Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/78619d44f35b61f7a296e238c0c34c8200e03110.roa
File:                     78619d44f35b61f7a296e238c0c34c8200e03110.roa (raw, json)
Hash identifier:          vDRtEr/GAZ24Zjd/1xB4y2b9mgPMmHAKEMljyQnDrW0=
Subject key identifier:   CE:2A:D1:DA:F3:20:3C:5C:31:67:9A:78:70:B2:7A:91:D6:E1:01:BF
Certificate issuer:       /CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Certificate serial:       0D90A1
Authority key identifier: 0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/78619d44f35b61f7a296e238c0c34c8200e03110.roa
Signing time:             Wed 24 Mar 2021 14:33:47 +0000
ROA not before:           Wed 24 Mar 2021 14:33:47 +0000
ROA not after:            Tue 24 Mar 2026 14:33:47 +0000
asID:                     52280
IP address blocks:        190.211.160.0/20 maxlen: 24
                          2800:670::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888993 (0xd90a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44abde35adbcf04fb85f8b032b43e458648b74b4
        Validity
            Not Before: Mar 24 14:33:47 2021 GMT
            Not After : Mar 24 14:33:47 2026 GMT
        Subject: CN=78619d44f35b61f7a296e238c0c34c8200e03110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b4:ad:4b:81:4f:49:59:6c:f1:a9:aa:b6:70:
                    f3:98:3b:bd:77:65:92:48:a8:4a:ba:55:f6:45:07:
                    88:97:d5:82:a7:aa:da:bd:b9:51:cf:8a:24:0e:59:
                    92:44:52:12:52:dd:08:e2:6f:10:5c:c9:45:b3:6a:
                    ae:3a:37:6f:91:29:72:e9:dc:85:fa:9f:e5:86:11:
                    ad:c4:1f:8a:5d:af:d2:df:1d:57:5f:21:de:47:8f:
                    6d:a4:57:ee:07:88:8e:35:bc:02:7c:2d:d6:9f:06:
                    b0:f8:fe:83:eb:7f:14:a9:86:2c:d6:d1:15:a3:4c:
                    48:50:44:ca:c9:0d:05:3c:00:2c:9d:d6:6e:2a:dd:
                    8b:64:d5:4c:54:86:cf:72:2b:4d:a6:a4:e2:d8:de:
                    4a:99:65:2e:dd:13:45:cd:b8:12:c1:0d:63:65:3f:
                    c3:b4:46:70:a6:41:38:fe:ac:7e:3e:c6:c5:1a:a4:
                    5a:35:d8:68:7b:2a:c5:06:b8:6b:fc:a5:0a:75:a1:
                    55:40:f0:5a:9a:64:9c:03:02:34:22:18:a1:a3:a0:
                    62:aa:54:72:3d:cd:dd:62:57:de:be:8a:3d:4c:27:
                    49:8e:06:f8:40:38:44:7b:b0:27:3e:ec:0c:b5:3f:
                    d3:43:31:21:2c:b1:48:78:6b:80:3a:90:9a:9d:77:
                    45:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2A:D1:DA:F3:20:3C:5C:31:67:9A:78:70:B2:7A:91:D6:E1:01:BF
            X509v3 Authority Key Identifier:
                keyid:0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/78619d44f35b61f7a296e238c0c34c8200e03110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/44abde35adbcf04fb85f8b032b43e458648b74b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.160.0/20
                IPv6:
                  2800:670::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:10:ba:b4:bf:86:6a:f4:73:7b:c5:cd:02:fa:3d:0a:22:22:
         ce:89:50:1d:57:46:0e:c7:13:7e:37:69:03:d3:c4:fe:95:0c:
         70:06:a5:36:c8:1a:2f:00:a2:35:af:a7:d6:0e:82:66:c5:b1:
         0b:7e:7b:41:cd:89:c2:49:68:0a:b2:86:78:6c:53:60:0b:95:
         34:cf:b7:a9:f7:77:6f:bb:23:e5:46:bc:15:b5:ae:14:3e:09:
         19:ad:03:9e:c8:c2:48:a8:4a:a3:7c:fd:61:65:f9:b6:d6:14:
         c9:96:41:b5:11:75:0c:ae:1d:a3:49:12:49:27:2c:b7:39:ae:
         3f:30:10:9c:5d:f7:ca:51:db:a1:23:59:a8:02:ec:0c:c7:85:
         31:ea:1b:2f:61:db:21:f4:5a:76:21:63:60:e0:0c:df:af:b2:
         ba:1a:e4:fd:af:41:3d:01:e6:f7:0e:14:d2:78:0c:e7:91:3e:
         a0:9c:33:ee:23:52:cf:94:37:46:1d:d2:28:4c:00:f0:db:92:
         db:f4:09:3c:b3:48:4e:63:0f:30:b2:9e:e6:0b:e7:f1:65:99:
         98:50:7d:be:8e:a2:16:85:09:5e:7a:a9:84:5b:52:95:5f:5d:
         a9:6e:0b:6d:16:e6:4d:5c:9d:34:11:cd:6b:a4:62:2d:3b:63:
         53:5b:64:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----