Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0dd30fd-4c3c-48a0-a0bc-d33926869297/1fa9c528af4ce4a381148539b6cb8707f17fdb65.roa
File:                     1fa9c528af4ce4a381148539b6cb8707f17fdb65.roa (raw, json)
Hash identifier:          TCRoIPn9DoY/rWjF1kJJrWaKKMVcs1+pReNFseUHPXQ=
Subject key identifier:   07:50:1F:41:9B:D9:35:5A:73:CA:CB:02:7E:A7:2D:92:BA:F9:3D:42
Certificate issuer:       /CN=94a8b3328633493890542c58c5e5b0246682d373
Certificate serial:       E7BD
Authority key identifier: DA:06:41:0D:CE:48:5B:64:47:71:64:66:D9:2E:38:E4:B3:BF:46:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94a8b3328633493890542c58c5e5b0246682d373.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0dd30fd-4c3c-48a0-a0bc-d33926869297/1fa9c528af4ce4a381148539b6cb8707f17fdb65.roa
Signing time:             Wed 24 Mar 2021 14:40:44 +0000
ROA not before:           Wed 24 Mar 2021 14:40:43 +0000
ROA not after:            Tue 24 Mar 2026 14:40:43 +0000
asID:                     271795
IP address blocks:        190.12.148.0/22 maxlen: 24
                          2803:a010::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59325 (0xe7bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94a8b3328633493890542c58c5e5b0246682d373
        Validity
            Not Before: Mar 24 14:40:43 2021 GMT
            Not After : Mar 24 14:40:43 2026 GMT
        Subject: CN=1fa9c528af4ce4a381148539b6cb8707f17fdb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:70:8a:7d:0f:f1:8e:08:8c:64:d1:01:07:
                    7c:f6:f8:78:5c:81:f8:bd:0d:b1:db:e3:04:72:48:
                    05:c2:64:d5:8b:53:e4:91:90:9f:dd:26:dc:21:ce:
                    46:1d:5d:b5:a0:19:47:9c:52:a7:3e:5f:c8:b8:7a:
                    e0:28:19:c9:87:64:93:a7:5f:36:8f:e0:00:47:0a:
                    da:0c:e2:76:04:5f:c2:7e:2d:60:b0:51:e3:a8:8b:
                    8a:96:4c:c2:4c:95:a7:7c:22:58:19:be:d3:e6:fd:
                    15:db:02:b9:90:d2:c8:b7:65:10:d3:25:ed:c1:67:
                    8e:a4:57:9d:59:49:bc:83:08:99:a0:7b:9a:46:27:
                    52:b6:ce:8d:8a:fa:a6:5b:2c:9a:f7:ac:09:cd:77:
                    f9:ef:9e:27:21:72:d4:76:65:d5:a5:d9:61:51:ba:
                    5c:ee:b2:e3:7b:4a:b7:87:13:7d:8e:12:35:e4:b1:
                    9d:ae:2f:f0:3a:28:83:98:cb:80:8d:c8:fc:61:b6:
                    50:05:b7:0b:70:7e:94:eb:96:ca:e9:8a:ca:7c:ee:
                    5a:90:6e:dd:7e:fb:41:71:51:08:9d:b4:42:f8:76:
                    15:53:c5:94:23:7d:b0:d8:4c:a0:93:d0:ca:f2:83:
                    d1:06:46:06:fc:46:98:96:4c:4f:9e:41:cb:ee:d4:
                    d6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:50:1F:41:9B:D9:35:5A:73:CA:CB:02:7E:A7:2D:92:BA:F9:3D:42
            X509v3 Authority Key Identifier:
                keyid:DA:06:41:0D:CE:48:5B:64:47:71:64:66:D9:2E:38:E4:B3:BF:46:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94a8b3328633493890542c58c5e5b0246682d373.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0dd30fd-4c3c-48a0-a0bc-d33926869297/1fa9c528af4ce4a381148539b6cb8707f17fdb65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0dd30fd-4c3c-48a0-a0bc-d33926869297/94a8b3328633493890542c58c5e5b0246682d373.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.148.0/22
                IPv6:
                  2803:a010::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:5b:c9:b1:47:47:f2:74:93:84:31:f8:35:b1:e8:bc:61:fc:
         92:22:6d:98:2a:65:f5:f3:bf:9c:24:76:54:45:95:d1:58:c9:
         d5:05:55:24:98:5f:d8:be:b4:77:84:87:2d:69:8c:29:f5:40:
         c1:13:5c:f2:5b:8d:6b:2b:b4:ff:f6:87:b1:58:6b:b4:26:27:
         24:34:36:35:84:e8:88:28:c4:65:05:f7:7a:ad:fd:66:0f:7f:
         7d:03:61:47:98:84:a5:90:d5:14:f7:6b:6b:f4:6f:1a:03:f0:
         87:7a:39:89:3f:1d:91:19:a8:3c:44:95:f7:23:d2:e2:7b:9e:
         b3:f4:90:0e:76:bc:73:02:50:51:10:52:9c:77:28:71:4b:d8:
         5f:2a:3f:84:29:30:53:98:20:20:e4:e0:39:1e:6f:80:5e:38:
         43:5a:cf:5b:8b:b0:c4:5d:3f:ca:0a:0c:a7:c4:8e:c1:71:ed:
         c9:d0:27:7b:dc:ae:3b:4e:39:45:7f:34:4a:a5:15:98:de:5d:
         3e:28:a3:36:a3:81:31:d3:09:fb:0f:11:e2:b0:72:83:f1:b1:
         93:ad:12:70:2d:d3:04:8f:04:d7:72:1e:88:bf:a5:e1:96:2a:
         81:4c:20:ae:67:59:bd:2e:c6:51:61:ad:3f:93:3c:94:8a:01:
         94:ff:ed:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----