Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/94bbb4e4-6d1f-4a2b-aeb9-575dfc3d6312/b1b8d73e10a76db48e4d42ab5a6a5a252e7d4f8d.roa
File:                     b1b8d73e10a76db48e4d42ab5a6a5a252e7d4f8d.roa (raw, json)
Hash identifier:          aEljC2DS/PCYOdvdCvlKyIRLARTWnhYtq1myyM68RvY=
Subject key identifier:   FD:67:90:1C:CE:80:3A:25:8E:67:8A:88:20:46:9F:11:2C:51:FD:85
Certificate issuer:       /CN=7855a1a786e5965d691a389a464c054b0876f9bf
Certificate serial:       0D377F
Authority key identifier: AA:A6:6A:B7:5A:4F:3B:01:55:02:51:00:BB:6D:48:07:7E:DD:92:A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855a1a786e5965d691a389a464c054b0876f9bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/94bbb4e4-6d1f-4a2b-aeb9-575dfc3d6312/b1b8d73e10a76db48e4d42ab5a6a5a252e7d4f8d.roa
Signing time:             Wed 24 Mar 2021 14:47:16 +0000
ROA not before:           Wed 24 Mar 2021 14:47:16 +0000
ROA not after:            Tue 24 Mar 2026 14:47:16 +0000
asID:                     52241
IP address blocks:        190.99.96.0/20 maxlen: 24
                          2803:b200::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866175 (0xd377f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7855a1a786e5965d691a389a464c054b0876f9bf
        Validity
            Not Before: Mar 24 14:47:16 2021 GMT
            Not After : Mar 24 14:47:16 2026 GMT
        Subject: CN=b1b8d73e10a76db48e4d42ab5a6a5a252e7d4f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:65:ed:32:dc:9b:84:5c:94:24:7a:0d:fa:41:
                    8c:3b:b7:25:37:e7:67:3b:d1:af:6f:17:d4:cc:c3:
                    71:56:ca:17:3c:6b:98:e4:84:c1:bd:bd:b0:2e:98:
                    1e:e2:ac:4a:20:b6:86:ac:a2:cc:f5:91:09:2e:50:
                    99:55:e3:b9:49:0a:fa:a8:59:2e:b1:5d:d0:36:51:
                    97:8f:dd:13:fc:0b:8f:bd:2e:6e:ae:7e:a5:ae:8c:
                    46:91:83:0a:a9:f1:99:32:51:3c:8e:ee:0b:46:78:
                    92:4c:62:44:f2:b2:46:95:07:9e:b5:44:97:b7:77:
                    95:d6:d0:08:d3:68:e1:88:27:58:26:05:b1:66:20:
                    c8:fc:fc:1e:76:16:3d:05:36:6b:d9:03:d8:b1:19:
                    e4:c5:5d:87:f5:cb:de:f3:76:72:76:92:38:6f:3f:
                    0f:4b:c2:e2:a9:2d:cb:a1:4e:8c:03:33:63:77:4d:
                    45:7a:34:b3:dd:a2:65:e8:12:05:34:fb:2b:06:0b:
                    4a:69:87:71:2a:ee:d0:2c:9b:bb:e6:93:6e:ea:07:
                    35:8d:a5:ce:5a:88:97:2d:d7:59:ef:93:fd:7a:e8:
                    70:fe:6a:96:dc:55:52:ed:a8:81:24:c4:b1:97:dd:
                    85:20:6f:f0:6b:f4:30:84:cd:08:a5:fd:85:7c:ea:
                    4c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:67:90:1C:CE:80:3A:25:8E:67:8A:88:20:46:9F:11:2C:51:FD:85
            X509v3 Authority Key Identifier:
                keyid:AA:A6:6A:B7:5A:4F:3B:01:55:02:51:00:BB:6D:48:07:7E:DD:92:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855a1a786e5965d691a389a464c054b0876f9bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/94bbb4e4-6d1f-4a2b-aeb9-575dfc3d6312/b1b8d73e10a76db48e4d42ab5a6a5a252e7d4f8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/94bbb4e4-6d1f-4a2b-aeb9-575dfc3d6312/7855a1a786e5965d691a389a464c054b0876f9bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.96.0/20
                IPv6:
                  2803:b200::/32

    Signature Algorithm: sha256WithRSAEncryption
         6c:da:da:0b:6b:82:52:ec:6d:eb:7d:7f:27:b3:07:64:d2:06:
         4f:3a:d6:2e:b1:3a:11:c8:81:c5:e4:c6:6a:20:f7:98:85:4f:
         d4:27:95:ed:c8:0b:51:96:ef:c4:ed:1e:50:5e:c8:40:68:3a:
         bd:2a:a9:43:79:27:14:76:35:bc:73:2e:2e:70:97:04:28:3b:
         55:23:1e:5e:a7:84:63:15:b6:e9:6a:85:c7:ee:5e:6d:5f:61:
         5e:4b:48:e0:09:be:88:bc:5d:64:10:43:0d:f7:12:d1:8b:39:
         ad:6b:95:d4:3b:4f:c3:eb:be:ae:86:a2:ec:b3:3f:11:c7:56:
         12:c7:3d:4d:93:b3:33:46:45:0a:bb:f3:1b:a8:0d:d0:90:11:
         1f:96:b4:e1:d2:2c:58:47:58:ad:d3:92:d4:2d:d9:eb:d7:bf:
         39:be:7e:25:f8:e2:a9:63:c7:27:9d:c4:29:fe:54:f7:bb:9c:
         01:b8:1e:a9:58:ef:d7:e6:e4:50:79:47:d6:66:95:8e:ae:83:
         d1:bb:2c:50:f3:3d:59:f1:84:73:da:75:b6:bf:40:f4:f1:01:
         6c:7a:db:df:e4:38:26:e2:26:fb:fb:4e:97:98:78:a7:06:7f:
         3b:1e:f9:c0:b3:25:0c:07:6c:aa:33:13:d8:9f:ab:76:d0:04:
         44:c6:5d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----