Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65284f37-a301-433c-8f9b-24af49b9a328/54683f472fadbc959961b9b884eed9f1e077613c.roa
File:                     54683f472fadbc959961b9b884eed9f1e077613c.roa (raw, json)
Hash identifier:          mWs5mPKb1x394HQ8DeolULMqAE4UX+ObEFHOppYZt9o=
Subject key identifier:   87:86:E4:D1:61:DD:AE:37:9F:8A:B1:22:6F:F3:85:7E:A1:2D:B8:5D
Certificate issuer:       /CN=100cb7f51ba3d4bc601b39d5aedc436c843b106a
Certificate serial:       0CE4D9
Authority key identifier: 5B:F3:E1:B6:AE:43:37:57:91:B7:DE:85:1D:CC:48:1B:58:C4:97:BB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/100cb7f51ba3d4bc601b39d5aedc436c843b106a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65284f37-a301-433c-8f9b-24af49b9a328/54683f472fadbc959961b9b884eed9f1e077613c.roa
Signing time:             Wed 24 Mar 2021 14:38:11 +0000
ROA not before:           Wed 24 Mar 2021 14:38:11 +0000
ROA not after:            Tue 24 Mar 2026 14:38:11 +0000
asID:                     27896
IP address blocks:        190.8.32.0/20 maxlen: 24
                          2803:a640::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 845017 (0xce4d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=100cb7f51ba3d4bc601b39d5aedc436c843b106a
        Validity
            Not Before: Mar 24 14:38:11 2021 GMT
            Not After : Mar 24 14:38:11 2026 GMT
        Subject: CN=54683f472fadbc959961b9b884eed9f1e077613c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e7:50:a5:54:41:d5:65:93:e0:c3:20:70:bc:
                    0e:ac:01:28:e0:4d:f5:aa:8f:03:86:ae:24:76:29:
                    17:28:4e:c4:33:2e:30:d1:0f:f4:e5:81:71:93:fe:
                    a6:a2:c1:3e:23:1a:19:0a:f4:c6:10:e1:d5:96:7c:
                    dd:fd:2e:2b:ca:a1:d9:50:da:bb:5c:ee:b1:53:fe:
                    51:b3:92:51:ba:82:b2:b0:f4:0a:f4:76:65:7a:3c:
                    8d:cf:23:b1:d0:dc:0f:29:f3:1f:38:a4:7c:41:db:
                    f0:93:c4:d6:43:b7:50:8b:2b:57:0c:00:08:4e:4f:
                    3d:ca:6d:3b:3f:54:cb:ab:9c:88:45:7e:59:92:b6:
                    5d:08:64:c7:f0:00:32:f0:27:ee:2b:4c:1b:ab:ea:
                    87:41:c2:57:56:7d:b4:36:9b:13:f9:ff:a3:87:6b:
                    0e:56:86:aa:21:22:80:8d:7c:17:e7:04:e9:84:4b:
                    b6:23:5a:a7:b1:e8:5d:c4:0e:72:a8:91:56:a2:19:
                    64:94:03:4e:63:d7:75:05:0d:d2:89:fa:ea:f4:ba:
                    a3:53:e6:3e:53:93:13:3d:11:82:26:3b:83:c9:09:
                    e7:f5:1d:7f:b9:89:9b:65:87:f1:ef:3b:6a:09:20:
                    05:1e:aa:58:d8:d7:ec:00:08:ec:50:ef:b7:60:97:
                    e9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:86:E4:D1:61:DD:AE:37:9F:8A:B1:22:6F:F3:85:7E:A1:2D:B8:5D
            X509v3 Authority Key Identifier:
                keyid:5B:F3:E1:B6:AE:43:37:57:91:B7:DE:85:1D:CC:48:1B:58:C4:97:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/100cb7f51ba3d4bc601b39d5aedc436c843b106a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65284f37-a301-433c-8f9b-24af49b9a328/54683f472fadbc959961b9b884eed9f1e077613c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65284f37-a301-433c-8f9b-24af49b9a328/100cb7f51ba3d4bc601b39d5aedc436c843b106a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.32.0/20
                IPv6:
                  2803:a640::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:93:6a:99:ca:a9:41:c3:68:f7:31:93:a8:b4:2e:65:a7:75:
         06:01:ce:cd:53:1e:a7:f7:0d:80:c2:b3:7e:e8:0c:a9:f8:34:
         91:e3:8b:b1:08:0d:c7:3d:99:69:10:4d:a3:c5:78:b0:06:4b:
         4e:9f:3e:e5:7d:00:81:b2:bd:4d:7c:30:88:8c:4f:2f:4f:e3:
         47:ff:15:7a:4d:e4:89:62:e0:5f:db:52:76:2e:c4:99:71:ec:
         64:62:2a:20:ca:b0:f0:51:1d:6a:cc:28:01:ca:28:7b:72:14:
         74:75:22:17:a4:53:6a:79:4a:db:a5:90:75:1a:2a:fe:45:10:
         05:bf:01:e4:c1:ef:4d:ac:54:d0:61:7f:c1:7a:3a:11:81:17:
         74:db:23:01:66:04:57:79:c4:0d:c0:bf:29:a2:eb:14:89:93:
         1b:4c:71:93:a8:3a:a6:ce:f6:13:4b:2f:82:f2:dd:fd:6e:8f:
         1b:6c:bc:75:68:0e:6e:e8:d8:0f:4d:d7:61:70:74:ca:99:10:
         c2:98:74:45:6c:9a:12:33:24:13:2c:f1:a2:f4:4e:88:73:e4:
         6b:99:47:94:f9:0a:88:ed:ae:b4:0e:76:d7:20:35:c8:f6:a0:
         08:cf:18:fa:f7:dd:df:8e:39:68:67:38:0f:af:68:5c:bc:dc:
         75:b0:72:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----