Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/215e2ecd9a28ff4fb411a3690ed02a1129c04843.roa
File:                     215e2ecd9a28ff4fb411a3690ed02a1129c04843.roa (raw, json)
Hash identifier:          h2H0OHnvd83Vw5k4mXxO1q+cNm78IzFsofQNenw5muA=
Subject key identifier:   59:12:B5:B8:7F:8E:55:FE:89:49:FC:0B:DD:4D:5D:45:15:2A:8C:8B
Certificate issuer:       /CN=3c8bc735a993962fcbd639234bae2ac1d5a1f158
Certificate serial:       0CF6B3
Authority key identifier: DB:E4:59:72:55:05:B3:41:FB:F5:DD:98:92:70:00:46:1C:A0:70:BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c8bc735a993962fcbd639234bae2ac1d5a1f158.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/215e2ecd9a28ff4fb411a3690ed02a1129c04843.roa
Signing time:             Wed 24 Mar 2021 14:45:16 +0000
ROA not before:           Wed 24 Mar 2021 14:45:16 +0000
ROA not after:            Tue 24 Mar 2026 14:45:16 +0000
asID:                     28005
IP address blocks:        190.102.56.0/21 maxlen: 23
                          2803:b840::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849587 (0xcf6b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c8bc735a993962fcbd639234bae2ac1d5a1f158
        Validity
            Not Before: Mar 24 14:45:16 2021 GMT
            Not After : Mar 24 14:45:16 2026 GMT
        Subject: CN=215e2ecd9a28ff4fb411a3690ed02a1129c04843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8c:2c:ee:00:8d:c3:fa:05:5f:cd:53:be:24:
                    84:d2:d4:bd:b4:c0:d0:ff:68:32:12:7a:99:92:e8:
                    8d:44:86:a0:64:35:6a:d2:67:b6:9a:00:58:5f:50:
                    c7:af:63:d8:74:33:9c:99:04:7c:84:67:76:b4:58:
                    34:1f:f3:65:f4:fd:08:5c:4d:74:8c:12:42:86:82:
                    48:4f:25:2a:8b:c3:b4:d3:98:3a:06:bb:e6:8d:11:
                    a7:43:8e:86:ad:1f:45:ad:1c:a1:0c:9e:26:6d:3b:
                    c4:e2:77:ca:21:78:c8:c3:49:4b:45:96:17:5f:95:
                    e8:48:af:e4:c1:5c:de:cc:21:c5:be:17:a1:01:e3:
                    84:50:0e:a0:90:62:4d:00:67:68:42:23:4f:df:2c:
                    5b:42:90:ae:bf:98:40:3c:73:d6:22:5f:ec:04:f4:
                    96:c2:92:06:af:54:8e:c7:c3:45:3f:8f:07:45:f2:
                    62:cd:5e:41:f1:95:eb:c0:37:00:a9:cb:00:96:2e:
                    3e:39:1a:1b:64:d6:b7:63:06:cd:2e:d4:25:38:83:
                    93:b0:a9:ad:5d:c7:75:b1:73:3d:ca:f7:e7:7e:a7:
                    82:3e:32:0b:ed:05:0f:30:04:e4:64:0c:52:09:12:
                    55:95:06:96:80:5f:41:a6:53:cc:95:e1:e2:09:a6:
                    52:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:12:B5:B8:7F:8E:55:FE:89:49:FC:0B:DD:4D:5D:45:15:2A:8C:8B
            X509v3 Authority Key Identifier:
                keyid:DB:E4:59:72:55:05:B3:41:FB:F5:DD:98:92:70:00:46:1C:A0:70:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c8bc735a993962fcbd639234bae2ac1d5a1f158.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/215e2ecd9a28ff4fb411a3690ed02a1129c04843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b56e3373-e129-4963-ad89-d8203823cdc6/3c8bc735a993962fcbd639234bae2ac1d5a1f158.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.56.0/21
                IPv6:
                  2803:b840::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:e0:10:9f:3d:7e:79:ba:0c:7b:ea:f2:dd:81:89:26:a2:28:
         67:75:7f:b8:ff:e0:82:e3:f1:76:40:ac:72:fa:d9:de:6d:c0:
         f2:0e:05:b9:1d:0f:ab:d9:11:ca:f1:3d:9e:df:b7:58:05:ac:
         c3:a4:0c:bc:f4:30:25:b5:6d:7a:db:4b:61:cf:07:2d:5c:99:
         69:bb:1e:25:7b:ff:5c:fd:ca:d7:e3:41:5a:f8:79:1a:af:9b:
         8a:92:e8:5e:10:f2:a8:4b:9c:bf:ce:fe:3a:a0:b6:24:a3:7c:
         65:22:c5:ff:28:cc:ad:28:37:aa:d3:61:36:5c:bf:85:d6:14:
         3f:6c:38:4d:18:4f:94:4f:5a:ac:30:dd:4c:41:74:5d:c4:da:
         0b:53:11:09:80:cc:1f:45:bd:5e:0f:4a:fb:fa:78:e4:6a:af:
         1d:de:69:f0:96:80:98:81:7f:4c:90:59:c7:cb:f7:f1:60:e0:
         73:4e:79:55:04:94:1b:18:23:fc:37:62:0e:cd:63:6e:bd:35:
         6d:57:c9:b5:17:5f:6e:3b:c1:d5:27:4a:bf:73:dc:b1:9d:31:
         e6:cd:75:24:f4:72:96:3a:8d:6c:31:a3:de:fb:66:04:20:12:
         3d:8a:82:12:bb:6c:c7:74:25:6b:11:d8:d0:23:aa:6e:7b:88:
         e5:83:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----