Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a428779c-c004-417f-bd63-1d8b23515880/d0b498642c075125b50b52eb5701a78e41a075f8.roa
File:                     d0b498642c075125b50b52eb5701a78e41a075f8.roa (raw, json)
Hash identifier:          wNR1AskB8QXvTRwoZGx1ecUPnGJVKM3i9pn8jqNOxsY=
Subject key identifier:   55:4E:86:F1:A3:EF:20:17:9D:5D:6E:AA:01:9D:28:1E:24:57:91:53
Certificate issuer:       /CN=55a61a96d322f92afcbb5f8d95d08c51f95c6d5e
Certificate serial:       0C2E25
Authority key identifier: AB:F1:69:6F:2A:66:86:A7:FA:9F:C5:91:6A:7E:2B:C1:9B:B6:B3:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55a61a96d322f92afcbb5f8d95d08c51f95c6d5e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a428779c-c004-417f-bd63-1d8b23515880/d0b498642c075125b50b52eb5701a78e41a075f8.roa
Signing time:             Wed 24 Mar 2021 14:33:04 +0000
ROA not before:           Wed 24 Mar 2021 14:33:04 +0000
ROA not after:            Tue 24 Mar 2026 14:33:04 +0000
asID:                     262287
IP address blocks:        190.14.0.0/24 maxlen: 24
                          190.14.8.0/24 maxlen: 24
                          190.14.4.0/24 maxlen: 24
                          190.14.5.0/24 maxlen: 24
                          190.14.10.0/24 maxlen: 24
                          190.14.3.0/24 maxlen: 24
                          190.14.2.0/24 maxlen: 24
                          190.14.12.0/24 maxlen: 24
                          190.14.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 798245 (0xc2e25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55a61a96d322f92afcbb5f8d95d08c51f95c6d5e
        Validity
            Not Before: Mar 24 14:33:04 2021 GMT
            Not After : Mar 24 14:33:04 2026 GMT
        Subject: CN=d0b498642c075125b50b52eb5701a78e41a075f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:5c:a6:7d:5f:d1:b2:8b:73:87:7e:9e:3f:
                    50:c9:b8:93:7f:30:01:f5:c0:19:b5:eb:b8:b1:97:
                    ad:02:de:dc:87:3a:93:04:f9:aa:77:3a:ed:6d:77:
                    a9:bc:9a:e7:77:98:97:f1:ca:7f:b6:57:62:4a:5a:
                    7c:7f:54:60:2d:fd:30:4f:2e:b0:82:2f:db:41:af:
                    a4:22:5a:f7:48:09:ad:cf:b5:d8:e3:50:5e:54:13:
                    df:2c:a5:9b:ea:31:fc:53:98:24:63:2f:da:9f:02:
                    78:25:fd:28:4f:54:7f:cf:da:7b:b2:c7:5e:cb:c9:
                    ff:90:ae:16:b5:0b:bd:c8:23:82:1a:09:71:12:ab:
                    03:fb:5c:ce:59:af:67:eb:36:78:12:56:de:aa:a5:
                    2c:4b:2f:33:ad:d3:49:34:76:9e:4e:fe:05:64:34:
                    29:94:66:7c:b1:08:bd:de:9a:c6:5b:51:f1:65:14:
                    1e:78:e4:77:0b:11:cc:1e:97:a9:2b:99:02:36:8f:
                    99:61:a0:a3:ea:75:53:a7:f1:76:a3:79:78:8f:84:
                    21:b4:c1:7a:c6:96:3b:24:14:f5:77:d2:46:56:95:
                    7e:85:de:57:f3:5b:b8:0a:bb:f2:1d:bc:89:dd:3b:
                    ac:a5:aa:a8:3e:3e:4b:d5:a0:13:96:3d:7e:d0:93:
                    73:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4E:86:F1:A3:EF:20:17:9D:5D:6E:AA:01:9D:28:1E:24:57:91:53
            X509v3 Authority Key Identifier:
                keyid:AB:F1:69:6F:2A:66:86:A7:FA:9F:C5:91:6A:7E:2B:C1:9B:B6:B3:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55a61a96d322f92afcbb5f8d95d08c51f95c6d5e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a428779c-c004-417f-bd63-1d8b23515880/d0b498642c075125b50b52eb5701a78e41a075f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a428779c-c004-417f-bd63-1d8b23515880/55a61a96d322f92afcbb5f8d95d08c51f95c6d5e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.0.0/24
                  190.14.2.0-190.14.5.255
                  190.14.8.0/24
                  190.14.10.0/24
                  190.14.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         29:c0:62:51:cf:08:00:47:b4:8d:61:26:2f:1f:4d:11:17:4f:
         f7:05:32:83:d6:16:62:d8:1a:0e:47:8e:29:4d:44:49:89:29:
         44:89:11:3c:2a:3d:53:ac:93:1d:65:f8:cb:a9:6e:10:42:39:
         31:32:11:a6:77:43:38:d3:6b:18:81:1d:08:67:c8:3d:a0:5f:
         32:f2:e3:45:73:09:35:0b:f1:3b:08:f0:57:23:a8:ea:41:18:
         d9:54:d1:82:38:c9:53:e1:c9:3e:fd:15:f2:75:17:2a:13:3e:
         79:ab:db:fe:59:cd:0a:75:3c:38:42:17:94:72:1a:e4:23:5e:
         f2:bc:b8:63:36:02:7f:e3:6f:f1:60:f7:d2:33:48:12:4f:17:
         5b:b8:d9:9d:ee:3a:8a:40:c6:74:f6:b8:85:3a:96:7b:e7:a0:
         27:06:3f:b8:7a:1e:01:62:de:37:81:0c:55:dd:bc:52:39:bb:
         23:bf:06:03:a6:c6:37:36:28:08:9c:e9:05:dc:f9:1e:96:f0:
         c3:0d:6f:db:cf:7e:0d:44:6f:5f:60:31:39:6a:37:1c:a9:ca:
         8e:d7:84:00:10:15:e1:ed:8d:45:c3:e1:d4:09:02:5f:02:0c:
         2c:53:22:9c:54:aa:32:1a:f7:14:97:b2:f4:e2:85:07:e6:28:
         5b:e9:ad:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----