Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/522876db2331896e04382cbe9193b72b57c0c2d3.roa
File:                     522876db2331896e04382cbe9193b72b57c0c2d3.roa (raw, json)
Hash identifier:          gKQdB1weo1CACSTTF+SjDFONlU6cIho0dU3LbGRjPGY=
Subject key identifier:   13:EA:82:B6:85:BF:92:74:CA:2B:58:25:5C:42:DB:71:42:65:C0:8A
Certificate issuer:       /CN=4d943c86c06bd73da9f8d91bfbf531a137485900
Certificate serial:       0D68A7
Authority key identifier: A9:7B:B6:5D:77:0E:09:E9:53:2E:81:FD:31:58:A2:0B:1C:02:98:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d943c86c06bd73da9f8d91bfbf531a137485900.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/522876db2331896e04382cbe9193b72b57c0c2d3.roa
Signing time:             Wed 24 Mar 2021 14:39:11 +0000
ROA not before:           Wed 24 Mar 2021 14:39:11 +0000
ROA not after:            Tue 24 Mar 2026 14:39:11 +0000
asID:                     263245
IP address blocks:        190.107.232.0/21 maxlen: 24
                          2803:d180::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878759 (0xd68a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d943c86c06bd73da9f8d91bfbf531a137485900
        Validity
            Not Before: Mar 24 14:39:11 2021 GMT
            Not After : Mar 24 14:39:11 2026 GMT
        Subject: CN=522876db2331896e04382cbe9193b72b57c0c2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d2:d3:89:b5:5f:d1:a5:47:43:85:10:fa:b7:
                    12:7d:cf:25:d3:f5:9c:e2:bc:3a:d6:7e:d2:e3:68:
                    2a:fd:e1:23:3c:ff:5d:fa:6a:81:a2:1d:79:1e:1e:
                    57:e2:16:f3:71:bd:b5:e7:e9:69:4a:fc:1b:3a:f7:
                    87:b3:ce:f0:86:24:c1:c7:2c:80:ca:25:d0:85:9b:
                    41:a7:8b:13:04:15:90:cd:96:86:bb:24:38:68:12:
                    62:43:6e:33:1d:04:e7:5a:43:6e:d0:81:7b:60:6b:
                    ef:0c:b3:a0:6d:2a:90:60:d8:ab:5e:31:cc:a1:73:
                    50:53:69:3f:48:a8:c0:f7:fe:d4:c6:e8:0a:0e:3a:
                    dd:6e:b1:17:a9:17:4a:db:22:cb:b2:df:e0:67:f9:
                    66:5c:80:eb:9c:fb:14:a7:08:9f:3a:0e:8f:8b:f7:
                    a4:15:21:1b:9b:b8:a7:26:56:bd:a5:ed:1c:f5:31:
                    f0:fa:77:98:9d:8f:32:e5:60:ac:f3:db:06:c8:b0:
                    55:d1:7a:ff:86:78:8f:a9:67:33:3e:c5:1e:8f:99:
                    55:a4:4a:a0:b5:5e:52:ec:14:0f:31:c1:04:c3:4d:
                    74:78:14:4e:7d:fb:f3:58:93:cd:94:74:37:b3:ed:
                    f6:26:69:f5:c8:00:df:f9:a2:2d:b9:df:0b:30:39:
                    f4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:EA:82:B6:85:BF:92:74:CA:2B:58:25:5C:42:DB:71:42:65:C0:8A
            X509v3 Authority Key Identifier:
                keyid:A9:7B:B6:5D:77:0E:09:E9:53:2E:81:FD:31:58:A2:0B:1C:02:98:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d943c86c06bd73da9f8d91bfbf531a137485900.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/522876db2331896e04382cbe9193b72b57c0c2d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/4d943c86c06bd73da9f8d91bfbf531a137485900.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.232.0/21
                IPv6:
                  2803:d180::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:a5:19:c5:b2:59:83:d7:e9:ec:b9:7a:be:62:4b:4a:7e:15:
         e0:07:49:0c:a6:4a:ef:69:c0:61:29:e3:25:32:86:37:a5:2f:
         90:bb:82:e5:c9:51:51:bf:0c:4e:8c:f9:ec:e5:60:91:d4:a9:
         cf:46:2b:a1:01:44:4a:86:67:93:e3:29:45:82:de:6a:2d:d4:
         87:c1:65:77:48:26:7f:b9:1e:d1:ce:ce:50:45:42:ac:22:85:
         14:b0:bf:5b:15:9f:1b:2f:6d:86:88:af:a5:41:a1:bc:a5:aa:
         a1:1f:ae:39:b1:35:3f:b2:ff:b6:36:8e:a8:f4:25:d1:cd:5e:
         09:28:2e:cd:c3:c9:32:d7:5c:4c:d3:20:c3:94:98:69:f5:8d:
         77:3c:02:3d:e5:fb:79:ce:45:ac:41:5f:96:d3:a5:3d:8f:6f:
         f3:c3:97:0a:96:be:7e:63:73:f5:b4:3d:5d:da:68:68:ad:9d:
         25:e0:2a:31:85:9f:91:35:61:af:d9:c7:32:93:b5:e9:21:c7:
         d1:59:76:1e:2e:73:80:15:b7:41:40:f0:20:9c:d9:df:a0:7c:
         2f:5f:fa:2a:8f:da:62:51:00:0b:ed:ff:07:43:45:eb:9d:9c:
         53:5b:00:3e:ff:56:08:59:b1:bf:4d:64:05:b9:60:4c:e7:1a:
         a3:cd:ea:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----