Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/ad116660a0bf2ab534a3d56e494685f0e2d3fc72.roa
File:                     ad116660a0bf2ab534a3d56e494685f0e2d3fc72.roa (raw, json)
Hash identifier:          scfJPxv3wLReSo7ds9fMWjHbmF77JWsxcqjIKTnOXhk=
Subject key identifier:   3B:A2:A5:7F:8F:DD:15:C3:7A:78:04:35:8A:10:F7:1C:3F:09:F2:9A
Certificate issuer:       /CN=7125c7c115a99947a022aea03850efda56aab912
Certificate serial:       0D5376
Authority key identifier: C0:A3:81:14:BD:33:2A:AC:28:C8:7B:E2:99:BA:13:42:B0:53:C8:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7125c7c115a99947a022aea03850efda56aab912.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/ad116660a0bf2ab534a3d56e494685f0e2d3fc72.roa
Signing time:             Wed 24 Mar 2021 14:40:29 +0000
ROA not before:           Wed 24 Mar 2021 14:40:28 +0000
ROA not after:            Tue 24 Mar 2026 14:40:28 +0000
asID:                     22724
IP address blocks:        179.49.0.0/18 maxlen: 24
                          190.12.0.0/19 maxlen: 24
                          190.12.32.0/19 maxlen: 24
                          190.57.128.0/18 maxlen: 24
                          190.110.40.0/21 maxlen: 24
                          190.110.48.0/21 maxlen: 24
                          190.110.56.0/21 maxlen: 24
                          190.110.192.0/19 maxlen: 24
                          190.123.32.0/21 maxlen: 24
                          200.105.224.0/20 maxlen: 24
                          200.105.240.0/20 maxlen: 24
                          2800:5f0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873334 (0xd5376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7125c7c115a99947a022aea03850efda56aab912
        Validity
            Not Before: Mar 24 14:40:28 2021 GMT
            Not After : Mar 24 14:40:28 2026 GMT
        Subject: CN=ad116660a0bf2ab534a3d56e494685f0e2d3fc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:64:e4:d1:96:b4:af:49:1e:cb:42:db:38:ae:
                    d2:cf:7b:75:26:18:10:c9:31:5b:7a:62:8d:bc:f3:
                    1c:7c:b3:45:8c:10:cb:3f:95:00:98:9e:c0:90:21:
                    98:54:e0:35:f7:7d:fd:bb:6d:e4:7a:95:73:ec:85:
                    24:ca:e0:58:11:9a:04:fb:ab:77:61:94:22:86:d9:
                    36:47:00:80:39:a8:87:bf:eb:05:33:cb:64:70:f9:
                    83:31:3c:c9:6b:3e:cb:a5:c0:92:dc:8f:12:26:86:
                    12:9f:7a:8a:15:8b:ec:d5:9d:1d:bf:b1:6c:cb:84:
                    62:b3:01:53:71:81:33:17:e7:6e:23:ac:d5:ee:74:
                    08:fd:f1:d6:b4:7d:0d:c5:df:d2:e6:a3:8e:c0:55:
                    af:40:4d:dd:f9:06:59:f9:f8:ed:65:16:d7:1d:d0:
                    9e:62:c5:8e:36:b4:8f:59:16:56:7a:1a:e8:54:f3:
                    92:8b:eb:f2:8e:ff:58:98:c8:9a:6d:93:d9:f1:5f:
                    20:f6:5f:96:5d:6f:59:f8:b1:ea:ed:85:7f:97:ba:
                    20:1a:91:3a:9f:05:eb:f8:92:8f:cc:67:36:a7:66:
                    c7:5b:1e:b9:56:f8:a3:0a:f9:17:2b:5b:3b:f4:c7:
                    03:d5:62:62:f5:53:f4:39:47:3c:99:d0:a2:a8:b0:
                    6f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A2:A5:7F:8F:DD:15:C3:7A:78:04:35:8A:10:F7:1C:3F:09:F2:9A
            X509v3 Authority Key Identifier:
                keyid:C0:A3:81:14:BD:33:2A:AC:28:C8:7B:E2:99:BA:13:42:B0:53:C8:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7125c7c115a99947a022aea03850efda56aab912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/ad116660a0bf2ab534a3d56e494685f0e2d3fc72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ab049880-19f9-4713-8964-99f92c2388a7/7125c7c115a99947a022aea03850efda56aab912.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.0.0/18
                  190.12.0.0/18
                  190.57.128.0/18
                  190.110.40.0-190.110.63.255
                  190.110.192.0/19
                  190.123.32.0/21
                  200.105.224.0/19
                IPv6:
                  2800:5f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:c9:a3:05:ad:b3:b8:44:23:15:f7:d2:f1:22:f8:88:9c:96:
         a9:21:c8:23:2f:c0:a2:b4:6c:54:2c:6d:d8:7a:cb:ab:fd:95:
         fe:b7:3e:a2:b4:49:f1:77:80:b5:aa:83:1b:93:86:fb:85:32:
         68:75:ce:c5:c0:ca:42:44:88:28:a2:5d:6b:84:3c:8a:b9:4a:
         09:37:dd:75:f1:93:ad:a5:0f:d1:7d:73:b5:9f:92:bb:25:13:
         ff:3e:24:ea:a5:8f:59:ae:dd:65:e6:f1:27:98:ed:4a:87:50:
         ec:dc:84:48:a1:fd:73:8f:b7:d1:78:10:ab:91:4f:c5:10:85:
         00:e1:aa:b9:c1:66:4a:a5:a8:22:64:7f:a9:d4:9a:02:31:98:
         21:26:be:69:03:b0:14:ca:1b:b7:9b:d1:bd:4c:31:58:b7:93:
         5d:4f:ee:a5:be:24:af:74:9f:35:e6:3f:0c:c4:ea:59:88:e3:
         e9:ec:2f:19:4c:d6:ac:93:84:c5:01:05:2a:f1:70:9a:d3:8b:
         b6:8d:a6:52:5d:93:99:35:9a:71:0b:79:08:72:c2:30:6b:47:
         1b:e6:09:6e:fb:7f:e7:28:ba:41:b8:54:bd:8c:a7:6d:20:97:
         c1:5d:d1:15:99:05:ac:54:07:fd:67:75:68:b8:31:f3:fa:d6:
         fc:a1:47:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----