Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/49eff65980197f9aeea5999e6e703927a9a4f4f8.roa
File:                     49eff65980197f9aeea5999e6e703927a9a4f4f8.roa (raw, json)
Hash identifier:          oGPtqKm3/DLwPpjzWD0Ps2+qw5n+5Z1tvzdUprcL9fc=
Subject key identifier:   17:A5:34:E7:46:76:84:CE:2E:D7:AC:7D:D6:E9:55:07:D2:46:49:3A
Certificate issuer:       /CN=4d943c86c06bd73da9f8d91bfbf531a137485900
Certificate serial:       0D6BC2
Authority key identifier: A9:7B:B6:5D:77:0E:09:E9:53:2E:81:FD:31:58:A2:0B:1C:02:98:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d943c86c06bd73da9f8d91bfbf531a137485900.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/49eff65980197f9aeea5999e6e703927a9a4f4f8.roa
Signing time:             Wed 24 Mar 2021 22:50:48 +0000
ROA not before:           Wed 24 Mar 2021 22:47:59 +0000
ROA not after:            Fri 24 Mar 2023 22:47:59 +0000
asID:                     263245
IP address blocks:        190.107.232.0/24 maxlen: 24
                          190.107.233.0/24 maxlen: 24
                          190.107.234.0/24 maxlen: 24
                          190.107.235.0/24 maxlen: 24
                          190.107.236.0/24 maxlen: 24
                          190.107.237.0/24 maxlen: 24
                          190.107.238.0/24 maxlen: 24
                          2803:d180::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 879554 (0xd6bc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d943c86c06bd73da9f8d91bfbf531a137485900
        Validity
            Not Before: Mar 24 22:47:59 2021 GMT
            Not After : Mar 24 22:47:59 2023 GMT
        Subject: CN=49eff65980197f9aeea5999e6e703927a9a4f4f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f4:78:4d:82:32:72:fe:ca:3e:50:f9:09:4e:
                    a7:36:7e:43:be:ab:ca:53:55:65:d3:20:74:ec:21:
                    87:ed:ce:7b:2d:bf:21:f9:38:d8:03:fc:a6:1a:75:
                    d5:df:61:9c:d1:c0:71:3b:cf:b2:08:0a:2a:06:19:
                    29:70:d2:eb:65:c9:ad:bd:a6:9a:dc:b5:5f:2d:f5:
                    23:07:46:93:cf:bb:e9:99:18:30:57:99:46:f3:b7:
                    13:d8:9a:a0:2d:48:b9:f9:dd:8a:ca:8d:03:e3:48:
                    09:d2:26:9a:bd:71:2a:08:eb:1e:90:d3:7e:a9:c2:
                    b1:24:97:f4:3b:22:33:9f:19:a9:76:45:fd:f4:48:
                    f4:ff:e0:96:cd:ab:6f:f0:45:92:e1:08:02:e7:23:
                    f7:30:e4:d7:50:fc:b5:64:29:67:a9:70:9e:28:db:
                    c0:cd:71:75:c2:f9:d9:e7:d3:57:fa:47:b0:84:09:
                    3c:01:1b:1c:f8:db:d5:41:08:56:2e:57:d2:63:50:
                    7c:61:61:b7:a7:18:7a:3b:c9:43:e4:39:aa:3a:8f:
                    3b:2a:41:e9:b0:47:61:5e:c4:fb:11:b9:d3:37:f2:
                    8f:f6:b1:75:c9:3a:77:75:e1:8e:6c:e0:ff:c3:a8:
                    cc:e4:5b:cc:05:97:ea:a2:74:fe:d6:fe:66:c4:62:
                    e5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A5:34:E7:46:76:84:CE:2E:D7:AC:7D:D6:E9:55:07:D2:46:49:3A
            X509v3 Authority Key Identifier:
                keyid:A9:7B:B6:5D:77:0E:09:E9:53:2E:81:FD:31:58:A2:0B:1C:02:98:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d943c86c06bd73da9f8d91bfbf531a137485900.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/49eff65980197f9aeea5999e6e703927a9a4f4f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/4d943c86c06bd73da9f8d91bfbf531a137485900.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.232.0-190.107.238.255
                IPv6:
                  2803:d180::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:fa:6b:c9:f9:fe:13:ee:32:d8:2d:a4:e6:1d:4a:48:08:bd:
         a4:b9:05:18:00:60:73:ea:28:7d:32:fa:81:51:18:ec:47:2b:
         aa:9b:b8:21:e5:5d:44:ae:23:84:6c:23:a1:29:b2:a9:e7:ad:
         64:e5:b8:a2:b0:96:28:c7:01:2c:9c:6f:7f:68:71:50:be:1c:
         c8:db:ad:b5:fa:48:e9:cf:20:9a:6e:ca:e4:ae:4c:6b:cb:2f:
         71:c8:93:9b:17:00:04:3a:b5:9c:72:a2:7b:07:b7:b6:f7:41:
         47:67:1a:bf:b5:d3:8f:e0:89:c3:05:4c:bf:ff:f6:de:46:88:
         30:99:27:6f:86:1d:bd:f6:51:b8:da:02:73:9b:53:83:fa:b4:
         1b:12:61:2f:f0:2d:d2:4f:d8:b4:30:f7:11:dc:79:e2:03:c6:
         f2:7f:eb:5c:ab:ca:ce:c5:d4:e2:74:dc:08:15:66:04:f4:69:
         fd:eb:0d:b2:72:fd:d6:90:3b:04:24:fe:f2:19:03:d6:4f:1b:
         ad:c5:14:ff:1c:54:4d:e4:74:98:62:76:e5:ab:e5:ca:af:67:
         4d:9a:59:18:70:d2:e3:24:fb:18:b9:5e:1d:46:41:9c:fc:93:
         b5:e9:04:70:e3:b4:04:e8:5a:5e:eb:1d:be:bf:c2:18:e0:37:
         bd:20:8d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----