Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ea8833db-08ce-4d73-b0b2-f839b719da4e/9b350211de0c3197a6e1a32d021627b084489961.roa
File:                     9b350211de0c3197a6e1a32d021627b084489961.roa (raw, json)
Hash identifier:          UURKbm53BgW5D1yLSgi2FXcPiXLVXHCS5s/jbIRHSvY=
Subject key identifier:   FD:9F:58:A5:4D:49:D4:BF:EA:6C:51:BB:4C:4F:DD:8A:A2:69:91:89
Certificate issuer:       /CN=bbaab477a0f638d24770872a2fab6693629840bc
Certificate serial:       0D6737
Authority key identifier: 52:A4:C2:78:46:81:B3:1E:AC:AC:BF:3D:04:30:63:40:B2:DD:16:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbaab477a0f638d24770872a2fab6693629840bc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ea8833db-08ce-4d73-b0b2-f839b719da4e/9b350211de0c3197a6e1a32d021627b084489961.roa
Signing time:             Wed 24 Mar 2021 14:48:16 +0000
ROA not before:           Wed 24 Mar 2021 14:48:16 +0000
ROA not after:            Tue 24 Mar 2026 14:48:16 +0000
asID:                     23007
IP address blocks:        190.168.0.0/17 maxlen: 17
                          2800:a008::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 878391 (0xd6737)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbaab477a0f638d24770872a2fab6693629840bc
        Validity
            Not Before: Mar 24 14:48:16 2021 GMT
            Not After : Mar 24 14:48:16 2026 GMT
        Subject: CN=9b350211de0c3197a6e1a32d021627b084489961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:45:a9:b9:cb:74:1b:6c:87:bd:1b:fc:c5:40:
                    ea:67:13:8d:07:db:be:d0:f7:ee:57:a8:b2:bf:d2:
                    25:49:3a:24:09:14:c8:91:bc:81:16:81:e5:90:b9:
                    d5:49:55:7e:54:1f:1a:fe:dc:99:58:b3:d6:d8:fc:
                    23:70:95:db:66:41:f2:d2:77:27:cf:3c:4e:9d:46:
                    b9:d7:f3:43:52:00:74:66:83:74:a8:e4:e5:c7:47:
                    b2:90:9b:5f:79:44:c0:4e:9a:a3:80:d1:1c:e2:e8:
                    44:d2:3e:b2:32:d4:62:52:81:f0:13:11:c0:9b:82:
                    3c:87:84:64:52:9d:ef:e4:c2:08:11:c6:e6:c5:6e:
                    c9:00:36:99:94:6e:7c:7d:ee:53:b1:c4:cb:b9:21:
                    20:28:21:fa:eb:14:f2:13:f9:58:c1:c5:c7:31:b5:
                    25:ed:64:db:10:95:db:bd:c1:f2:e9:93:64:58:55:
                    48:29:16:5f:5f:a2:04:6b:7c:39:50:1b:6a:9b:ac:
                    52:2e:8f:e9:02:c1:18:22:fe:6a:cc:bc:55:47:33:
                    9a:87:3f:0b:dd:ac:46:e1:19:ba:0a:72:ec:7a:ca:
                    56:1e:ad:5c:fb:d9:6c:e0:2b:4f:36:42:0d:68:05:
                    b5:47:52:f5:b5:7e:43:65:19:11:05:64:0d:f0:2c:
                    e5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9F:58:A5:4D:49:D4:BF:EA:6C:51:BB:4C:4F:DD:8A:A2:69:91:89
            X509v3 Authority Key Identifier:
                keyid:52:A4:C2:78:46:81:B3:1E:AC:AC:BF:3D:04:30:63:40:B2:DD:16:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbaab477a0f638d24770872a2fab6693629840bc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ea8833db-08ce-4d73-b0b2-f839b719da4e/9b350211de0c3197a6e1a32d021627b084489961.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ea8833db-08ce-4d73-b0b2-f839b719da4e/bbaab477a0f638d24770872a2fab6693629840bc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.168.0.0/17
                IPv6:
                  2800:a008::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:bc:3a:d1:75:fc:74:7b:dc:2e:ad:29:ec:d5:5b:fe:c6:45:
         e4:65:d5:e3:0b:35:b4:44:39:d5:d7:b5:c1:04:5e:cd:39:c4:
         5b:f7:ba:0f:38:93:50:f9:c1:b7:f2:d0:5b:11:b5:40:bf:4d:
         b2:a8:be:a8:0c:e4:55:13:24:3c:18:6b:42:1e:3c:b0:88:a9:
         85:30:f1:a5:04:56:ed:f5:8b:f7:1c:24:dd:66:e1:70:3a:7e:
         eb:20:f3:60:1e:e3:a6:15:5f:7e:1a:24:85:01:fe:1c:39:e9:
         61:d6:d1:38:33:e8:dc:3f:18:59:45:66:58:90:d0:00:4e:d5:
         84:42:c6:f7:b8:10:3d:18:ee:e5:0d:2d:b8:d3:67:74:1a:25:
         fb:b1:8b:fc:b1:bc:85:d7:b2:7f:49:39:98:e3:07:75:9a:66:
         3b:ee:e4:f5:21:b3:95:83:e3:88:5f:83:1b:42:58:5c:ea:a3:
         b2:27:89:ac:60:9c:a8:26:8d:a6:8b:ee:48:a4:62:b4:83:e3:
         ca:c6:8b:11:59:59:94:67:a1:97:f6:36:48:fd:bc:b1:c9:10:
         9a:ef:2b:9b:ed:36:39:22:a1:27:7a:40:f3:61:94:13:88:de:
         7e:d1:29:75:03:0a:fe:5c:5e:49:15:d1:32:7f:49:8b:72:cb:
         2c:fd:eb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----