Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c8a50c73-79eb-40df-ae6e-a3262b906fec/cf45aeeaa61e1a5dba0b8270a4b2204bac53c315.roa
File:                     cf45aeeaa61e1a5dba0b8270a4b2204bac53c315.roa (raw, json)
Hash identifier:          SLesQly72HV7tEUR1mfLagCiaUyliu72yK2RnsHoYjg=
Subject key identifier:   E7:98:F5:4A:1E:E6:1F:5F:2F:AC:1A:CD:1B:7D:D5:50:8D:A0:0B:8C
Certificate issuer:       /CN=4a632c558245adb3e04a7439edcddfff57173cb8
Certificate serial:       0369C3
Authority key identifier: 1C:67:06:7B:41:74:EE:10:E0:11:D9:D3:92:7E:7B:DD:CF:36:21:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a632c558245adb3e04a7439edcddfff57173cb8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c8a50c73-79eb-40df-ae6e-a3262b906fec/cf45aeeaa61e1a5dba0b8270a4b2204bac53c315.roa
Signing time:             Wed 24 Mar 2021 14:30:41 +0000
ROA not before:           Wed 24 Mar 2021 14:30:41 +0000
ROA not after:            Tue 24 Mar 2026 14:30:41 +0000
asID:                     265748
IP address blocks:        190.107.184.0/21 maxlen: 24
                          2803:e200::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223683 (0x369c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a632c558245adb3e04a7439edcddfff57173cb8
        Validity
            Not Before: Mar 24 14:30:41 2021 GMT
            Not After : Mar 24 14:30:41 2026 GMT
        Subject: CN=cf45aeeaa61e1a5dba0b8270a4b2204bac53c315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:bb:bd:ba:d5:c2:db:10:fa:a3:88:ff:80:62:
                    bb:09:cc:f0:17:62:e3:8b:9e:74:41:ff:6d:e7:e5:
                    51:0f:14:00:39:de:df:32:91:25:28:13:20:64:4f:
                    e7:92:35:64:5b:64:56:86:a0:00:4d:31:9b:f3:d2:
                    a6:3b:21:ff:31:75:90:06:e9:65:d0:2f:9a:64:70:
                    b3:5d:cf:06:7a:09:dd:26:d2:dc:5e:6c:2a:48:4e:
                    b6:08:e6:f9:10:1c:0b:c4:e8:ea:d4:bb:3f:c3:d3:
                    d4:69:fe:b3:c2:bd:5a:92:bd:f8:79:8c:c4:f0:ef:
                    ac:b7:33:33:28:73:46:a6:f2:67:51:2d:aa:fb:a2:
                    6a:ed:df:74:c8:89:b0:6e:18:73:1d:0d:fe:fd:5e:
                    ac:0b:f4:42:b2:69:f3:83:77:c1:90:f6:c2:3f:21:
                    3e:07:f1:e1:67:e2:0a:4b:e7:81:85:3e:68:71:c4:
                    8a:ff:b0:f2:3d:18:fa:f3:ef:b7:c0:24:37:46:69:
                    4c:c4:ba:fc:89:dc:f5:cd:4e:94:1b:eb:d4:45:12:
                    e8:fb:67:fe:92:50:a8:37:c7:1d:eb:b4:ec:fe:44:
                    99:42:b1:be:12:43:f8:ca:51:ec:71:a9:23:f9:0d:
                    36:ee:3f:f8:f4:3c:40:f2:1f:37:21:26:84:fa:c7:
                    87:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:98:F5:4A:1E:E6:1F:5F:2F:AC:1A:CD:1B:7D:D5:50:8D:A0:0B:8C
            X509v3 Authority Key Identifier:
                keyid:1C:67:06:7B:41:74:EE:10:E0:11:D9:D3:92:7E:7B:DD:CF:36:21:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a632c558245adb3e04a7439edcddfff57173cb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c8a50c73-79eb-40df-ae6e-a3262b906fec/cf45aeeaa61e1a5dba0b8270a4b2204bac53c315.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c8a50c73-79eb-40df-ae6e-a3262b906fec/4a632c558245adb3e04a7439edcddfff57173cb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.184.0/21
                IPv6:
                  2803:e200::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:5a:75:ff:f4:27:5a:c7:55:a8:03:e3:b2:02:85:4d:a5:42:
         9f:78:4f:d2:85:1c:3a:c5:bb:26:c1:f5:a8:b5:d8:68:6c:95:
         4f:5a:fb:85:f2:c3:72:57:58:7f:5f:a6:25:d6:8d:3d:3a:df:
         18:a3:0a:ad:ea:a6:31:1e:32:96:ce:e3:e8:03:aa:b4:c0:b8:
         31:6b:dc:56:41:dc:2f:57:dd:d2:f9:aa:6f:02:0e:d1:80:ec:
         ea:f0:b4:27:c9:1f:cb:9c:ce:51:f5:a9:d1:78:d5:c9:bf:cd:
         c6:0f:cc:b7:96:8e:03:c7:93:a4:5d:67:16:c0:be:12:eb:46:
         73:ab:6a:a7:06:74:a3:ba:37:3b:63:d5:4a:ab:8a:3f:43:68:
         78:36:c8:00:64:da:6b:19:b8:ee:7f:ba:a6:7b:61:89:b0:4f:
         cf:3c:d7:73:0c:6c:bd:e8:f8:62:fe:90:85:9f:cc:37:e7:f6:
         ab:d7:22:1e:6f:1b:8b:2a:05:53:03:93:f2:d4:69:04:95:08:
         f6:fb:b8:51:ac:ad:9f:aa:0b:0a:5e:b9:56:28:74:88:ec:c9:
         c3:ac:dc:5f:4f:df:10:c6:e1:07:2f:11:98:bc:76:c4:30:2c:
         79:6f:53:d0:60:f4:b6:6b:72:c7:3d:3d:3a:0f:51:d0:11:d0:
         1a:e4:f4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----