Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/e9b13ebd7a3b30cba6b0d699dcf2a1fc3e03d83e.roa
File:                     e9b13ebd7a3b30cba6b0d699dcf2a1fc3e03d83e.roa (raw, json)
Hash identifier:          4MJOi+VlJSu2MZZpiWS80/lFUzx2SoSf80oGPckYjrc=
Subject key identifier:   8D:F2:A9:6E:9A:60:5B:90:C2:0B:00:8F:4F:70:75:8B:A6:8A:FB:46
Certificate issuer:       /CN=62a782cb41463cc649a6c52c762bea430cdc06b2
Certificate serial:       0F07F9
Authority key identifier: B3:D6:6D:41:49:17:7C:B4:B8:98:0F:78:57:06:BB:E1:04:FD:B6:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a782cb41463cc649a6c52c762bea430cdc06b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/e9b13ebd7a3b30cba6b0d699dcf2a1fc3e03d83e.roa
Signing time:             Thu 18 Nov 2021 17:33:31 +0000
ROA not before:           Thu 18 Nov 2021 03:00:00 +0000
ROA not after:            Sat 18 Nov 2023 03:00:00 +0000
asID:                     28036
IP address blocks:        190.143.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 985081 (0xf07f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a782cb41463cc649a6c52c762bea430cdc06b2
        Validity
            Not Before: Nov 18 03:00:00 2021 GMT
            Not After : Nov 18 03:00:00 2023 GMT
        Subject: CN=e9b13ebd7a3b30cba6b0d699dcf2a1fc3e03d83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:21:35:96:4c:7a:95:40:48:f4:63:c6:69:62:
                    1a:98:a9:8c:18:40:9b:a0:18:02:8a:f4:15:08:d5:
                    06:53:64:c1:a0:46:d3:07:63:51:ab:19:a1:75:76:
                    66:e1:d3:5c:ca:d4:d5:af:6e:0c:4d:a9:4e:6e:91:
                    89:01:29:ae:25:03:5c:e3:63:c1:b1:72:79:ed:48:
                    76:b0:65:1f:ce:e6:5b:e5:8a:9f:9e:b5:9f:1c:37:
                    96:d8:59:37:b6:77:24:9b:6d:69:12:d1:73:6a:cf:
                    0f:84:c8:2a:87:30:32:53:20:6a:ce:4d:6a:7d:1e:
                    10:de:f4:f2:a8:ba:77:17:a1:ca:89:ae:75:ce:99:
                    bf:7b:75:b0:63:6f:22:b9:34:04:9e:b5:00:41:c2:
                    ba:fd:46:d5:b4:da:b5:2f:fd:a4:dc:d1:e4:25:77:
                    ce:15:7e:9c:26:64:cf:92:19:01:f9:75:10:2b:1c:
                    05:dc:3f:97:06:f8:ff:39:df:79:2e:bb:18:51:8a:
                    f2:1f:94:98:26:76:71:9c:0a:bc:db:46:57:6e:bf:
                    d6:f0:b0:a9:89:14:e7:41:8a:12:17:7c:e2:30:93:
                    a5:28:79:f6:b5:e5:46:b3:46:5f:aa:23:75:56:a9:
                    f1:09:b2:25:fc:0e:57:4b:c1:be:7a:d4:05:9b:61:
                    59:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:F2:A9:6E:9A:60:5B:90:C2:0B:00:8F:4F:70:75:8B:A6:8A:FB:46
            X509v3 Authority Key Identifier:
                keyid:B3:D6:6D:41:49:17:7C:B4:B8:98:0F:78:57:06:BB:E1:04:FD:B6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a782cb41463cc649a6c52c762bea430cdc06b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/e9b13ebd7a3b30cba6b0d699dcf2a1fc3e03d83e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/62a782cb41463cc649a6c52c762bea430cdc06b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:0f:ed:61:cd:01:45:19:cb:13:b5:66:95:a6:2e:2c:b4:0e:
         e3:90:6c:c9:e7:60:86:ad:54:03:98:85:11:e1:ca:d4:80:24:
         fd:87:0f:74:65:f4:cb:28:9e:a5:0a:db:29:b2:a8:f2:93:80:
         14:51:b0:79:5f:9b:2c:68:6f:df:9d:2f:bb:49:1a:e6:14:b1:
         01:7c:75:d9:ad:1d:6f:d9:86:6d:4d:f4:45:f6:4f:1a:95:dd:
         bb:be:75:bf:67:10:22:e4:58:a6:dc:de:dc:2b:51:62:fd:7d:
         65:14:f6:f3:89:84:c8:28:1d:d1:d3:7e:fb:6e:6b:16:a9:d4:
         64:af:ad:15:cd:ee:bc:65:55:a3:ce:98:5e:dd:ba:52:2e:cc:
         d4:08:88:b3:5d:ef:d3:40:b0:18:10:44:81:a0:aa:c0:ba:4e:
         5d:82:15:ba:03:95:85:1e:3c:bf:1d:57:88:cb:67:c7:9a:8e:
         18:d9:d6:89:a9:70:f6:30:f9:a4:08:d4:71:c1:98:4e:2f:8b:
         72:a1:0f:4c:37:df:25:fc:e7:43:0d:3d:e2:6e:6f:24:94:3b:
         76:a3:33:0e:42:94:70:87:78:bc:de:20:f8:d7:b0:68:be:47:
         3c:2b:a2:5f:fb:98:d5:88:8e:a5:73:54:80:c2:4a:8c:0b:8d:
         b8:8a:3e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----