Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7dfcf7b-c1de-4a83-83a2-ddbc29c7009f/56dfbb9fc8d0e7144b094499bf8f18b7484e874a.roa
File:                     56dfbb9fc8d0e7144b094499bf8f18b7484e874a.roa (raw, json)
Hash identifier:          nO3MMUafNXwt5biKLraraPjXT5+5symhW0LPFBrkk8o=
Subject key identifier:   76:D2:34:1E:3D:7E:CD:60:5E:B3:CB:06:86:7A:B4:A1:54:B5:95:66
Certificate issuer:       /CN=6869adc1cab330551acb7f6742c676e8f7f9c508
Certificate serial:       068201
Authority key identifier: 03:11:38:D7:5E:92:7C:92:03:32:DC:38:69:20:BD:33:D9:B7:B6:87
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6869adc1cab330551acb7f6742c676e8f7f9c508.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7dfcf7b-c1de-4a83-83a2-ddbc29c7009f/56dfbb9fc8d0e7144b094499bf8f18b7484e874a.roa
Signing time:             Wed 24 Mar 2021 14:31:29 +0000
ROA not before:           Wed 24 Mar 2021 14:31:29 +0000
ROA not after:            Tue 24 Mar 2026 14:31:29 +0000
asID:                     269943
IP address blocks:        190.83.64.0/22 maxlen: 24
                          2803:dae0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426497 (0x68201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6869adc1cab330551acb7f6742c676e8f7f9c508
        Validity
            Not Before: Mar 24 14:31:29 2021 GMT
            Not After : Mar 24 14:31:29 2026 GMT
        Subject: CN=56dfbb9fc8d0e7144b094499bf8f18b7484e874a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:0a:6a:5d:57:71:a6:48:a9:35:97:40:17:76:
                    ca:8c:fb:45:35:c5:20:6c:51:01:31:79:80:e9:3d:
                    22:c4:7e:66:4d:2b:d9:53:59:84:20:6b:28:34:d9:
                    51:12:f6:5e:3b:06:cf:ee:5a:c1:91:bb:98:ed:c7:
                    41:4a:c8:1f:64:b4:f0:bf:3e:e7:96:24:be:08:86:
                    fb:7d:42:b8:03:ac:8f:af:22:79:5d:e2:49:1f:ec:
                    9a:e1:db:35:01:9e:0e:ef:7e:a6:a0:c2:54:7e:1a:
                    de:83:0e:19:27:59:af:4b:c4:e8:e3:50:9d:ef:e0:
                    ea:06:6a:6f:54:5e:32:ab:6f:e2:1d:5f:62:3c:d6:
                    6d:f2:d5:c2:d3:93:ea:c5:9d:ca:3c:e3:bd:d8:14:
                    6a:e7:43:b8:8c:19:99:5e:b7:e5:76:41:5c:5d:cc:
                    6e:9a:e7:f5:8e:0f:d9:9c:1d:d4:9c:05:ee:d1:12:
                    ec:4c:ab:13:e4:d7:30:1b:05:67:eb:44:cc:2f:fa:
                    16:1c:20:57:a1:71:28:1f:25:b2:98:ef:42:40:3b:
                    dd:14:3c:40:50:22:4a:a1:6c:cc:cf:90:94:6a:eb:
                    d7:94:0c:d2:42:d4:a8:44:0a:d7:ad:da:b4:d5:64:
                    69:f4:5f:bf:6a:6c:81:06:6f:9b:b1:4e:01:9f:07:
                    ef:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D2:34:1E:3D:7E:CD:60:5E:B3:CB:06:86:7A:B4:A1:54:B5:95:66
            X509v3 Authority Key Identifier:
                keyid:03:11:38:D7:5E:92:7C:92:03:32:DC:38:69:20:BD:33:D9:B7:B6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6869adc1cab330551acb7f6742c676e8f7f9c508.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7dfcf7b-c1de-4a83-83a2-ddbc29c7009f/56dfbb9fc8d0e7144b094499bf8f18b7484e874a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7dfcf7b-c1de-4a83-83a2-ddbc29c7009f/6869adc1cab330551acb7f6742c676e8f7f9c508.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.64.0/22
                IPv6:
                  2803:dae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:42:b0:7d:11:33:d1:7d:14:bc:0c:42:ab:f4:7e:4a:39:dd:
         26:aa:86:52:62:36:c7:27:da:a4:4c:3c:01:8d:ec:e8:b4:48:
         c3:00:ae:36:c0:61:25:55:52:9e:5d:af:74:c2:53:7c:37:e7:
         e0:19:df:83:42:b8:1b:fb:32:53:b1:b8:3a:31:15:40:b2:d1:
         51:df:7d:68:b5:9c:9f:40:20:0e:e5:ed:7c:77:55:f6:c8:0f:
         b8:0a:df:78:a2:b1:dd:b0:58:45:4d:ef:60:65:56:a7:d8:ab:
         fa:c2:da:c3:ad:10:ed:d0:16:d3:1f:f8:59:82:48:fd:b9:8e:
         de:b4:f2:cb:c9:34:6b:fe:34:75:3b:8b:cd:76:59:69:fa:a2:
         3c:5a:d3:dc:14:ef:21:20:0e:a5:fe:2a:18:f0:32:4a:70:06:
         09:9c:31:1e:3b:af:bc:0b:44:0e:46:d5:ec:ee:8a:f4:0b:dd:
         d0:6e:8d:f0:2d:7c:90:5e:73:04:26:84:5d:ec:11:f8:3d:90:
         5e:63:1a:0b:d1:5d:24:e5:77:42:d6:92:52:66:8c:05:f0:12:
         d1:25:40:5c:e1:33:c9:a5:4b:a2:9d:9d:a3:94:0d:c2:09:6a:
         bc:b8:7f:d4:0c:73:05:2c:0e:62:99:29:d2:63:4c:96:b7:3a:
         03:52:22:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----