Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c457f7a-7c51-49e7-9598-8710f1b5e749/f09ea539795c155531d156b0290e82028844eb70.roa
File:                     f09ea539795c155531d156b0290e82028844eb70.roa (raw, json)
Hash identifier:          iHWrWMaikF/WkDt1biocOcCvmc4n7OXfVSBWFC36brs=
Subject key identifier:   7D:29:C3:C4:AB:F5:71:36:E5:36:E5:55:04:CE:4B:84:BC:35:E6:2D
Certificate issuer:       /CN=dba2d4475bfb2b85f06dce9699918d5f9c2d2510
Certificate serial:       0C460B
Authority key identifier: F1:71:B2:BB:34:ED:0B:65:29:C4:30:65:1F:09:46:4D:2C:6D:60:30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c457f7a-7c51-49e7-9598-8710f1b5e749/f09ea539795c155531d156b0290e82028844eb70.roa
Signing time:             Wed 10 Nov 2021 18:04:14 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     14080
IP address blocks:        190.83.78.0/23 maxlen: 24
                          2801:11a::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804363 (0xc460b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba2d4475bfb2b85f06dce9699918d5f9c2d2510
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=f09ea539795c155531d156b0290e82028844eb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8f:98:93:9b:ac:a1:ab:47:ad:16:1e:91:a9:
                    f4:c1:ba:df:a5:cc:5a:4d:6e:2c:89:94:ce:24:2b:
                    2b:6e:f5:a5:7e:35:9a:09:50:65:72:2d:be:e2:ae:
                    da:69:83:55:7b:c1:17:0c:da:2e:4b:e1:60:33:f5:
                    3b:54:1b:a9:30:ee:2a:06:e1:40:24:28:15:9a:f4:
                    fb:7d:02:67:5e:6a:ba:ff:6d:ba:04:2b:da:e0:46:
                    7d:6d:80:3d:79:17:bf:eb:d3:73:52:0f:8f:b7:2a:
                    9e:c5:17:5d:31:69:34:23:1c:69:b8:79:9f:d8:31:
                    93:7f:cb:a0:1e:a2:3b:34:1d:f8:bf:09:7c:1f:57:
                    83:0c:31:4a:6e:33:47:f4:2a:6d:0d:b8:41:1b:78:
                    90:71:b2:75:12:65:f3:b0:08:5d:59:4f:c4:69:ba:
                    f7:67:54:7c:f5:c3:4b:90:34:dd:ab:5f:a1:ca:9b:
                    54:40:e0:3f:4d:17:f8:d0:64:93:ac:29:21:5d:e5:
                    a4:cf:fc:53:d7:40:09:42:f4:e9:c0:96:99:6d:83:
                    07:49:c2:f8:06:6a:9e:9f:1e:05:63:15:cb:aa:b5:
                    31:3e:05:b0:dd:ec:dc:37:17:1c:b7:f7:0a:9d:42:
                    9c:be:6f:d6:26:67:ad:15:66:7d:f2:1e:c3:a8:d9:
                    13:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:29:C3:C4:AB:F5:71:36:E5:36:E5:55:04:CE:4B:84:BC:35:E6:2D
            X509v3 Authority Key Identifier:
                keyid:F1:71:B2:BB:34:ED:0B:65:29:C4:30:65:1F:09:46:4D:2C:6D:60:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c457f7a-7c51-49e7-9598-8710f1b5e749/f09ea539795c155531d156b0290e82028844eb70.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c457f7a-7c51-49e7-9598-8710f1b5e749/dba2d4475bfb2b85f06dce9699918d5f9c2d2510.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.78.0/23
                IPv6:
                  2801:11a::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:37:6e:61:34:21:0d:d9:66:b9:2f:92:df:94:ca:2d:de:01:
         18:bb:50:6f:e0:ab:30:16:d6:12:61:d4:83:0c:5a:04:b8:48:
         77:fb:d1:54:dd:fe:1e:e8:19:74:af:32:16:0a:46:b3:29:0a:
         18:46:c0:4c:de:32:f4:8f:72:77:2c:c3:d3:77:05:e3:20:ee:
         28:e1:3d:57:12:82:8a:e2:8a:ba:fc:9e:d5:f1:7a:99:00:ec:
         98:47:3a:85:ab:86:6d:ed:84:e0:34:a3:10:2e:e3:34:6e:8d:
         db:dc:63:e1:1e:e0:7f:34:80:5b:70:b4:85:9c:38:be:af:13:
         02:a6:3a:d7:10:87:c7:a5:82:6a:fe:43:9a:9c:ac:51:10:3f:
         5b:92:52:ea:86:9a:2f:c5:38:60:94:eb:05:44:3a:c8:92:dd:
         9d:30:8c:7f:e3:22:d7:73:a4:d3:15:b4:94:a1:75:f4:4e:c8:
         2f:53:f2:f2:cd:af:da:a8:92:92:b4:0a:4c:34:1f:e8:5a:9b:
         13:b4:50:0b:d1:2a:98:ab:d8:f4:03:c3:85:6c:ad:42:f5:1a:
         a2:92:68:97:ec:73:81:a9:cf:81:82:77:7f:8e:b8:b4:39:08:
         3f:1c:1d:39:50:6a:42:bd:67:d8:ba:ee:d1:18:97:7a:8a:da:
         d6:9c:ad:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----