Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bd388e6c-0092-45c6-8c77-40e523893e68/4e9572187977598b4638ca7ec78493e1e0b14e1f.roa
File:                     4e9572187977598b4638ca7ec78493e1e0b14e1f.roa (raw, json)
Hash identifier:          tXY72IYYJ6LusjtKEVOt+7jVqTizBJ3wFvsZR04q0KM=
Subject key identifier:   77:17:AC:16:DF:2D:F2:A0:EC:60:46:6B:9E:A4:8C:47:9C:C9:59:D3
Certificate issuer:       /CN=d6118b2ba58131930654b848f2aa591bf18ad448
Certificate serial:       0D9373
Authority key identifier: 30:33:29:38:EC:8C:80:5B:8A:6F:AF:70:2A:CE:F1:65:FE:22:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6118b2ba58131930654b848f2aa591bf18ad448.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bd388e6c-0092-45c6-8c77-40e523893e68/4e9572187977598b4638ca7ec78493e1e0b14e1f.roa
Signing time:             Wed 24 Mar 2021 14:33:03 +0000
ROA not before:           Wed 24 Mar 2021 14:33:03 +0000
ROA not after:            Tue 24 Mar 2026 14:33:03 +0000
asID:                     262254
IP address blocks:        186.2.160.0/20 maxlen: 32
                          190.115.16.0/20 maxlen: 32
                          2803:f900::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 889715 (0xd9373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6118b2ba58131930654b848f2aa591bf18ad448
        Validity
            Not Before: Mar 24 14:33:03 2021 GMT
            Not After : Mar 24 14:33:03 2026 GMT
        Subject: CN=4e9572187977598b4638ca7ec78493e1e0b14e1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:50:00:f8:d5:80:42:a7:b6:ea:47:32:5a:17:
                    67:11:d2:96:f3:96:8e:04:c6:67:89:6b:2f:b7:4b:
                    63:03:e7:02:9e:87:bf:2f:b4:82:78:5b:1b:01:9a:
                    95:c9:a5:68:be:9c:a1:67:9d:ac:5a:83:de:6c:ee:
                    df:66:1c:00:77:74:05:73:70:f3:d2:f5:2d:16:e5:
                    44:4e:85:c1:c0:aa:2c:0c:8f:d4:b5:39:23:33:96:
                    87:c9:db:60:dc:0b:a6:64:8e:87:23:41:ae:85:ea:
                    7b:89:0d:7a:2b:c7:b8:63:e2:4b:e5:51:02:dc:9f:
                    ae:47:8f:4f:83:c1:7a:a9:fd:f9:78:d4:55:9c:7d:
                    62:d7:8e:b7:a2:18:ed:32:ee:cb:3d:16:cf:67:68:
                    35:d3:87:48:6a:d3:56:b5:5c:96:f3:90:7b:8f:e3:
                    08:03:fa:1d:5b:85:ce:2b:8d:e8:a2:ce:ff:34:05:
                    3c:45:82:6f:a7:be:6f:90:9b:d8:ee:11:83:9b:b1:
                    d3:72:0c:c6:a0:96:84:d0:b3:5f:ff:88:c3:91:ae:
                    a5:df:40:2b:52:ff:d4:bd:12:2e:c4:7e:3b:f7:7d:
                    c4:e4:ec:a4:5e:22:95:74:2c:14:1e:be:2b:e0:64:
                    a5:8c:71:1a:a2:12:7e:a3:ef:20:9c:ca:41:a6:cc:
                    d2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:17:AC:16:DF:2D:F2:A0:EC:60:46:6B:9E:A4:8C:47:9C:C9:59:D3
            X509v3 Authority Key Identifier:
                keyid:30:33:29:38:EC:8C:80:5B:8A:6F:AF:70:2A:CE:F1:65:FE:22:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6118b2ba58131930654b848f2aa591bf18ad448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bd388e6c-0092-45c6-8c77-40e523893e68/4e9572187977598b4638ca7ec78493e1e0b14e1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bd388e6c-0092-45c6-8c77-40e523893e68/d6118b2ba58131930654b848f2aa591bf18ad448.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.160.0/20
                  190.115.16.0/20
                IPv6:
                  2803:f900::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:84:06:a2:9e:51:a6:6f:ea:1c:e8:a4:c1:2d:f1:42:ea:03:
         d4:35:ba:05:d5:ef:6c:a4:14:98:17:23:01:81:d5:0f:33:4d:
         ed:83:f2:a6:c6:0e:6f:b1:f2:6a:10:2d:2d:bf:3a:e6:0f:88:
         99:8d:b5:60:52:6f:85:3b:28:d7:3c:81:2b:d5:5b:bc:a2:f6:
         1d:7b:b1:81:97:6c:ff:5a:dd:3e:79:2e:49:48:50:2e:50:a1:
         d8:62:3e:bd:f4:1f:cb:6b:db:d8:28:10:29:f0:cb:68:63:08:
         2f:ce:d7:3a:23:46:70:f1:c3:0e:66:aa:80:df:9a:d2:b9:28:
         68:1f:53:aa:4a:5b:b8:e3:3d:c4:1c:14:ed:ad:2c:4f:4c:e9:
         7f:f0:40:f4:7b:d5:cd:b2:0d:42:b4:4e:b7:6e:62:f0:66:56:
         03:1f:92:72:a1:2f:fa:4c:a4:c9:b9:99:42:24:f8:b7:2f:23:
         cc:a4:19:11:f5:54:14:1b:fe:b4:d9:30:b5:32:cb:a8:1b:27:
         f4:96:36:ce:14:1f:88:90:c6:97:9d:63:d0:74:19:1c:10:a6:
         10:23:85:96:97:65:5d:05:6d:a9:ba:cc:1c:89:96:01:7b:68:
         7e:c2:85:78:e8:e9:17:7e:d0:6c:59:a0:15:82:e4:d5:ba:f4:
         17:34:1e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----