Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/d9ac3a3fabbb417b0ba79195deb2f7d44f6a9357.roa
File:                     d9ac3a3fabbb417b0ba79195deb2f7d44f6a9357.roa (raw, json)
Hash identifier:          8J6IObIbfXzvSKMFyWilinu7j3n4L1nlQKRYsNAM+xw=
Subject key identifier:   10:D1:F9:9E:46:5C:9D:DD:B5:39:7D:0B:FD:71:A8:01:FC:8C:17:12
Certificate issuer:       /CN=c29986287f685f9081ace4b62c221822c6408fc1
Certificate serial:       0D9618
Authority key identifier: C4:4D:2B:96:0A:8F:CC:13:50:1C:C5:84:81:B1:76:47:60:F9:AA:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c29986287f685f9081ace4b62c221822c6408fc1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/d9ac3a3fabbb417b0ba79195deb2f7d44f6a9357.roa
Signing time:             Wed 24 Mar 2021 14:32:49 +0000
ROA not before:           Wed 24 Mar 2021 14:32:49 +0000
ROA not after:            Tue 24 Mar 2026 14:32:49 +0000
asID:                     263769
IP address blocks:        168.90.128.0/22 maxlen: 22
                          170.238.20.0/22 maxlen: 22
                          179.60.248.0/21 maxlen: 21
                          2803:7880::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890392 (0xd9618)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29986287f685f9081ace4b62c221822c6408fc1
        Validity
            Not Before: Mar 24 14:32:49 2021 GMT
            Not After : Mar 24 14:32:49 2026 GMT
        Subject: CN=d9ac3a3fabbb417b0ba79195deb2f7d44f6a9357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ab:06:0b:d5:92:f5:ed:c5:af:bb:ff:9e:f8:
                    10:f0:4a:ed:e1:3d:69:03:55:c0:bd:e2:cb:d5:91:
                    19:05:66:e8:d5:30:b8:c2:f3:d6:62:d1:28:72:b7:
                    61:d6:6e:aa:11:55:dc:52:43:7c:b1:43:4d:de:01:
                    b9:3c:7e:f3:47:57:5e:b3:3f:6b:c8:22:9f:ec:b4:
                    5f:e8:16:ec:9b:c5:99:00:bd:ac:1a:db:85:a4:18:
                    2a:58:f1:b9:8e:15:b1:37:9f:35:f5:b3:9a:a9:7f:
                    7d:db:be:f4:f4:2b:a6:20:a5:2d:f1:b1:00:4f:87:
                    26:84:67:8f:56:44:24:8e:87:f2:ae:82:6c:2b:f1:
                    5c:33:06:be:4e:65:b2:17:b3:15:37:a1:5e:ea:be:
                    60:4b:90:87:6e:f8:be:19:07:1c:8e:71:0c:96:1a:
                    af:09:2a:f8:14:06:c8:6f:e9:dc:b2:a9:73:5d:12:
                    e2:b8:eb:d1:33:43:9e:91:dc:bc:85:ce:a9:2b:84:
                    f6:45:3a:0f:9e:b9:f0:ac:5f:18:8b:69:21:45:10:
                    e7:4d:0f:05:96:f7:2c:04:c2:a1:dd:14:4f:8e:e4:
                    c0:e1:70:12:7c:44:a4:a4:2b:21:51:f5:da:65:3c:
                    5c:a1:11:c2:cd:fe:14:1e:76:b2:64:fc:ad:cb:13:
                    f1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D1:F9:9E:46:5C:9D:DD:B5:39:7D:0B:FD:71:A8:01:FC:8C:17:12
            X509v3 Authority Key Identifier:
                keyid:C4:4D:2B:96:0A:8F:CC:13:50:1C:C5:84:81:B1:76:47:60:F9:AA:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c29986287f685f9081ace4b62c221822c6408fc1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/d9ac3a3fabbb417b0ba79195deb2f7d44f6a9357.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c28f8a0-7607-4ee7-807a-08a8e3284d14/c29986287f685f9081ace4b62c221822c6408fc1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.128.0/22
                  170.238.20.0/22
                  179.60.248.0/21
                IPv6:
                  2803:7880::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:56:b6:b8:66:fd:99:a3:a1:be:7c:e6:2f:b8:13:35:f2:b8:
         02:df:58:67:a7:de:8a:c4:9d:13:7b:26:33:24:1c:52:e4:37:
         bd:5c:f9:5d:f2:e6:89:94:4b:6c:69:38:04:c5:06:ee:29:fa:
         b2:70:ec:3b:a6:85:52:b6:4c:12:7c:31:af:6e:fb:17:51:a3:
         2b:d8:1f:de:01:b1:b1:d8:49:d6:54:2a:3c:94:a5:8c:08:11:
         5b:0b:b9:48:ad:39:6a:5b:81:8f:a3:6e:27:f0:46:d6:33:41:
         ac:63:15:2b:f7:f1:20:95:fe:9f:31:7c:f9:b3:1f:24:6e:55:
         e1:d5:c8:37:e4:a9:39:15:5e:af:24:56:bb:aa:05:79:55:e6:
         ec:2b:4e:09:bf:5b:d4:28:4b:77:8d:f0:70:5a:24:ff:71:65:
         87:c1:5f:68:65:1f:fe:12:1d:42:92:49:b5:53:45:65:83:ad:
         43:ca:3e:df:21:0c:ea:f3:64:bc:b0:f8:32:97:2a:19:77:74:
         65:48:92:d3:3c:80:a7:45:e1:5d:97:ff:cb:19:b2:cb:bf:48:
         54:1b:77:80:1d:93:da:f0:04:bd:7e:6c:b5:66:e3:65:51:ac:
         14:a0:18:76:e4:0d:76:38:10:5d:ce:96:84:e1:13:bb:e7:9a:
         f1:3c:65:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----