Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e7f20bc2-d392-4a60-9855-0ea55bf19c43/ce78e200d6c302b8ddf3c29482f97143de46a0a4.roa
File:                     ce78e200d6c302b8ddf3c29482f97143de46a0a4.roa (raw, json)
Hash identifier:          w1dx7gWlwLpcK+OGATbWl4xKITMuwZoOICXTn6SmlXY=
Subject key identifier:   94:9C:E2:4B:7B:25:5F:89:69:D2:53:BA:CE:D4:9B:06:CC:00:7F:56
Certificate issuer:       /CN=7089837ed143928c98c17d7d506b131ca4b69538
Certificate serial:       0C5428
Authority key identifier: D3:BC:4B:27:34:DB:02:75:B3:7C:AB:CC:DE:3C:7E:3F:63:43:31:D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7089837ed143928c98c17d7d506b131ca4b69538.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e7f20bc2-d392-4a60-9855-0ea55bf19c43/ce78e200d6c302b8ddf3c29482f97143de46a0a4.roa
Signing time:             Wed 24 Mar 2021 14:32:35 +0000
ROA not before:           Wed 24 Mar 2021 14:32:35 +0000
ROA not after:            Tue 24 Mar 2026 14:32:35 +0000
asID:                     52442
IP address blocks:        190.104.80.0/21 maxlen: 21
                          2801:19::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 807976 (0xc5428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7089837ed143928c98c17d7d506b131ca4b69538
        Validity
            Not Before: Mar 24 14:32:35 2021 GMT
            Not After : Mar 24 14:32:35 2026 GMT
        Subject: CN=ce78e200d6c302b8ddf3c29482f97143de46a0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d3:5e:7b:a1:18:9d:00:16:a9:13:b3:a0:e3:
                    31:56:f2:da:29:3d:ad:6a:f4:93:b9:ce:e9:f2:c7:
                    0e:64:af:f0:5d:33:bd:93:23:8f:40:05:16:13:06:
                    4f:76:46:16:9f:f3:d1:2e:af:75:30:44:e1:2a:63:
                    c0:28:5c:d3:58:bf:76:c1:d6:ad:cb:9c:37:95:79:
                    0a:94:bf:f9:a5:d9:27:60:3d:95:0a:d3:af:f8:c2:
                    cf:56:fc:0a:41:42:56:97:ef:ec:78:a7:53:21:7a:
                    10:82:07:e4:fb:d5:5f:d2:3c:26:7f:10:5d:90:42:
                    83:d9:82:0d:31:ce:8c:ae:1a:3d:43:2c:24:41:d0:
                    87:60:ca:87:f7:5f:86:02:c9:80:e4:41:74:47:01:
                    6c:b0:8e:da:bb:74:68:74:33:07:e2:ba:29:14:e9:
                    55:ad:00:46:49:99:26:bf:5d:31:3d:3b:89:29:0d:
                    84:87:d2:2d:c4:61:8a:27:5c:35:51:9f:f7:a4:1e:
                    c5:eb:a2:94:0c:03:49:d3:ae:f2:19:92:95:e9:c9:
                    81:b1:3f:ee:ae:e7:85:f8:b5:76:f4:d9:e2:c4:18:
                    15:3e:79:22:71:14:1b:f8:bc:7a:d1:a9:75:b1:d8:
                    6a:d5:13:08:20:94:ff:d5:19:cf:fd:20:4c:43:b1:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:9C:E2:4B:7B:25:5F:89:69:D2:53:BA:CE:D4:9B:06:CC:00:7F:56
            X509v3 Authority Key Identifier:
                keyid:D3:BC:4B:27:34:DB:02:75:B3:7C:AB:CC:DE:3C:7E:3F:63:43:31:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7089837ed143928c98c17d7d506b131ca4b69538.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e7f20bc2-d392-4a60-9855-0ea55bf19c43/ce78e200d6c302b8ddf3c29482f97143de46a0a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e7f20bc2-d392-4a60-9855-0ea55bf19c43/7089837ed143928c98c17d7d506b131ca4b69538.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.104.80.0/21
                IPv6:
                  2801:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:a3:be:c5:e5:fe:fb:f6:53:7c:df:4b:37:3b:8e:15:6d:de:
         da:d7:0a:83:a8:c5:be:99:81:99:3c:02:49:f9:65:38:34:3f:
         4e:64:52:f0:73:c5:23:fb:6c:e0:49:eb:e6:e6:e5:17:23:4c:
         2d:c9:35:a5:76:0b:f4:e6:25:11:62:de:48:e3:e3:04:34:06:
         2c:2b:b7:bc:30:b5:2a:37:2b:1f:42:84:44:be:ca:03:7b:99:
         7d:ac:3f:9a:60:e4:48:67:de:15:25:db:1e:d3:24:c4:40:51:
         8a:10:a0:a3:65:d2:39:68:a7:25:8d:c6:2e:6b:af:75:46:30:
         f9:82:d7:09:b6:19:ad:1a:76:3f:a2:64:d3:9e:20:8f:7a:7d:
         fc:69:42:43:8a:73:df:bb:40:03:42:1c:64:db:95:2a:6f:57:
         26:60:68:29:d2:e7:46:b8:1d:a3:72:25:d4:8b:8f:71:d9:5f:
         55:a9:d9:b4:be:b6:37:95:63:6c:5a:e3:b0:fd:25:e3:24:8e:
         7c:96:20:8a:cd:f7:ae:1e:94:ec:76:bf:e7:a5:0d:7d:2b:5f:
         58:af:7c:51:9b:90:37:e5:cb:da:1f:c2:75:dc:1b:34:42:05:
         80:a3:10:5f:56:08:b3:e6:0b:f2:1b:d1:4e:63:f6:1d:b9:d3:
         7d:af:f2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----