Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dea4ce07-1a1b-4b93-87c2-423afc2d9c94/10d1ad08a73e7c2b57805d80735a7c23a03a78f3.roa
File:                     10d1ad08a73e7c2b57805d80735a7c23a03a78f3.roa (raw, json)
Hash identifier:          XCMoX/ikgrXebuHN7wLmosys3iwLY6Bb9rmtvf7nLGA=
Subject key identifier:   CD:36:E6:A8:ED:2A:86:87:86:E9:05:49:9B:3D:64:DA:57:29:95:CF
Certificate issuer:       /CN=f90d909fa68d1db2acc878e7da541eae84a44c95
Certificate serial:       055A08
Authority key identifier: 38:B0:83:1A:A3:BC:E6:95:1E:96:81:62:2F:FA:63:79:F0:97:F8:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f90d909fa68d1db2acc878e7da541eae84a44c95.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dea4ce07-1a1b-4b93-87c2-423afc2d9c94/10d1ad08a73e7c2b57805d80735a7c23a03a78f3.roa
Signing time:             Mon 26 Jul 2021 21:22:34 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     271792
IP address blocks:        190.171.76.0/22 maxlen: 24
                          2803:ffe0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350728 (0x55a08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f90d909fa68d1db2acc878e7da541eae84a44c95
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=10d1ad08a73e7c2b57805d80735a7c23a03a78f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f0:f9:a8:e1:b1:9c:46:f3:68:19:22:29:dc:
                    26:cf:97:b5:12:c7:2e:6e:50:d1:f8:63:58:00:71:
                    c4:ea:2e:fc:a0:6b:0a:63:6e:24:d0:c8:61:d6:b3:
                    b9:b1:76:24:94:ae:95:b3:dc:28:8f:2d:a2:a0:b5:
                    f5:58:71:6d:56:4c:d2:1f:b8:af:2d:7d:64:ee:40:
                    fa:4f:9b:b0:d3:80:ad:54:33:82:15:76:0f:dd:76:
                    45:2c:f8:c2:40:5c:26:4d:89:45:1c:a8:1d:eb:70:
                    85:23:52:27:f2:f5:6e:61:e4:5d:2c:ef:05:3e:dd:
                    d9:49:cb:c1:f3:c8:46:33:bb:3e:35:e5:f8:bb:ec:
                    1b:a3:94:83:f8:8c:33:c8:53:eb:cd:b4:62:50:d5:
                    af:6d:13:df:1a:c5:b7:ff:fa:af:bc:48:72:5a:72:
                    66:0a:b5:c9:e9:e5:e6:5a:ec:6b:92:85:6c:9b:b7:
                    54:60:a6:df:db:62:69:c2:7f:bd:9b:bf:3b:76:7d:
                    71:6e:45:b5:bf:b9:be:20:fb:97:a5:3f:64:fc:ac:
                    1d:c5:4a:d2:9a:92:56:67:f5:d3:65:1d:e3:b0:f7:
                    8b:2a:55:08:b1:a8:5a:ce:c5:a1:ca:10:b1:dc:4b:
                    f5:a7:8c:f7:9f:8d:0b:fe:11:2b:75:d2:27:c6:c5:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:36:E6:A8:ED:2A:86:87:86:E9:05:49:9B:3D:64:DA:57:29:95:CF
            X509v3 Authority Key Identifier:
                keyid:38:B0:83:1A:A3:BC:E6:95:1E:96:81:62:2F:FA:63:79:F0:97:F8:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f90d909fa68d1db2acc878e7da541eae84a44c95.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dea4ce07-1a1b-4b93-87c2-423afc2d9c94/10d1ad08a73e7c2b57805d80735a7c23a03a78f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dea4ce07-1a1b-4b93-87c2-423afc2d9c94/f90d909fa68d1db2acc878e7da541eae84a44c95.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.76.0/22
                IPv6:
                  2803:ffe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:fe:9a:cd:64:f6:9f:40:2f:0f:c5:df:6e:34:5c:90:4c:a6:
         9b:da:5a:71:9d:51:71:f5:6f:73:23:b4:d1:89:8a:20:02:76:
         4d:9f:8f:d8:fb:60:ad:e3:a7:e0:c7:cc:b4:d3:a5:6f:17:49:
         c1:b3:0f:c6:54:78:95:7c:d0:33:19:22:c4:0b:70:bc:b1:c0:
         0d:ce:b2:ef:85:38:3b:82:25:96:13:6a:7f:40:d2:20:ff:a8:
         ee:f0:1d:c0:b7:28:d3:91:e4:88:35:5c:62:13:fd:3b:5c:ed:
         f3:7e:97:e3:38:d1:03:0c:35:df:86:96:9e:7f:07:83:46:97:
         f6:02:b9:54:5e:8a:69:21:85:70:e0:63:f9:02:85:c7:50:4c:
         a4:51:09:9f:f5:00:46:a1:b9:c3:39:e5:65:8f:5f:ce:12:86:
         e5:5f:b0:e6:91:de:c2:96:7d:e8:85:60:72:e1:f6:7f:12:01:
         c1:60:fa:22:6a:7a:09:a8:8b:9a:fb:34:00:f8:97:7a:99:64:
         0d:2e:ea:c8:a2:fb:5e:17:d2:6a:0c:c5:81:cc:88:87:54:b9:
         96:f3:a4:9a:0e:0f:d6:ff:8e:03:9e:ad:7a:75:7e:73:e4:69:
         0c:8d:02:14:e0:ff:54:9e:42:46:bf:0c:93:f3:12:30:4b:68:
         d9:86:9c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----