Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/0e2acf6afa43946cb6cfd321f9730446c2a52177.roa
File:                     0e2acf6afa43946cb6cfd321f9730446c2a52177.roa (raw, json)
Hash identifier:          MTEqw5cxQJQsuTNOMnipejEWwG9Ca8n5+85PT/dls9c=
Subject key identifier:   3E:59:1B:53:64:71:EF:B2:99:BC:6B:35:67:A0:AA:73:FB:45:A0:5D
Certificate issuer:       /CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
Certificate serial:       0D3F46
Authority key identifier: D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/0e2acf6afa43946cb6cfd321f9730446c2a52177.roa
Signing time:             Wed 24 Mar 2021 14:39:23 +0000
ROA not before:           Wed 24 Mar 2021 14:39:22 +0000
ROA not after:            Tue 24 Mar 2026 14:39:22 +0000
asID:                     27738
IP address blocks:        190.130.128.0/17 maxlen: 24
                          190.131.0.0/18 maxlen: 24
                          190.131.64.0/18 maxlen: 24
                          190.131.128.0/18 maxlen: 24
                          191.99.0.0/16 maxlen: 16
                          200.124.224.0/20 maxlen: 28
                          200.124.240.0/20 maxlen: 24
                          201.183.0.0/16 maxlen: 24
                          2800:440::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 868166 (0xd3f46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
        Validity
            Not Before: Mar 24 14:39:22 2021 GMT
            Not After : Mar 24 14:39:22 2026 GMT
        Subject: CN=0e2acf6afa43946cb6cfd321f9730446c2a52177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:75:bf:12:77:b7:36:a7:8a:d7:81:30:a4:9d:
                    58:63:78:26:82:f4:bb:9b:c7:a6:84:46:fd:9a:3b:
                    fa:4d:e2:1c:7c:fe:2f:40:44:15:52:55:ae:61:68:
                    4e:83:9e:6f:0e:8e:de:54:a2:28:8a:d3:01:a3:c2:
                    4c:fb:ae:d5:bf:a1:4e:8d:1c:2f:78:fa:79:5e:d5:
                    c3:46:f3:18:f9:ce:68:75:76:9b:45:65:c3:ff:e0:
                    a7:27:4d:03:ce:a9:1c:80:a0:3a:be:1a:66:cf:33:
                    79:c9:f7:97:f1:40:7d:fb:71:93:61:82:bf:ad:cb:
                    a1:6e:b7:50:6b:aa:7b:e6:32:ef:c6:6d:fd:3b:ad:
                    cd:02:a2:13:31:f4:71:1d:45:f8:f8:3f:32:5f:26:
                    dd:2b:0e:c6:5f:d8:1a:95:08:24:03:55:33:af:bd:
                    fe:fe:2e:81:1c:c2:2e:65:f6:b5:52:8d:f1:b6:de:
                    d1:b0:76:98:27:b8:21:6b:79:17:d5:e2:8b:8d:3c:
                    1e:78:7d:7d:55:84:d0:b5:fa:8e:0a:72:c9:24:ae:
                    fe:59:f1:2a:96:aa:23:b0:12:28:f3:1f:a0:8c:b9:
                    49:ea:8d:3d:69:67:1d:11:be:3f:f5:47:d6:08:c2:
                    38:86:50:73:03:4e:49:49:db:27:4c:d1:20:5d:41:
                    ef:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:59:1B:53:64:71:EF:B2:99:BC:6B:35:67:A0:AA:73:FB:45:A0:5D
            X509v3 Authority Key Identifier:
                keyid:D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/0e2acf6afa43946cb6cfd321f9730446c2a52177.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.130.128.0-190.131.191.255
                  191.99.0.0/16
                  200.124.224.0/19
                  201.183.0.0/16
                IPv6:
                  2800:440::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:1d:86:8a:32:67:fa:9e:b0:2c:d6:44:42:8e:12:74:4c:09:
         b2:4c:71:42:ff:a9:e9:2b:6d:3c:13:ce:7f:89:d2:e2:f1:76:
         31:0d:19:04:30:c9:4c:8f:4d:c0:52:58:dd:3f:f8:c6:24:08:
         ed:7a:bb:d8:bf:58:7c:f9:1c:d9:92:2e:64:d8:4d:7a:aa:3c:
         68:0e:48:f7:bf:0e:50:30:5e:22:c4:59:c4:e8:c6:65:c3:c2:
         d0:fb:ac:2e:68:25:a6:b3:51:23:1f:da:ae:70:47:71:31:29:
         50:c5:e2:cd:bc:72:b2:9f:6a:1d:65:04:c4:e1:4f:e6:95:8f:
         de:91:d8:76:76:c1:4e:53:57:69:df:95:c5:06:e2:33:90:ea:
         99:3f:d5:4a:79:2c:11:b8:00:95:7b:48:40:3f:67:5d:5e:b1:
         9b:55:55:bc:9e:fd:94:fb:bc:b5:30:1f:e3:c0:c8:c3:e1:7d:
         82:59:f8:a2:ec:e9:b7:a0:e6:fa:4b:1e:3a:50:60:19:e5:04:
         3b:ce:b7:92:6a:e6:d6:95:9c:a8:63:53:e6:17:f5:3c:e1:22:
         de:78:8c:c0:68:a7:2f:62:0e:79:b7:4e:ff:86:ce:8d:f4:0f:
         91:be:3b:d9:7e:58:d8:d2:cf:83:a9:00:3c:ba:4e:07:38:eb:
         9c:81:6b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----