Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/743eaa256b23885cf5c58595c4b89dc301df714f.roa
File:                     743eaa256b23885cf5c58595c4b89dc301df714f.roa (raw, json)
Hash identifier:          ZGMxW8ELIdE5Gqno/eDw8/lVZdRBB0NKwu++u09IhGo=
Subject key identifier:   23:4B:09:07:B7:48:97:C8:D7:A8:C9:B2:40:E3:0A:1F:EB:F1:F2:11
Certificate issuer:       /CN=453ebe59acb9a5bd47a22d24fb3018768bbf22c9
Certificate serial:       0CEB2D
Authority key identifier: 30:D0:48:B6:AF:81:CE:29:A5:D8:2E:90:DD:69:ED:9B:82:99:33:86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/453ebe59acb9a5bd47a22d24fb3018768bbf22c9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/743eaa256b23885cf5c58595c4b89dc301df714f.roa
Signing time:             Wed 24 Mar 2021 14:37:34 +0000
ROA not before:           Wed 24 Mar 2021 14:37:33 +0000
ROA not after:            Tue 24 Mar 2026 14:37:33 +0000
asID:                     203335
IP address blocks:        190.0.228.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 846637 (0xceb2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=453ebe59acb9a5bd47a22d24fb3018768bbf22c9
        Validity
            Not Before: Mar 24 14:37:33 2021 GMT
            Not After : Mar 24 14:37:33 2026 GMT
        Subject: CN=743eaa256b23885cf5c58595c4b89dc301df714f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:18:76:d6:2b:22:68:69:46:54:c2:4e:72:49:
                    48:65:f1:f8:07:cc:bd:a7:f4:f5:bb:07:32:c5:b9:
                    6f:94:f1:20:d2:d2:11:7f:5f:1e:27:86:e1:69:0d:
                    17:e0:c3:01:06:29:04:27:55:80:41:3f:a0:32:e8:
                    f8:70:e2:70:f7:16:e6:b9:67:b8:be:90:04:5a:27:
                    d3:ff:fc:e3:d5:6e:19:26:f8:e0:95:bc:f3:b7:68:
                    11:11:f4:1f:f8:9e:52:28:76:24:82:95:04:24:b0:
                    1d:d3:00:f7:30:73:39:27:2f:f0:ed:19:0a:c9:eb:
                    71:d9:c8:e4:75:de:42:ec:6c:57:33:57:cc:cd:d4:
                    71:ff:57:1c:c0:b6:a7:fd:a6:33:98:3e:fd:5b:8b:
                    53:33:70:ff:76:c7:26:f7:32:f1:0a:53:11:c8:bf:
                    c8:9c:02:66:4d:f1:89:db:66:c4:4a:22:04:bf:b3:
                    e9:cb:09:af:01:c0:45:7f:62:9f:26:d7:50:94:2d:
                    cc:d1:0b:86:d0:5b:69:d7:29:0e:5b:3f:76:2e:9c:
                    dd:0c:1d:f3:ea:9d:fd:b8:45:2b:88:da:3e:44:4f:
                    2d:a0:cf:8a:12:12:ba:e1:c7:f8:04:94:0f:69:6e:
                    8c:e6:c6:13:b2:77:66:30:44:03:47:11:78:4b:01:
                    f1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:4B:09:07:B7:48:97:C8:D7:A8:C9:B2:40:E3:0A:1F:EB:F1:F2:11
            X509v3 Authority Key Identifier:
                keyid:30:D0:48:B6:AF:81:CE:29:A5:D8:2E:90:DD:69:ED:9B:82:99:33:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/453ebe59acb9a5bd47a22d24fb3018768bbf22c9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/743eaa256b23885cf5c58595c4b89dc301df714f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/736b13c7-1e3a-4e7e-8c4c-8ef15eebb9f2/453ebe59acb9a5bd47a22d24fb3018768bbf22c9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.0.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:3f:90:8d:3c:2f:12:75:4f:65:93:b7:be:77:b5:6a:ef:f1:
         29:e9:7e:67:53:c9:66:84:0d:9c:80:4e:98:d0:4d:bc:5f:7c:
         7a:5e:0a:7b:9e:c0:f0:00:21:9e:8f:03:e3:36:51:77:0a:1a:
         21:6e:9f:55:5d:be:a2:5f:2e:83:2f:e2:3b:fe:41:f0:55:10:
         cb:e5:ef:4a:b6:f0:56:18:e2:4f:7e:f6:66:1a:4f:26:74:5c:
         39:5c:05:bf:b5:39:5b:2a:c7:f9:c0:f1:b1:0b:ea:6a:82:51:
         2c:36:9b:d4:49:87:11:0e:ee:39:6b:9e:a7:c0:1f:4b:18:4c:
         2c:c6:ef:8a:0c:b1:2b:0a:68:c3:f9:a2:d3:ef:90:74:62:23:
         09:5c:ab:8e:83:42:b2:48:68:32:55:4a:65:ee:f6:14:30:0a:
         28:22:02:47:c6:31:96:ec:9c:e0:1e:23:5f:3c:35:78:03:15:
         f3:9c:38:5d:1c:b8:ca:91:96:83:de:9c:e3:ae:3c:b4:b5:83:
         c5:1c:55:84:ea:9b:47:db:ea:7a:73:4f:05:73:b5:21:ed:b2:
         fc:55:69:df:e3:4e:40:f4:6d:3e:ae:e6:07:4d:40:98:91:a0:
         35:49:05:8a:d8:e4:e9:79:8e:d8:82:09:7b:18:de:69:13:ae:
         d6:11:9e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----