Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddf3b1da-e190-4595-a0cb-cd1d2b998e1e/20fdfb13ae9019ea8411826d77382293409c8655.roa
File:                     20fdfb13ae9019ea8411826d77382293409c8655.roa (raw, json)
Hash identifier:          Xpmwq1U2pzgr35RKK09UQkSAfUFaFPVy+P3r51hVDvg=
Subject key identifier:   A1:68:E0:24:9A:E5:0E:91:B4:49:16:8F:27:71:E7:AE:EF:15:34:67
Certificate issuer:       /CN=78246fae0a86c18d3d92d3bab27319c2ee7fb5ad
Certificate serial:       139B0B
Authority key identifier: 14:32:CA:88:14:B6:3F:47:8F:83:A7:5B:FA:26:44:5B:3E:7A:8B:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78246fae0a86c18d3d92d3bab27319c2ee7fb5ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddf3b1da-e190-4595-a0cb-cd1d2b998e1e/20fdfb13ae9019ea8411826d77382293409c8655.roa
Signing time:             Wed 11 May 2022 04:11:43 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Sat 24 Mar 2035 03:00:00 +0000
asID:                     272039
IP address blocks:        190.89.172.0/22 maxlen: 22
                          190.89.172.0/23 maxlen: 23
                          190.89.172.0/24 maxlen: 24
                          190.89.173.0/24 maxlen: 24
                          190.89.174.0/23 maxlen: 23
                          190.89.174.0/24 maxlen: 24
                          190.89.175.0/24 maxlen: 24
                          2803:66e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1284875 (0x139b0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78246fae0a86c18d3d92d3bab27319c2ee7fb5ad
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2035 GMT
        Subject: CN=20fdfb13ae9019ea8411826d77382293409c8655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:13:3e:c4:49:b1:bc:51:d2:25:a1:81:3e:ab:
                    02:26:b4:05:88:7c:d5:68:95:d8:6d:98:b3:46:eb:
                    09:12:7e:87:71:c6:b6:9c:3d:9c:a2:05:6c:be:8e:
                    25:a1:2c:3b:5b:e5:1f:70:7e:29:8c:8c:8c:0c:1a:
                    7a:f1:ab:e9:fe:e5:cc:c7:1d:ab:c4:61:45:3c:4b:
                    27:eb:13:c6:4f:74:bb:d9:78:ec:87:66:27:ad:5b:
                    b9:7a:52:58:15:4a:ad:7a:74:57:f3:47:83:c8:bf:
                    55:51:9b:ba:01:c6:e6:37:c1:6d:b6:54:9d:47:e3:
                    69:9e:76:7b:14:05:4b:81:6d:4c:48:f3:ca:56:ba:
                    25:30:3c:ad:05:cc:92:d2:66:0f:04:c7:87:7b:68:
                    7c:1d:55:77:97:03:7d:8a:25:c8:f4:22:8a:af:8f:
                    0f:bd:21:48:15:cb:1c:e6:23:48:66:75:8b:5d:ac:
                    c9:57:41:88:63:c2:4d:5b:5f:04:bc:bb:81:6d:6b:
                    a0:a2:23:b3:6e:8d:6e:0b:3e:73:a2:ad:22:9c:0a:
                    92:bb:f7:fe:b5:b4:17:d1:90:a1:d4:40:4d:49:e8:
                    9a:8f:72:76:2e:03:d5:7e:3e:2d:13:20:52:57:c0:
                    b0:8d:b0:4b:77:df:47:3e:2f:90:ce:0d:b3:08:47:
                    c6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:68:E0:24:9A:E5:0E:91:B4:49:16:8F:27:71:E7:AE:EF:15:34:67
            X509v3 Authority Key Identifier:
                keyid:14:32:CA:88:14:B6:3F:47:8F:83:A7:5B:FA:26:44:5B:3E:7A:8B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78246fae0a86c18d3d92d3bab27319c2ee7fb5ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddf3b1da-e190-4595-a0cb-cd1d2b998e1e/20fdfb13ae9019ea8411826d77382293409c8655.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddf3b1da-e190-4595-a0cb-cd1d2b998e1e/78246fae0a86c18d3d92d3bab27319c2ee7fb5ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.172.0/22
                IPv6:
                  2803:66e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:25:4a:8c:6f:2c:c8:d6:92:97:38:4f:b1:58:db:27:8e:4a:
         6e:fd:62:2e:84:fb:b8:44:b5:e0:a0:e9:4f:1b:57:3e:96:ec:
         78:cf:0a:18:2d:e4:45:df:e6:c0:7a:e1:61:57:d0:62:d8:9b:
         c5:b0:8c:1f:40:09:7f:f3:37:24:41:56:db:31:04:d8:d5:8b:
         0e:23:0d:c9:e8:1d:53:95:b0:14:23:2f:85:19:b2:30:ef:c0:
         d1:cc:00:69:30:95:30:c4:d3:fc:9e:18:dc:e9:03:cb:5d:f2:
         0b:2b:27:06:27:64:0e:e6:cc:4d:83:d0:0c:2d:b1:fe:46:63:
         23:96:35:61:a8:38:6b:35:7a:32:93:69:23:39:a1:81:1d:06:
         8d:7d:ab:a2:10:fd:3a:9d:8c:5c:9b:96:68:b7:d3:9b:b6:f4:
         d7:d4:42:bc:bc:8b:20:a5:b6:f1:88:67:b7:53:9e:bf:b6:90:
         af:f8:a2:4d:1e:7b:2b:4b:e8:0e:77:63:9e:f1:2a:29:f7:db:
         3f:d8:3e:5a:d8:0e:45:91:4d:a0:e4:fd:a7:73:fc:5e:fa:92:
         db:0f:3e:23:bf:da:8b:b6:20:d8:03:90:48:e6:09:be:58:dd:
         80:06:d7:d0:1a:ef:88:42:d0:bd:8b:87:22:36:c2:30:25:ba:
         8e:bc:0e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----