Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c99e86ea-b29e-42db-a50d-5f7a5acbfc07/0a69a6692c58b6e3a66294d4e22fe799fb5a0324.roa
File:                     0a69a6692c58b6e3a66294d4e22fe799fb5a0324.roa (raw, json)
Hash identifier:          7yZNg6pKYGg6hG1zI8lVP1Y3NhIsEoMpMYKxlKUNbAo=
Subject key identifier:   3B:E5:31:D9:DE:30:24:6B:96:5F:5C:98:F7:EC:01:3F:F5:1C:83:36
Certificate issuer:       /CN=0eac785678f99fbead8c368618cbd460db057aa3
Certificate serial:       079014
Authority key identifier: D0:42:24:8C:ED:68:D3:87:AF:FA:63:1B:AC:60:51:D5:FB:81:83:E5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eac785678f99fbead8c368618cbd460db057aa3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c99e86ea-b29e-42db-a50d-5f7a5acbfc07/0a69a6692c58b6e3a66294d4e22fe799fb5a0324.roa
Signing time:             Wed 24 Mar 2021 14:33:20 +0000
ROA not before:           Wed 24 Mar 2021 14:33:20 +0000
ROA not after:            Tue 24 Mar 2026 14:33:20 +0000
asID:                     269944
IP address blocks:        190.89.40.0/24 maxlen: 24
                          2803:3ae0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495636 (0x79014)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eac785678f99fbead8c368618cbd460db057aa3
        Validity
            Not Before: Mar 24 14:33:20 2021 GMT
            Not After : Mar 24 14:33:20 2026 GMT
        Subject: CN=0a69a6692c58b6e3a66294d4e22fe799fb5a0324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:46:f7:a3:b7:89:9e:c4:d0:2d:a3:64:21:6f:
                    eb:13:c2:dd:f8:9b:65:96:46:46:53:f9:0d:01:96:
                    98:fd:e2:66:23:5a:5a:8c:c3:54:9f:52:7a:bc:de:
                    07:6e:23:cb:f1:b7:41:37:e0:4e:6c:c9:0d:24:b2:
                    dd:4f:a6:58:91:ed:aa:87:84:66:51:8c:74:6e:5c:
                    76:4b:bc:6a:70:d5:f5:02:bc:50:ba:d5:46:b7:b9:
                    e1:ae:d2:d0:7e:59:6c:08:68:17:7e:c6:89:1b:1c:
                    5d:f4:cb:0f:77:34:7b:cb:e7:b2:d0:23:d0:a4:71:
                    93:a7:c3:8d:36:90:6f:52:82:cb:f4:ae:15:b2:67:
                    7e:e9:6c:e8:15:48:2f:fd:4c:6a:c2:23:0f:e2:7b:
                    4f:1d:50:d4:f3:af:02:2c:18:a9:d0:33:ad:38:8f:
                    38:e8:68:a8:8d:0e:47:b7:e7:0f:79:c1:7a:3b:30:
                    71:b0:55:85:90:8b:ea:df:ad:f1:fd:0a:6b:52:85:
                    95:c4:6c:69:00:ce:7b:e6:08:9e:69:ae:3a:b4:3a:
                    28:b8:ee:be:e6:c1:43:c4:de:7c:9c:61:05:af:06:
                    48:b0:18:02:ee:39:20:e5:4f:3f:69:2f:5b:a6:6d:
                    2e:2d:c3:f2:d0:5a:ce:5c:63:0b:78:f4:67:aa:25:
                    68:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E5:31:D9:DE:30:24:6B:96:5F:5C:98:F7:EC:01:3F:F5:1C:83:36
            X509v3 Authority Key Identifier:
                keyid:D0:42:24:8C:ED:68:D3:87:AF:FA:63:1B:AC:60:51:D5:FB:81:83:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0eac785678f99fbead8c368618cbd460db057aa3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c99e86ea-b29e-42db-a50d-5f7a5acbfc07/0a69a6692c58b6e3a66294d4e22fe799fb5a0324.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c99e86ea-b29e-42db-a50d-5f7a5acbfc07/0eac785678f99fbead8c368618cbd460db057aa3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.40.0/24
                IPv6:
                  2803:3ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:e0:73:e1:12:47:e1:e2:a7:da:09:57:a9:1a:3b:a5:47:28:
         2d:a5:53:81:ad:2b:9b:ec:e2:cd:f1:ef:6f:ba:45:d7:14:ee:
         21:69:7e:ae:e3:13:6b:e4:98:80:97:5d:61:57:88:36:3c:d3:
         88:ff:c6:45:d6:85:b9:22:b9:4a:a0:b2:54:bd:e0:44:fd:bd:
         9c:89:7e:4e:cc:63:e9:10:98:e5:ab:f1:d3:3a:c3:5e:1d:28:
         ad:53:c6:59:9b:19:ea:b4:bb:e4:ae:5e:ad:57:d4:83:21:fa:
         84:67:42:46:71:0a:06:86:b1:6e:f7:aa:89:54:32:fb:27:d6:
         de:49:2d:a7:c3:08:8c:cb:fd:06:2d:cc:fd:8f:77:4f:2b:22:
         b8:46:67:f3:d8:96:75:65:85:53:ec:61:67:b2:13:bb:4a:17:
         2d:3a:09:c3:bd:12:e2:77:b7:aa:10:38:17:42:65:9b:b8:f3:
         d6:04:0e:fd:b4:66:36:66:33:dd:19:c6:91:b7:82:ce:09:7b:
         45:6b:0c:79:f3:4a:72:a3:35:a2:8a:3a:61:87:20:83:6b:fe:
         21:98:8c:59:26:a7:9c:d1:e8:74:f9:63:fe:5a:8a:07:26:d5:
         fa:6e:89:3a:81:c6:b0:e4:4f:e8:38:fa:f9:3e:0a:b2:7c:b8:
         ac:ce:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----