Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94bbb4e4-6d1f-4a2b-aeb9-575dfc3d6312/569190d2204ca435a211e9e8a052e5adbd6689e3.roa
File:                     569190d2204ca435a211e9e8a052e5adbd6689e3.roa (raw, json)
Hash identifier:          GEQ5zivBuB4GlIDfU5lLPZRFfGIput+ikWaye7fMf20=
Subject key identifier:   9D:8B:9E:6E:D0:78:31:21:5D:FE:2C:43:F8:9C:36:0F:B6:2D:F8:C2
Certificate issuer:       /CN=7855a1a786e5965d691a389a464c054b0876f9bf
Certificate serial:       0D3869
Authority key identifier: AA:A6:6A:B7:5A:4F:3B:01:55:02:51:00:BB:6D:48:07:7E:DD:92:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855a1a786e5965d691a389a464c054b0876f9bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94bbb4e4-6d1f-4a2b-aeb9-575dfc3d6312/569190d2204ca435a211e9e8a052e5adbd6689e3.roa
Signing time:             Wed 24 Mar 2021 14:47:16 +0000
ROA not before:           Wed 24 Mar 2021 14:47:16 +0000
ROA not after:            Tue 24 Mar 2026 14:47:16 +0000
asID:                     52366
IP address blocks:        190.99.96.0/20 maxlen: 24
                          2803:b200::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866409 (0xd3869)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855a1a786e5965d691a389a464c054b0876f9bf
        Validity
            Not Before: Mar 24 14:47:16 2021 GMT
            Not After : Mar 24 14:47:16 2026 GMT
        Subject: CN=569190d2204ca435a211e9e8a052e5adbd6689e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:dc:81:d6:94:2d:59:32:2c:9a:70:cc:03:1f:
                    de:75:ab:7f:b0:95:41:74:fa:2f:38:76:c5:67:10:
                    0c:a1:58:ab:0a:9d:6a:f1:d1:64:46:f8:8b:6d:c4:
                    7d:56:7f:66:c7:87:aa:58:47:47:db:51:1c:08:92:
                    64:9f:5c:c7:c5:22:53:a1:f5:4c:67:ee:1e:fe:6d:
                    5f:51:0e:a5:07:9b:c7:1b:c9:ea:90:28:68:7a:8d:
                    58:aa:fb:6a:29:e2:a0:f2:65:fc:a5:38:7a:1e:67:
                    6b:74:49:4a:16:a8:b4:7d:99:48:7b:5e:8e:8e:52:
                    95:14:ac:6e:12:34:a4:f1:8e:76:c6:9d:40:41:bc:
                    6b:4a:4c:bd:6a:99:13:ae:af:7c:f6:37:7a:ff:ac:
                    d8:77:5c:78:60:52:ad:2c:9b:e5:49:59:c0:bd:a6:
                    54:b8:73:17:f7:0c:86:ef:9b:e0:c0:a6:ba:73:d7:
                    02:d0:62:9c:0e:18:0b:d2:d6:06:9c:5b:3b:bc:a8:
                    62:33:83:17:ab:bd:79:9c:56:69:dc:6e:93:37:ca:
                    b5:46:c6:14:ab:6b:8d:ea:ec:ec:55:90:07:8b:f7:
                    98:d5:ee:eb:1a:a6:33:6f:5d:12:be:28:a5:88:f7:
                    dc:97:34:27:e6:e3:c6:29:54:92:c7:17:b3:58:bb:
                    f5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8B:9E:6E:D0:78:31:21:5D:FE:2C:43:F8:9C:36:0F:B6:2D:F8:C2
            X509v3 Authority Key Identifier:
                keyid:AA:A6:6A:B7:5A:4F:3B:01:55:02:51:00:BB:6D:48:07:7E:DD:92:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855a1a786e5965d691a389a464c054b0876f9bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94bbb4e4-6d1f-4a2b-aeb9-575dfc3d6312/569190d2204ca435a211e9e8a052e5adbd6689e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94bbb4e4-6d1f-4a2b-aeb9-575dfc3d6312/7855a1a786e5965d691a389a464c054b0876f9bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.96.0/20
                IPv6:
                  2803:b200::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:ce:e2:d7:de:e1:d8:66:1e:6c:8e:ef:a8:4d:5a:cc:c4:3f:
         4f:6e:e2:04:06:fe:f7:44:b2:f5:bf:73:d3:b7:41:f4:d1:78:
         51:e5:8b:79:2b:1f:78:8a:96:6e:27:5c:50:a8:68:9d:6d:c6:
         bb:a1:29:c6:f6:5e:39:a1:41:c2:f6:10:69:9c:ce:5d:70:82:
         fe:bd:a7:1f:7f:4c:fb:ae:35:84:cd:57:02:30:76:d2:dc:d0:
         e6:40:fa:86:02:0e:4b:e3:87:1d:77:ca:b0:3c:a0:da:0d:71:
         3c:3a:d2:fc:3f:d5:ed:08:86:77:5e:1d:91:b7:76:c6:03:bb:
         42:7d:aa:00:95:bc:d1:77:cc:48:17:fe:be:66:73:19:4e:24:
         a0:98:28:9d:8c:8b:a8:40:22:24:ba:73:63:5d:b0:29:11:32:
         00:da:aa:be:ee:28:2c:d2:bf:93:7c:e8:f2:cd:84:6b:bd:3d:
         28:6a:6f:bd:9d:a1:3e:ca:68:09:ea:97:0f:11:16:ca:65:a4:
         d6:36:09:05:92:78:d4:88:8d:41:f6:93:3d:ba:f6:23:31:79:
         66:2e:1d:5a:cc:c9:56:b6:35:2d:5e:08:ed:ff:e5:06:09:2c:
         7c:63:aa:ca:67:50:31:35:da:70:64:72:bd:64:a2:d6:17:cb:
         b1:70:b8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----