Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c36b17a2-aea8-4bd4-ba40-922cc90fce5f/cfb8c602137a604dc3e33e7eb529a3300008dd76.roa
File:                     cfb8c602137a604dc3e33e7eb529a3300008dd76.roa (raw, json)
Hash identifier:          icC+/yL4XZbRb3P6VMXynYDF0vuCPlcaZNWvIcfkCrc=
Subject key identifier:   31:7B:17:49:44:36:89:DE:93:B4:71:04:38:49:3C:C5:1C:42:51:CB
Certificate issuer:       /CN=b18c2c69d62770b93e193b9c6af3d06a05351014
Certificate serial:       0D54CE
Authority key identifier: 76:BD:93:61:B1:09:03:4D:D3:81:93:0A:73:0F:E6:62:70:12:7E:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b18c2c69d62770b93e193b9c6af3d06a05351014.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c36b17a2-aea8-4bd4-ba40-922cc90fce5f/cfb8c602137a604dc3e33e7eb529a3300008dd76.roa
Signing time:             Wed 24 Mar 2021 14:37:34 +0000
ROA not before:           Wed 24 Mar 2021 14:37:34 +0000
ROA not after:            Tue 24 Mar 2026 14:37:34 +0000
asID:                     262252
IP address blocks:        190.120.240.0/22 maxlen: 24
                          2803:d900::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 873678 (0xd54ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b18c2c69d62770b93e193b9c6af3d06a05351014
        Validity
            Not Before: Mar 24 14:37:34 2021 GMT
            Not After : Mar 24 14:37:34 2026 GMT
        Subject: CN=cfb8c602137a604dc3e33e7eb529a3300008dd76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:17:05:bc:f1:17:0e:70:d8:1a:b7:f7:9d:bc:
                    ef:e8:e4:fe:f1:54:9a:f5:ba:0f:a3:2f:5f:1a:ef:
                    12:1e:d1:f3:f1:77:bf:b2:3e:21:72:ac:9d:41:09:
                    70:13:f8:6c:d2:30:fe:1a:8a:ef:36:98:95:77:ee:
                    85:21:93:68:91:02:ba:98:25:ff:c2:d9:96:9d:95:
                    f1:76:ed:7f:60:ed:b4:7d:9c:bd:29:b1:44:08:73:
                    f2:a7:85:9a:8f:94:45:2c:bc:73:75:8e:38:aa:5c:
                    3b:ef:64:5b:7e:95:23:3f:2c:c7:e6:97:b6:96:a4:
                    17:9b:da:94:c7:af:70:cc:b8:e5:56:f8:a3:49:00:
                    93:eb:55:b0:eb:36:5a:64:04:dc:6e:49:b0:30:42:
                    3c:3f:7a:4a:92:c4:ae:56:15:86:c4:52:28:e5:64:
                    ec:a1:34:71:2c:8f:2b:f9:d3:72:99:94:ed:48:95:
                    37:b7:da:96:a1:bc:aa:fc:fc:31:93:01:a6:6b:cb:
                    d1:59:f7:cc:f7:19:2c:11:c6:25:5e:b3:29:e7:91:
                    4d:63:0f:ef:bc:80:ae:eb:74:41:a8:87:0e:94:98:
                    ce:1d:b7:b2:67:9f:53:22:d8:f8:d3:3a:27:d6:5d:
                    94:fb:e5:03:95:4e:2b:c4:59:5c:b9:4b:55:1d:58:
                    ee:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7B:17:49:44:36:89:DE:93:B4:71:04:38:49:3C:C5:1C:42:51:CB
            X509v3 Authority Key Identifier:
                keyid:76:BD:93:61:B1:09:03:4D:D3:81:93:0A:73:0F:E6:62:70:12:7E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b18c2c69d62770b93e193b9c6af3d06a05351014.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c36b17a2-aea8-4bd4-ba40-922cc90fce5f/cfb8c602137a604dc3e33e7eb529a3300008dd76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c36b17a2-aea8-4bd4-ba40-922cc90fce5f/b18c2c69d62770b93e193b9c6af3d06a05351014.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.120.240.0/22
                IPv6:
                  2803:d900::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:6d:1c:9a:f5:9f:62:67:7a:52:c6:3d:d2:de:8e:5a:a1:c4:
         ae:7f:40:07:24:35:aa:16:75:68:fc:20:03:99:4f:06:42:bf:
         14:c5:05:a6:3a:8d:4a:1b:a9:3d:3a:e6:9f:35:fe:f3:51:d9:
         eb:95:01:bd:03:81:3f:fc:3b:fc:d8:22:bd:c8:0f:5a:71:77:
         b5:e3:4c:00:df:82:67:63:bd:d0:71:64:e9:71:a5:04:45:2b:
         07:a6:b7:9f:6d:55:4a:50:9a:5d:6b:11:33:70:75:50:43:44:
         ec:08:fb:88:47:5c:7a:ad:3a:78:42:ab:f4:28:aa:c6:4b:69:
         d6:1f:6e:fa:9c:55:cf:a2:6f:1f:72:6d:11:e2:31:dc:e4:9a:
         1b:59:c5:32:ea:02:35:e4:fe:82:7f:81:f3:ec:e4:19:51:52:
         e1:b6:5a:aa:5c:89:a1:10:0d:15:9c:2b:21:54:ad:b8:a6:8d:
         f3:b3:ac:05:05:74:df:b3:70:ee:76:16:38:14:51:9e:3a:39:
         77:ad:90:d2:6d:90:20:32:d9:52:3e:85:a1:60:08:b4:6a:09:
         94:68:48:30:b4:12:22:36:25:3c:0a:1a:66:8b:39:ef:66:c6:
         62:d5:aa:a2:26:fd:7c:be:87:ac:89:a5:af:f2:8e:02:02:d4:
         2b:65:9e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----