Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9883d7e7-ae0a-4ddc-96a4-c5f99257be6a/eb2ce4268013c4e22a19da0a044c483e553593da.roa
File:                     eb2ce4268013c4e22a19da0a044c483e553593da.roa (raw, json)
Hash identifier:          lvvcuXoZfhUvvhtIdnXAAtXBJm0EUMaMVKaKcmHRIxc=
Subject key identifier:   12:1C:E1:53:88:B9:44:4B:23:5A:2F:95:73:2A:24:45:36:18:70:00
Certificate issuer:       /CN=b16b4a7db6d59ae53a0836c17b5fcb199b3ed81c
Certificate serial:       0B7499
Authority key identifier: 0E:0F:79:57:EF:C4:A3:4F:12:A4:3E:6E:99:62:72:9D:1D:B2:55:3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b16b4a7db6d59ae53a0836c17b5fcb199b3ed81c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9883d7e7-ae0a-4ddc-96a4-c5f99257be6a/eb2ce4268013c4e22a19da0a044c483e553593da.roa
Signing time:             Wed 24 Mar 2021 14:47:25 +0000
ROA not before:           Wed 24 Mar 2021 14:47:25 +0000
ROA not after:            Tue 24 Mar 2026 14:47:25 +0000
asID:                     8053
IP address blocks:        168.90.92.0/22 maxlen: 22
                          2803:d540::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 750745 (0xb7499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b16b4a7db6d59ae53a0836c17b5fcb199b3ed81c
        Validity
            Not Before: Mar 24 14:47:25 2021 GMT
            Not After : Mar 24 14:47:25 2026 GMT
        Subject: CN=eb2ce4268013c4e22a19da0a044c483e553593da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:71:fc:b1:01:c7:80:ed:c6:fc:df:5a:12:86:
                    41:af:21:b1:55:05:f2:c2:e7:12:d8:d6:45:21:9f:
                    d5:df:ee:69:ba:54:bf:80:ca:bf:14:c7:11:aa:b5:
                    ad:5d:6c:6c:52:14:52:90:ca:61:60:30:ba:76:94:
                    69:df:4f:0b:25:72:01:6d:d8:1a:e8:96:fa:3e:15:
                    1a:7e:89:ca:f7:63:6c:d5:a2:14:a7:81:d3:ef:87:
                    03:67:56:af:b4:58:88:f0:3a:fd:09:4e:e2:9d:da:
                    a4:f1:88:db:e7:14:c2:8f:d4:48:5e:4e:2d:f2:b7:
                    67:55:23:3d:ff:20:84:f7:94:66:af:d3:b2:54:3b:
                    a8:dd:03:3b:ff:1f:5e:6d:aa:70:04:6d:c4:77:07:
                    b1:25:c0:48:47:a4:ed:fc:42:30:f9:ba:0c:98:80:
                    6b:e5:ff:58:da:4d:24:5d:b7:bf:14:61:9e:d4:f8:
                    5e:a9:e2:8c:66:90:94:2d:51:a5:25:ca:38:8d:4b:
                    af:cc:e2:32:71:55:ca:d0:bc:19:56:2c:1e:e8:72:
                    07:74:3c:5b:a7:73:e3:d4:aa:a3:7f:f3:53:a7:f0:
                    42:8c:6e:10:35:61:d8:15:9e:9a:24:98:84:ea:1e:
                    5b:69:9d:09:91:0f:df:a4:cd:85:c3:c2:f8:d0:99:
                    83:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:1C:E1:53:88:B9:44:4B:23:5A:2F:95:73:2A:24:45:36:18:70:00
            X509v3 Authority Key Identifier:
                keyid:0E:0F:79:57:EF:C4:A3:4F:12:A4:3E:6E:99:62:72:9D:1D:B2:55:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b16b4a7db6d59ae53a0836c17b5fcb199b3ed81c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9883d7e7-ae0a-4ddc-96a4-c5f99257be6a/eb2ce4268013c4e22a19da0a044c483e553593da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9883d7e7-ae0a-4ddc-96a4-c5f99257be6a/b16b4a7db6d59ae53a0836c17b5fcb199b3ed81c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.92.0/22
                IPv6:
                  2803:d540::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:1a:7e:f8:14:8e:b7:c7:81:49:e7:f4:f2:f0:65:b1:e7:33:
         e6:4f:00:cf:db:83:01:eb:99:02:5b:a3:81:e5:64:ab:4d:9f:
         ae:86:c8:cf:e5:84:27:1e:a5:85:69:46:19:54:78:6d:cc:80:
         0a:08:13:44:f9:aa:77:04:8e:cf:ae:d8:1b:7c:68:2a:91:26:
         d3:50:7a:7e:48:28:c3:9f:9d:44:af:fc:87:52:41:26:53:ba:
         5e:74:09:92:c1:35:17:c9:6b:87:8a:5d:bf:20:2b:80:7b:39:
         cd:86:d4:b2:75:68:d8:a6:7c:91:b4:3b:fa:79:b4:3e:a2:d0:
         f6:20:4a:82:77:85:bf:23:d6:50:81:a6:26:a7:54:f6:5f:46:
         9c:49:69:01:ce:ba:69:07:56:97:ef:02:c8:87:79:a2:07:80:
         93:fb:b0:13:27:09:36:93:06:dc:bd:79:e4:e2:6d:22:e0:80:
         34:cf:51:e5:fc:c7:da:9f:73:c8:b5:4c:6b:7a:78:1e:de:fc:
         c8:3b:e8:4e:06:39:3d:1a:c7:d8:6b:39:85:94:6d:05:80:da:
         e6:85:b3:37:48:a9:e6:a2:77:c8:5d:02:2a:51:93:7a:86:24:
         43:c4:bd:08:66:37:08:80:e9:78:b2:d7:f7:f4:f9:08:49:23:
         97:8a:54:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----