Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f3638777-c5a1-461a-a573-ed7d94b1de0c/2fb6bddec4584e8bdab9ed4ef1b14394a71d715e.roa
File:                     2fb6bddec4584e8bdab9ed4ef1b14394a71d715e.roa (raw, json)
Hash identifier:          fGrPoP7TLKR8lFFS7MnaYzmhg3RX+W4CJZVbrSMELTs=
Subject key identifier:   5D:81:D5:D0:E4:DA:A0:04:28:DD:D5:EB:1B:4F:17:A7:B1:09:AF:78
Certificate issuer:       /CN=73de0e97153fedaece8ac6ae6009b0ed8533eb76
Certificate serial:       0D1373
Authority key identifier: 7D:2D:D4:F5:97:E1:70:60:E2:7A:53:D7:70:3A:C0:08:11:9E:CD:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73de0e97153fedaece8ac6ae6009b0ed8533eb76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f3638777-c5a1-461a-a573-ed7d94b1de0c/2fb6bddec4584e8bdab9ed4ef1b14394a71d715e.roa
Signing time:             Wed 24 Mar 2021 14:48:17 +0000
ROA not before:           Wed 24 Mar 2021 14:48:17 +0000
ROA not after:            Tue 24 Mar 2026 14:48:17 +0000
asID:                     27891
IP address blocks:        190.168.192.0/18 maxlen: 18
                          2800:a020::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856947 (0xd1373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73de0e97153fedaece8ac6ae6009b0ed8533eb76
        Validity
            Not Before: Mar 24 14:48:17 2021 GMT
            Not After : Mar 24 14:48:17 2026 GMT
        Subject: CN=2fb6bddec4584e8bdab9ed4ef1b14394a71d715e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:82:4a:bd:a3:a9:e5:61:3a:6c:ea:10:aa:56:
                    55:13:20:89:fc:fd:ca:bc:e9:03:44:c4:35:f7:69:
                    9b:f8:9f:45:06:66:e9:ca:a6:89:6e:d2:86:ff:e7:
                    4f:74:9e:46:9d:db:f7:af:7c:77:0b:f6:1f:88:92:
                    a4:b0:65:59:ec:ad:8e:49:2e:69:65:7f:c6:08:d4:
                    da:8e:fb:0d:53:21:ab:a8:b0:06:db:42:52:7d:36:
                    c7:26:5c:f4:c0:33:a6:a1:96:73:9c:8a:1f:4a:ce:
                    8d:d4:eb:00:a1:1a:98:d8:73:12:40:45:3b:b1:59:
                    dc:b0:2d:e0:49:eb:a0:af:f9:58:a6:7c:6f:ac:0b:
                    88:3b:7d:1d:52:e0:c4:ae:f1:2f:d8:bd:7b:29:a5:
                    80:fa:38:78:ea:77:7f:fc:54:18:d0:54:4d:2a:dc:
                    79:5a:21:cb:e0:c7:f4:33:c0:35:dc:ba:fb:8c:43:
                    84:32:b1:b7:3f:fb:bf:cf:0b:63:ff:8d:5d:a9:6f:
                    84:28:55:be:4d:2d:56:c3:64:d8:71:ba:dc:00:ec:
                    31:54:6f:7d:96:21:28:e0:38:e5:91:63:4f:ed:38:
                    fa:e7:cf:e5:a6:27:19:dd:2f:be:df:79:9b:27:7a:
                    d0:3b:4a:99:75:53:82:2a:1c:14:15:3e:48:b7:74:
                    81:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:81:D5:D0:E4:DA:A0:04:28:DD:D5:EB:1B:4F:17:A7:B1:09:AF:78
            X509v3 Authority Key Identifier:
                keyid:7D:2D:D4:F5:97:E1:70:60:E2:7A:53:D7:70:3A:C0:08:11:9E:CD:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73de0e97153fedaece8ac6ae6009b0ed8533eb76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f3638777-c5a1-461a-a573-ed7d94b1de0c/2fb6bddec4584e8bdab9ed4ef1b14394a71d715e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f3638777-c5a1-461a-a573-ed7d94b1de0c/73de0e97153fedaece8ac6ae6009b0ed8533eb76.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.168.192.0/18
                IPv6:
                  2800:a020::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:5f:e5:66:79:07:ec:df:34:60:65:7e:58:75:06:15:45:b8:
         82:f9:0c:df:29:9f:62:87:dd:90:0d:ba:f3:ad:d4:64:0e:2a:
         c1:7f:c9:36:8f:7d:70:f3:a9:f2:9a:28:50:d8:ac:3d:e7:68:
         e2:43:43:10:ed:54:11:4a:99:d6:ff:8a:cb:8e:ac:d8:e6:5e:
         f5:af:0d:42:0b:46:6e:cf:a6:55:f2:bf:44:bb:8b:5b:d2:8e:
         d4:23:89:d7:20:41:ba:be:11:48:66:62:ba:69:65:19:57:2f:
         4b:3f:7d:ad:0c:35:82:41:ca:6f:06:9a:6e:43:b8:de:16:c6:
         78:b7:95:2a:fc:bd:f0:4b:5e:23:46:f6:d9:7a:49:f5:01:92:
         8e:9c:b5:aa:3c:34:f1:3c:18:d4:a7:45:c9:18:36:ca:51:d2:
         a5:92:37:f9:e6:7f:40:5a:37:16:ea:c8:f8:20:24:9c:af:58:
         7f:3d:03:7a:bc:b3:9c:8b:cd:07:3c:af:83:71:8b:82:05:91:
         96:21:67:e8:0e:16:f5:8b:04:da:fe:30:41:70:5f:e6:6f:9b:
         e4:51:b6:25:5d:86:82:28:c3:3f:8c:61:74:e9:a8:70:23:34:
         75:a7:69:22:bb:f3:a8:8a:54:8a:ee:39:36:4a:a4:a7:b9:fd:
         78:ca:63:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----