Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e351f4b7-ce8f-4470-bd19-ef6a0c2658df/d6181948b65392f9627e5e88639952ec3ece920a.roa
File:                     d6181948b65392f9627e5e88639952ec3ece920a.roa (raw, json)
Hash identifier:          SpzWECcO1gX4VQy1DllM9jECzor4W5TbnQXU6WqcRAM=
Subject key identifier:   0C:AA:74:72:57:D1:FD:E8:7E:46:B1:80:98:5E:F8:95:87:B1:73:9D
Certificate issuer:       /CN=16bd7cc54a42481ee824febec4414ee78a2fbfcc
Certificate serial:       05CF
Authority key identifier: 70:AC:70:4D:F5:72:7D:51:75:2C:5F:AC:30:2D:71:F5:25:F1:8F:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16bd7cc54a42481ee824febec4414ee78a2fbfcc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e351f4b7-ce8f-4470-bd19-ef6a0c2658df/d6181948b65392f9627e5e88639952ec3ece920a.roa
Signing time:             Tue 26 Oct 2021 22:14:22 +0000
ROA not before:           Tue 26 Oct 2021 03:00:00 +0000
ROA not after:            Mon 26 Oct 2026 03:00:00 +0000
asID:                     52388
IP address blocks:        190.113.232.0/22 maxlen: 24
                          2803:a600::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1487 (0x5cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16bd7cc54a42481ee824febec4414ee78a2fbfcc
        Validity
            Not Before: Oct 26 03:00:00 2021 GMT
            Not After : Oct 26 03:00:00 2026 GMT
        Subject: CN=d6181948b65392f9627e5e88639952ec3ece920a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:60:93:4d:ac:2a:55:36:e5:4a:fb:74:d5:01:
                    08:bb:94:8d:47:97:02:ba:c9:97:05:71:a2:28:9e:
                    aa:00:79:69:57:e8:2a:a3:38:24:29:e2:a7:34:0d:
                    6d:29:c6:85:b2:29:97:46:5f:a7:6e:f8:ac:09:53:
                    59:3b:3d:2f:04:29:23:39:19:72:75:b8:74:2c:ef:
                    4e:e5:20:80:26:2f:06:9e:f8:c4:3b:aa:f0:af:6a:
                    01:ab:1a:38:c7:64:ec:fb:91:a8:1e:fa:00:af:0f:
                    d7:a7:13:46:e2:61:71:25:0d:15:97:0d:7a:17:fc:
                    58:8c:17:38:4b:f8:e0:f7:a4:3c:82:b6:af:dd:34:
                    f5:3a:25:cf:fe:85:7f:00:b0:f0:fb:26:9d:34:d9:
                    d6:e9:21:c8:59:5a:4a:32:4b:33:50:8b:cf:a6:2d:
                    88:eb:e8:54:e7:d9:ae:0c:e6:3b:55:8a:e7:e2:50:
                    ef:de:3f:4c:df:78:0c:50:44:45:27:f9:86:9f:7d:
                    f1:3c:06:f5:ef:d3:ce:38:58:e7:f5:79:ed:10:5f:
                    0f:6f:fb:00:0c:50:a0:87:a2:61:56:e3:18:22:c9:
                    78:ce:41:0c:0f:b5:d7:db:29:d8:83:3b:58:9b:32:
                    76:f3:34:9d:75:30:8c:a4:50:3a:eb:79:6a:59:28:
                    7e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:AA:74:72:57:D1:FD:E8:7E:46:B1:80:98:5E:F8:95:87:B1:73:9D
            X509v3 Authority Key Identifier:
                keyid:70:AC:70:4D:F5:72:7D:51:75:2C:5F:AC:30:2D:71:F5:25:F1:8F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/16bd7cc54a42481ee824febec4414ee78a2fbfcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e351f4b7-ce8f-4470-bd19-ef6a0c2658df/d6181948b65392f9627e5e88639952ec3ece920a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e351f4b7-ce8f-4470-bd19-ef6a0c2658df/16bd7cc54a42481ee824febec4414ee78a2fbfcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.232.0/22
                IPv6:
                  2803:a600::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:77:b8:f9:6a:07:5d:82:cd:2b:28:fb:2e:7d:f8:e0:2c:32:
         64:04:a8:73:e3:c3:5e:c1:89:61:14:9b:3e:28:04:cd:e9:ef:
         65:3b:a7:8d:4f:e3:00:9d:3e:e9:ed:85:72:5b:6a:b0:89:c8:
         51:aa:c2:e0:0d:fe:15:45:35:51:0b:30:63:c4:82:a2:aa:2c:
         52:d5:4c:2f:7b:37:3c:29:0f:63:7c:4f:b1:1b:61:2b:12:2e:
         ea:68:7b:7d:b4:d8:62:9d:b5:88:c0:8b:77:65:ac:ba:33:76:
         e4:28:d1:b3:49:b4:81:ab:00:9e:5a:48:fd:d8:5c:89:fb:a5:
         88:3a:82:85:8d:9a:4c:f7:86:38:97:c9:86:95:64:67:2b:ad:
         1e:06:a1:41:8f:92:b5:21:f0:58:36:56:06:53:5d:28:a0:67:
         34:28:69:b6:ad:c0:e7:b0:08:de:17:af:07:3c:ae:b2:14:98:
         7e:22:44:b4:55:bc:f1:71:7f:ad:50:e6:49:72:eb:fe:a0:3e:
         f2:1a:9d:dc:04:66:2e:20:02:67:28:b8:eb:4c:3d:e1:ba:7b:
         e4:12:d6:35:5c:fe:1d:13:09:c6:aa:c6:3c:cd:e0:f6:13:40:
         80:2e:bc:42:ac:c2:6a:be:2c:62:8e:5d:2d:bb:c8:26:ff:46:
         2e:55:27:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----