Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/628564c3825ef70511ad70a7040da39542b33586.roa
File:                     628564c3825ef70511ad70a7040da39542b33586.roa (raw, json)
Hash identifier:          OFGw4dhhOeFz11oZJpvnlm+34wDL6Yx5PZC/e9mb1qk=
Subject key identifier:   AE:02:55:DF:B3:BC:EC:68:32:F6:43:44:19:59:59:D1:D9:E1:AF:B4
Certificate issuer:       /CN=ba813dbb0a3aeaa7f650c31656aa4e97e4295496
Certificate serial:       04A6AD
Authority key identifier: 38:B9:B7:EB:0E:96:FC:96:21:A8:9C:71:29:F1:D6:95:5B:67:3B:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/628564c3825ef70511ad70a7040da39542b33586.roa
Signing time:             Wed 24 Mar 2021 14:32:39 +0000
ROA not before:           Wed 24 Mar 2021 14:32:39 +0000
ROA not after:            Tue 24 Mar 2026 14:32:39 +0000
asID:                     27883
IP address blocks:        190.114.192.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 304813 (0x4a6ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba813dbb0a3aeaa7f650c31656aa4e97e4295496
        Validity
            Not Before: Mar 24 14:32:39 2021 GMT
            Not After : Mar 24 14:32:39 2026 GMT
        Subject: CN=628564c3825ef70511ad70a7040da39542b33586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:9b:f6:78:13:92:07:e5:6f:eb:ee:79:9d:1c:
                    e4:c2:32:5c:52:05:11:3d:fe:e2:bd:01:f9:cb:d0:
                    04:dc:b4:6c:7e:75:a9:69:8a:ff:07:c0:d8:95:c7:
                    1c:21:69:d2:29:4b:23:5e:46:6a:2f:87:af:db:ff:
                    bc:24:4b:b6:51:54:72:3a:56:a7:db:7c:bf:bc:a0:
                    5b:11:12:e5:f3:71:57:33:84:ba:17:52:e0:8e:e3:
                    fb:65:79:d2:50:05:af:1c:15:7d:bd:47:7c:8b:8c:
                    a5:fd:bf:bb:09:b8:db:b5:bf:58:09:18:e9:71:06:
                    a1:61:97:57:2b:4d:44:10:95:a8:60:c7:54:d3:ed:
                    a3:0e:c5:02:52:4f:fe:86:a7:79:1f:91:42:ae:e9:
                    11:c5:a0:fb:9e:4a:9f:dc:c1:32:62:9f:23:41:f4:
                    ca:06:69:07:a0:fc:9e:a5:87:64:69:a2:7d:a3:3b:
                    08:08:93:5c:6c:93:09:32:b4:27:fb:09:97:81:71:
                    ff:2d:5f:fc:79:46:56:69:49:ef:74:f5:0a:69:ee:
                    3a:23:80:9b:55:5f:69:09:a3:82:f4:32:31:f3:4a:
                    ef:94:d8:30:69:cc:68:2a:c6:3c:d1:08:31:8b:f8:
                    ba:e8:3e:6b:21:38:45:e4:48:b3:ab:04:31:f9:91:
                    a0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:02:55:DF:B3:BC:EC:68:32:F6:43:44:19:59:59:D1:D9:E1:AF:B4
            X509v3 Authority Key Identifier:
                keyid:38:B9:B7:EB:0E:96:FC:96:21:A8:9C:71:29:F1:D6:95:5B:67:3B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/628564c3825ef70511ad70a7040da39542b33586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:31:1e:a1:09:67:7c:ea:ba:d4:5b:54:f0:a8:39:e7:9d:29:
         ae:29:17:c2:c6:51:8c:a1:62:7b:eb:68:b0:0e:52:12:71:8d:
         a3:30:47:81:d4:19:eb:87:d0:b8:b5:9d:4d:7a:66:30:e5:b9:
         17:ed:2d:3e:fa:b8:b3:37:b2:20:f2:cf:c9:db:dc:53:d5:e3:
         8e:11:51:30:15:83:7a:2f:f9:1c:2a:9a:da:1c:cd:22:a4:46:
         d4:3d:dc:89:4f:64:1a:b6:16:5d:11:41:35:9c:91:6f:e8:2e:
         4c:7f:81:bc:f8:32:6a:27:e4:d4:d9:48:e0:5d:14:ad:ba:4a:
         f9:e4:f6:76:63:13:27:b5:51:21:57:49:08:a1:20:08:b7:5b:
         98:80:03:af:32:53:8c:8d:c6:94:f0:6d:74:3d:32:30:b6:93:
         27:b7:c1:8f:30:73:7d:65:f3:5b:2b:2e:b2:30:a2:4f:7e:0b:
         92:db:03:e1:33:87:33:36:b6:2e:b3:d0:6a:56:4c:eb:ef:6d:
         2a:ab:cb:0d:c8:3f:74:64:29:4c:5e:cb:65:2a:26:e5:74:5c:
         17:b3:6d:b9:0e:a0:a2:ef:55:87:71:33:5f:78:da:37:f6:7b:
         b4:cb:26:7d:fe:1a:7f:51:24:d4:fc:db:e0:73:21:92:9f:8f:
         d9:3a:d2:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----