Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/afe1fd36-eb10-4477-93c8-f4cabf3513a7/3a5674d66f90722e221cdf4054d0f76049b13634.roa
File:                     3a5674d66f90722e221cdf4054d0f76049b13634.roa (raw, json)
Hash identifier:          ps8bSKxCuA/B+hVl0t/h54Dsp1SbLQ/Uy5cdVlwNy4I=
Subject key identifier:   7C:14:EE:C8:35:F6:B4:58:E9:3E:A7:5C:E1:84:0E:F4:21:42:44:B5
Certificate issuer:       /CN=c7e0e02d3531ccedcefbab8f6df1ba6e57986a13
Certificate serial:       0D66E3
Authority key identifier: 9E:FC:B8:B4:3D:50:8F:72:5E:E8:2E:A6:4B:B1:09:CE:0B:1B:0B:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7e0e02d3531ccedcefbab8f6df1ba6e57986a13.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/afe1fd36-eb10-4477-93c8-f4cabf3513a7/3a5674d66f90722e221cdf4054d0f76049b13634.roa
Signing time:             Wed 24 Mar 2021 14:30:43 +0000
ROA not before:           Wed 24 Mar 2021 14:30:43 +0000
ROA not after:            Tue 24 Mar 2026 14:30:43 +0000
asID:                     28026
IP address blocks:        190.106.96.0/20 maxlen: 24
                          2803:7e00::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878307 (0xd66e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7e0e02d3531ccedcefbab8f6df1ba6e57986a13
        Validity
            Not Before: Mar 24 14:30:43 2021 GMT
            Not After : Mar 24 14:30:43 2026 GMT
        Subject: CN=3a5674d66f90722e221cdf4054d0f76049b13634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6f:ba:88:90:1b:97:a3:bf:e2:c1:3a:af:63:
                    0e:f4:f8:d1:70:43:30:ef:34:b9:73:39:95:f4:56:
                    c6:15:d1:63:4f:ea:b0:5f:00:86:36:ac:3d:0f:ca:
                    e2:4f:bd:f5:2a:61:d5:f9:b3:09:33:67:46:11:52:
                    15:82:51:d2:83:ea:ea:80:16:69:83:8b:58:ca:da:
                    67:74:89:be:e4:5c:62:0e:c4:4c:8b:36:c4:72:b2:
                    2c:09:3b:e1:fa:0f:a8:96:0d:7d:c4:b5:de:fe:96:
                    97:56:70:ce:2f:af:9d:b2:87:76:86:88:47:da:39:
                    35:ad:d1:0f:96:3d:e0:cf:37:bd:7c:4e:7f:ca:e8:
                    23:07:1d:fb:eb:b9:54:2c:3c:69:f5:08:b1:c4:42:
                    91:d7:e4:a2:78:16:5a:b0:e3:87:62:90:b6:71:ff:
                    b8:10:cc:a9:7d:6e:0e:bd:43:9a:00:25:64:96:2c:
                    26:ea:9f:7d:71:bc:f3:b3:d7:ac:23:5f:31:b1:c5:
                    d4:23:56:cf:e9:b2:21:29:6e:bf:4e:f6:08:73:16:
                    ed:d7:7c:b2:b9:0a:bb:f9:ef:59:48:0f:36:5d:7b:
                    ad:1a:64:15:6e:ee:76:f8:a2:f1:49:fd:c8:08:36:
                    c3:f5:cc:79:33:98:d4:36:0c:38:cf:55:c6:79:0e:
                    22:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:14:EE:C8:35:F6:B4:58:E9:3E:A7:5C:E1:84:0E:F4:21:42:44:B5
            X509v3 Authority Key Identifier:
                keyid:9E:FC:B8:B4:3D:50:8F:72:5E:E8:2E:A6:4B:B1:09:CE:0B:1B:0B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7e0e02d3531ccedcefbab8f6df1ba6e57986a13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/afe1fd36-eb10-4477-93c8-f4cabf3513a7/3a5674d66f90722e221cdf4054d0f76049b13634.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/afe1fd36-eb10-4477-93c8-f4cabf3513a7/c7e0e02d3531ccedcefbab8f6df1ba6e57986a13.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.96.0/20
                IPv6:
                  2803:7e00::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:f6:c1:a3:c4:4b:27:4f:b4:a6:44:f4:40:a6:53:ed:39:66:
         f2:66:11:73:fe:a3:f8:82:65:0c:9c:3b:50:30:ca:5e:4c:91:
         e3:32:95:d8:19:39:46:66:4e:dd:d5:6a:40:89:5a:ac:95:ac:
         31:99:21:19:f5:e0:a7:8b:79:b7:ca:04:5a:ce:cd:16:1c:68:
         73:72:b8:4c:87:f7:c6:01:1f:42:b2:ee:71:e4:55:c3:f2:4c:
         ce:79:44:16:2b:1f:ff:4d:f6:7a:ec:63:2c:ba:63:ee:83:20:
         3f:2d:ad:2c:e9:4e:1a:99:7e:8d:69:4b:39:23:1e:c8:a0:cd:
         a5:99:43:28:50:fd:21:85:b1:12:e6:b1:e2:ce:09:39:a3:17:
         f9:80:92:28:16:d2:78:91:25:99:08:38:d7:b1:d2:02:33:c5:
         fc:e5:a7:d8:28:43:3f:e2:0e:b0:b7:cc:da:c6:5e:e5:4c:c5:
         db:90:51:8d:d9:0f:95:00:8c:bd:ae:76:7c:40:7f:7d:50:0d:
         ba:db:24:d6:2a:3d:58:4c:d0:56:96:c7:4e:b4:ae:5a:07:7c:
         9a:5f:8c:6b:6b:7c:f7:15:89:c7:ed:73:2f:8e:13:54:94:89:
         7d:97:e2:80:42:21:6c:d7:aa:2d:42:72:a6:98:61:f5:11:e4:
         0d:7b:82:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----