c6164d7ce32648a.roa (raw, json)
Hash identifier:          YwZgvUfrnkzAnyZ+r93L+ICcQV3uOeoY6CdK4jAIq/o=
Subject key identifier:   11:EC:33:15:C2:F4:FE:AB:8B:6F:A3:06:31:00:B4:0F:2D:9B:0B:9D
Certificate issuer:       /CN=425b31fb70180b4aa636c240ebd5276c722716f7
Certificate serial:       0DD231
Authority key identifier: D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/924d9f2e808e81faae93be9a0c6164d7ce32648a.roa
Signing time:             Wed 24 Mar 2021 14:32:28 +0000
ROA not before:           Wed 24 Mar 2021 14:32:28 +0000
ROA not after:            Tue 24 Mar 2026 14:32:28 +0000
asID:                     262195
IP address blocks:        190.94.176.0/20 maxlen: 24
                          2800:a90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 905777 (0xdd231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425b31fb70180b4aa636c240ebd5276c722716f7
        Validity
            Not Before: Mar 24 14:32:28 2021 GMT
            Not After : Mar 24 14:32:28 2026 GMT
        Subject: CN=924d9f2e808e81faae93be9a0c6164d7ce32648a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:58:ed:2a:7a:52:fa:94:f5:8a:3d:fd:ed:5b:
                    99:46:26:79:85:94:7e:39:59:6b:72:18:c4:20:b5:
                    42:87:06:24:ba:ae:04:3f:4e:32:c6:8d:4a:77:cf:
                    98:aa:5d:17:80:7d:61:1d:80:77:6e:42:6f:56:7e:
                    f8:d8:3f:f6:ae:20:40:34:ff:3a:b0:a5:02:36:22:
                    34:c9:8c:86:b6:95:e3:f5:d8:82:f1:44:71:ee:05:
                    0d:35:84:1c:7e:1f:c8:79:c1:84:0c:32:45:a8:30:
                    b3:19:d7:f7:9f:b1:62:a1:04:92:db:2c:76:ca:ef:
                    cc:43:84:e4:46:af:33:16:4c:34:19:01:20:ee:ca:
                    58:e7:da:0c:d3:8b:f3:00:0b:e4:da:e6:ed:7c:34:
                    fb:9d:c4:e7:50:44:d7:da:4e:51:ac:a9:2e:a2:f7:
                    1b:9f:58:83:b7:90:16:7b:e9:b5:22:1e:0e:e8:3a:
                    66:7b:ad:a6:de:46:c0:79:6e:c7:61:24:34:67:8c:
                    dc:52:e9:58:d0:4e:d8:8b:68:30:76:73:c2:9f:9d:
                    a0:d0:9c:76:e0:79:7d:9c:70:2e:11:7f:cd:ec:4d:
                    d4:45:42:31:a1:d4:8b:9c:5f:cb:bf:c0:df:c9:80:
                    01:7a:db:03:0d:a3:a6:6e:a0:48:4d:06:b6:68:34:
                    08:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:EC:33:15:C2:F4:FE:AB:8B:6F:A3:06:31:00:B4:0F:2D:9B:0B:9D
            X509v3 Authority Key Identifier:
                keyid:D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/924d9f2e808e81faae93be9a0c6164d7ce32648a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/425b31fb70180b4aa636c240ebd5276c722716f7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.176.0/20
                IPv6:
                  2800:a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:85:00:9f:92:24:0d:ba:35:b7:10:0c:1d:53:08:91:00:97:
         09:a0:a6:89:23:19:2b:2b:1d:94:4c:e2:8b:f7:b4:17:05:7f:
         0e:fb:3d:39:72:bd:90:f3:7a:b7:8c:b8:73:20:15:f8:09:28:
         01:52:73:e4:41:ee:9a:5f:3e:38:15:38:e4:75:ce:70:e1:f5:
         9e:db:a3:24:a3:16:ef:c6:15:7d:1e:6a:c2:ae:12:59:bc:72:
         bf:c2:e9:6b:94:bc:10:99:13:1c:1f:df:43:c4:b2:9d:13:a5:
         47:3c:f2:99:db:e1:83:b8:3b:e6:ae:b1:96:87:02:e0:82:86:
         3e:f4:18:72:b2:f2:63:d4:5a:17:0c:a3:d9:30:f6:f4:8d:4f:
         07:4d:e0:39:13:b4:cc:37:84:73:c8:3a:2c:e4:f1:fa:3b:92:
         4a:71:03:38:fd:dd:c5:62:3f:e5:9a:cf:e5:ff:bf:e2:b1:f3:
         c0:fb:1b:ad:82:c5:e1:00:2e:56:a2:ac:06:52:57:7e:e4:68:
         2b:44:a3:97:e3:41:6c:d0:ed:c9:35:ac:d9:94:f0:50:f6:5f:
         90:12:e0:de:ce:ee:d6:af:fc:a3:d6:1a:90:aa:50:21:28:77:
         32:16:a8:45:5c:bd:b2:03:59:22:00:c8:7c:fd:c2:d1:7f:2a:
         79:5b:03:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----