Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddf3b1da-e190-4595-a0cb-cd1d2b998e1e/4954f41a5face8a2e54e98ec00b4c1372e4e455c.roa
File:                     4954f41a5face8a2e54e98ec00b4c1372e4e455c.roa (raw, json)
Hash identifier:          cIl4qmT6qyfRz+M9xXnlPqJ7t92kChFj8Pzsg2uLsJQ=
Subject key identifier:   C2:9C:E0:4C:44:A8:DE:79:E9:60:68:6D:A6:06:E8:75:7B:55:33:FF
Certificate issuer:       /CN=78246fae0a86c18d3d92d3bab27319c2ee7fb5ad
Certificate serial:       094DC7
Authority key identifier: 14:32:CA:88:14:B6:3F:47:8F:83:A7:5B:FA:26:44:5B:3E:7A:8B:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78246fae0a86c18d3d92d3bab27319c2ee7fb5ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddf3b1da-e190-4595-a0cb-cd1d2b998e1e/4954f41a5face8a2e54e98ec00b4c1372e4e455c.roa
Signing time:             Wed 24 Mar 2021 14:29:59 +0000
ROA not before:           Wed 24 Mar 2021 14:29:59 +0000
ROA not after:            Tue 24 Mar 2026 14:29:59 +0000
asID:                     52496
IP address blocks:        190.89.172.0/22 maxlen: 24
                          2803:66e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609735 (0x94dc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78246fae0a86c18d3d92d3bab27319c2ee7fb5ad
        Validity
            Not Before: Mar 24 14:29:59 2021 GMT
            Not After : Mar 24 14:29:59 2026 GMT
        Subject: CN=4954f41a5face8a2e54e98ec00b4c1372e4e455c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f4:76:95:d5:f5:68:db:13:0a:b7:5e:0a:61:
                    e3:94:c6:4c:06:f4:29:4d:9d:a8:3c:c9:e3:51:75:
                    67:f9:09:8e:85:5e:4c:03:74:5d:02:00:50:de:95:
                    8b:96:78:06:09:d8:da:be:ae:20:24:a2:21:0e:a2:
                    45:cb:91:c1:15:77:d4:0a:04:e6:e7:a2:fa:fa:42:
                    5c:6f:77:f6:5d:12:a7:13:44:98:00:58:9a:bb:a1:
                    33:74:e6:ef:25:43:eb:d2:8b:c9:c0:88:1a:a1:0a:
                    5b:de:9b:69:9e:23:cb:bd:b4:a7:00:91:b8:1e:d8:
                    d5:8f:d8:27:b3:0e:a2:02:0e:9a:d4:4e:27:84:3b:
                    67:a6:2e:14:99:57:27:56:97:d4:67:74:17:89:d0:
                    ef:05:66:32:08:85:0d:2a:20:95:91:4b:4f:9c:6b:
                    c1:0c:09:a2:6c:ba:27:59:42:f5:9d:5a:81:c5:b8:
                    36:a1:9a:d2:59:0e:6e:ed:e5:28:00:a4:87:bd:47:
                    a4:29:99:18:c1:2b:de:36:3c:bb:ee:fb:f7:07:e6:
                    b2:99:13:58:e7:ad:3b:b4:37:b2:6e:7e:77:77:d2:
                    bc:4e:9b:8e:60:12:10:fa:71:33:a9:32:ec:6d:4d:
                    d1:2d:f6:49:b8:89:19:0d:e7:2c:83:a0:c7:bd:18:
                    ec:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9C:E0:4C:44:A8:DE:79:E9:60:68:6D:A6:06:E8:75:7B:55:33:FF
            X509v3 Authority Key Identifier:
                keyid:14:32:CA:88:14:B6:3F:47:8F:83:A7:5B:FA:26:44:5B:3E:7A:8B:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78246fae0a86c18d3d92d3bab27319c2ee7fb5ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddf3b1da-e190-4595-a0cb-cd1d2b998e1e/4954f41a5face8a2e54e98ec00b4c1372e4e455c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddf3b1da-e190-4595-a0cb-cd1d2b998e1e/78246fae0a86c18d3d92d3bab27319c2ee7fb5ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.172.0/22
                IPv6:
                  2803:66e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:94:5c:07:eb:bc:ac:2b:20:d8:6f:1d:cd:3c:41:a8:00:fe:
         4b:c7:7d:fd:fb:e4:89:f4:89:c8:ea:9c:33:e0:dd:02:df:04:
         84:47:f4:32:57:68:4a:28:74:d1:bc:f5:0b:9e:63:aa:7c:7d:
         b4:76:19:10:fa:e4:3e:b4:b9:62:5e:9d:57:2d:51:f9:3c:71:
         53:a5:98:24:fe:27:36:59:b2:8b:e3:11:a2:88:01:d3:3f:b1:
         d3:6f:0b:54:83:44:01:c7:6f:13:d5:2b:01:79:8d:da:c2:31:
         c9:61:6b:94:1c:85:19:fa:0d:ad:15:75:c9:ac:4e:21:3d:99:
         d9:f3:ae:53:78:e2:7e:bb:2f:4d:5e:23:f4:87:61:e8:da:14:
         7a:bc:70:25:69:92:b3:61:cd:44:87:fd:d6:f5:15:5f:46:91:
         c9:d9:8f:89:d5:e8:cb:ea:da:4d:e7:9b:2c:1d:8d:5c:41:33:
         40:22:14:7c:01:3b:10:34:88:4d:30:67:39:a0:b8:03:04:23:
         92:63:7e:72:39:17:94:6f:d7:d6:4f:f0:6a:9c:59:93:c0:e1:
         99:ed:e9:d3:5a:0a:a3:2b:81:ac:14:98:9b:76:ee:1f:ba:bb:
         09:e5:e1:ad:46:02:53:1b:41:a2:70:8d:ea:69:78:ed:c5:03:
         60:a3:f6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----