Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/b7730e6071e738619a7d62dbb77530d0647033e8.roa
File:                     b7730e6071e738619a7d62dbb77530d0647033e8.roa (raw, json)
Hash identifier:          eXg4YyO7rONKExYaZ7fQfXS5vw3Mo9wnsh/nhKEEpH8=
Subject key identifier:   75:21:2F:41:14:3F:5C:E8:9E:1A:9B:F6:26:D5:F9:F4:19:D3:4C:E5
Certificate issuer:       /CN=450e05696920146d80a6cffd7e47b4df43d2b64a
Certificate serial:       17C881
Authority key identifier: 14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/b7730e6071e738619a7d62dbb77530d0647033e8.roa
Signing time:             Mon 13 Jun 2022 16:27:11 +0000
ROA not before:           Mon 13 Jun 2022 03:00:00 +0000
ROA not after:            Thu 13 Jun 2024 03:00:00 +0000
asID:                     263783
IP address blocks:        190.57.0.0/22 maxlen: 24
                          190.57.4.0/23 maxlen: 24
                          190.57.6.0/24 maxlen: 24
                          190.57.8.0/21 maxlen: 24
                          190.57.21.0/24 maxlen: 24
                          190.57.23.0/24 maxlen: 24
                          190.57.24.0/24 maxlen: 24
                          190.57.80.0/20 maxlen: 24
                          190.57.96.0/21 maxlen: 24
                          190.57.104.0/22 maxlen: 24
                          190.57.113.0/24 maxlen: 24
                          190.57.114.0/24 maxlen: 24
                          190.57.120.0/22 maxlen: 24
                          2803:1000::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1558657 (0x17c881)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450e05696920146d80a6cffd7e47b4df43d2b64a
        Validity
            Not Before: Jun 13 03:00:00 2022 GMT
            Not After : Jun 13 03:00:00 2024 GMT
        Subject: CN=b7730e6071e738619a7d62dbb77530d0647033e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a6:65:f7:82:8c:79:91:33:34:dc:7f:ea:ed:
                    42:6d:3b:33:03:db:0b:2e:3f:72:74:c2:69:90:5f:
                    9c:b2:ba:0d:a9:02:c3:3c:2f:f0:8b:e8:ef:1a:43:
                    08:1a:85:b0:44:e6:41:d0:9a:4d:96:27:e7:e5:cd:
                    29:db:f1:41:9c:f9:f7:5a:fc:fb:91:c7:f2:8f:51:
                    54:9c:06:3a:dc:79:2a:aa:98:ed:80:d5:43:e7:00:
                    1c:e8:fb:aa:c1:7b:38:a1:9d:8a:fb:5a:fc:f6:82:
                    2c:98:9f:cf:71:f1:f0:7b:6c:72:d5:37:e6:26:e3:
                    77:11:d5:e5:ab:f2:e0:a8:2a:b8:0a:7d:47:59:d9:
                    d4:6a:43:12:fc:05:d0:c1:25:2e:a7:2e:0e:70:34:
                    c5:5d:14:ff:91:f9:9c:ee:6c:ff:cb:ec:5c:f6:9b:
                    1d:47:50:52:5c:1a:22:1b:f4:3a:db:89:1d:dd:98:
                    6a:7d:67:37:e2:10:7d:52:4a:73:c0:70:c5:1b:ce:
                    4b:b1:db:84:8f:a3:dc:49:a7:a5:5c:25:e4:61:9c:
                    c8:3c:84:35:49:a6:93:eb:23:4f:a2:3e:6c:30:02:
                    1b:f4:73:a4:ce:6e:01:59:c1:80:cc:ac:d5:64:7e:
                    cc:df:24:4a:f1:1b:f6:24:34:8b:8d:3d:45:87:ae:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:21:2F:41:14:3F:5C:E8:9E:1A:9B:F6:26:D5:F9:F4:19:D3:4C:E5
            X509v3 Authority Key Identifier:
                keyid:14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/b7730e6071e738619a7d62dbb77530d0647033e8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/450e05696920146d80a6cffd7e47b4df43d2b64a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.0.0-190.57.6.255
                  190.57.8.0/21
                  190.57.21.0/24
                  190.57.23.0-190.57.24.255
                  190.57.80.0-190.57.107.255
                  190.57.113.0-190.57.114.255
                  190.57.120.0/22
                IPv6:
                  2803:1000::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:57:8e:0d:39:07:95:ba:d9:40:75:1e:df:c1:90:d9:9f:69:
         42:85:ab:b0:c7:14:84:27:b7:f0:00:94:3d:5f:4c:5e:95:c4:
         e3:4f:a4:a8:81:aa:3d:cc:27:37:26:6b:d3:12:06:e3:38:e8:
         fd:02:4f:c7:51:34:17:7e:ec:80:09:c5:7a:d6:36:86:60:49:
         6b:d6:56:10:d4:e3:4c:54:d1:37:bc:19:5d:f4:08:3a:ca:df:
         e0:77:04:af:7d:ec:e0:a3:bd:f5:cd:37:00:22:5b:41:95:da:
         48:07:ee:4f:de:a6:d5:e2:a2:df:cb:50:83:6a:6b:18:1d:00:
         cc:15:ed:ff:cf:24:01:5b:82:11:52:cd:35:50:d1:2f:5c:6c:
         65:b5:81:30:81:74:6f:28:ab:a6:30:d5:44:d0:e3:be:d9:02:
         8c:b5:76:24:87:e7:10:44:75:46:0c:c3:f0:f4:03:49:50:89:
         10:bb:7b:4c:23:36:70:10:1e:9a:b6:62:98:2a:92:99:28:f1:
         e5:ef:d8:48:4c:99:f2:18:96:f4:f9:da:61:ad:c1:e7:a4:38:
         1b:ff:07:74:88:a8:46:7b:ff:b6:96:5a:ec:9c:56:ac:3f:70:
         2f:9b:a2:df:17:88:a6:7e:46:55:3c:57:ae:1c:b9:29:51:cd:
         1f:6d:be:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----