Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/793364d4-dc2e-4449-8e34-4610fa58e87f/6b8cb85a8c5b01501404bff534d88289ed011048.roa
File:                     6b8cb85a8c5b01501404bff534d88289ed011048.roa (raw, json)
Hash identifier:          hMZkwhne6XVrAm3k+BXzMdfRnzI1vOwPS0OjNroh8mA=
Subject key identifier:   F6:8B:5B:8F:DE:B2:CC:4F:A4:37:93:2F:27:53:69:AB:C3:8B:69:07
Certificate issuer:       /CN=d81e5fc116ecd393cdbf8127afbbabd5b1758ebb
Certificate serial:       0C1A5B
Authority key identifier: 10:85:A4:CD:F7:8C:98:7B:F6:A3:6F:7B:6A:13:AC:B2:E8:91:E0:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d81e5fc116ecd393cdbf8127afbbabd5b1758ebb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/793364d4-dc2e-4449-8e34-4610fa58e87f/6b8cb85a8c5b01501404bff534d88289ed011048.roa
Signing time:             Wed 24 Mar 2021 14:37:16 +0000
ROA not before:           Wed 24 Mar 2021 14:37:16 +0000
ROA not after:            Tue 24 Mar 2026 14:37:16 +0000
asID:                     13335
IP address blocks:        190.93.240.0/20 maxlen: 20
                          2803:f800::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793179 (0xc1a5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81e5fc116ecd393cdbf8127afbbabd5b1758ebb
        Validity
            Not Before: Mar 24 14:37:16 2021 GMT
            Not After : Mar 24 14:37:16 2026 GMT
        Subject: CN=6b8cb85a8c5b01501404bff534d88289ed011048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:76:30:ee:ec:fe:a2:17:f3:91:fa:91:1c:dd:
                    65:49:2e:09:e8:96:e7:e0:48:d8:1a:81:b7:7b:7e:
                    98:c8:f3:36:29:34:7f:9d:40:6f:ae:c5:c3:29:39:
                    2c:8e:6b:4a:7d:03:54:20:53:8b:06:06:64:08:2b:
                    e3:cf:5a:33:1e:34:fd:ce:8d:d3:83:4f:2b:8f:de:
                    e0:21:89:3e:1e:c5:15:2e:65:c9:44:ae:77:91:c3:
                    c7:ac:47:20:5c:4c:45:5f:51:72:fd:77:a8:82:5f:
                    32:53:dc:12:a6:2b:f4:b7:ee:53:b8:c1:64:d9:2f:
                    9d:35:86:f4:a5:94:87:c4:d1:92:88:67:fc:27:42:
                    d4:48:e2:1b:1f:94:55:fc:32:ac:7d:fd:7e:2d:3e:
                    bd:1f:9e:f3:41:5b:a4:9d:63:c0:87:71:3d:fc:38:
                    65:f1:d1:9c:47:2e:fc:ef:c7:33:23:98:a7:4f:b6:
                    69:af:15:9f:30:a4:ba:3c:25:8a:7b:06:38:96:f3:
                    83:46:2a:f8:86:d4:78:d1:2d:4e:cb:0b:aa:2c:e3:
                    67:8d:af:d5:3a:4a:25:20:01:be:f1:79:c1:27:56:
                    1b:a0:fc:b3:d1:76:70:40:aa:dc:69:38:4f:2b:ca:
                    55:a6:06:46:94:18:59:e7:67:60:86:e2:9f:80:b3:
                    46:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8B:5B:8F:DE:B2:CC:4F:A4:37:93:2F:27:53:69:AB:C3:8B:69:07
            X509v3 Authority Key Identifier:
                keyid:10:85:A4:CD:F7:8C:98:7B:F6:A3:6F:7B:6A:13:AC:B2:E8:91:E0:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d81e5fc116ecd393cdbf8127afbbabd5b1758ebb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/793364d4-dc2e-4449-8e34-4610fa58e87f/6b8cb85a8c5b01501404bff534d88289ed011048.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/793364d4-dc2e-4449-8e34-4610fa58e87f/d81e5fc116ecd393cdbf8127afbbabd5b1758ebb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.240.0/20
                IPv6:
                  2803:f800::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:93:8a:ec:54:45:f7:72:3c:5a:25:6c:af:8b:aa:44:93:fc:
         e9:0e:aa:83:0d:21:63:ca:21:c5:8b:3b:3d:c9:32:25:14:a8:
         4f:ae:99:c2:68:9e:0a:4d:b5:f9:f5:ff:29:b8:f0:a1:b3:c1:
         5c:bc:6a:79:aa:d7:ba:c8:9c:31:46:7f:d1:6a:36:b1:d4:6a:
         ee:f9:18:40:5b:d4:53:f5:c9:36:d6:9d:51:4b:c5:a6:cb:f8:
         7a:0a:28:11:a7:82:bf:c3:d9:8c:6a:11:ea:84:2a:e0:06:16:
         5f:8a:51:4a:38:27:c8:0c:3a:45:b0:90:ad:54:9f:b6:a6:af:
         aa:bd:bd:40:b9:38:cd:c6:65:cf:0e:d8:6a:45:3d:d1:77:de:
         7f:e3:f1:61:a9:a7:95:1a:ea:c8:5b:56:10:ac:b5:84:d3:ab:
         ee:ec:df:68:b5:ea:4d:01:24:52:0f:08:8e:56:96:7e:e5:db:
         db:b3:83:c8:e6:36:b6:ac:7d:08:47:7a:b7:cc:22:62:5f:5b:
         bb:de:3e:17:23:bd:d2:80:c1:82:f3:c1:e0:3a:7f:0b:a8:96:
         bc:81:5b:5a:42:6f:b5:ba:d5:a8:a5:7e:ef:48:cc:c8:9f:3d:
         0c:d2:37:f3:ac:f2:37:c2:b2:4e:37:3a:c9:7f:6b:46:5f:86:
         a1:ba:f3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----