Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f5af963d-4439-4378-b8f7-b69ee355e29e/5543234cd57bfa3dec1bfc09d48219e7290d9e49.roa
File:                     5543234cd57bfa3dec1bfc09d48219e7290d9e49.roa (raw, json)
Hash identifier:          /67zHv5khi/EJwNwyklZJn4ViRuKOQB85XxnFs79XQE=
Subject key identifier:   2E:C7:6E:4F:E3:86:12:0B:32:F8:55:A3:51:E7:FF:06:50:9D:58:6F
Certificate issuer:       /CN=1c7aa2461fd621e3fbf1d5f744eb5dadd577d684
Certificate serial:       0D889D
Authority key identifier: 26:7A:70:F8:D7:68:13:CB:9D:5F:F4:03:09:4D:E2:91:55:78:4E:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c7aa2461fd621e3fbf1d5f744eb5dadd577d684.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f5af963d-4439-4378-b8f7-b69ee355e29e/5543234cd57bfa3dec1bfc09d48219e7290d9e49.roa
Signing time:             Wed 24 Mar 2021 14:39:23 +0000
ROA not before:           Wed 24 Mar 2021 14:39:23 +0000
ROA not after:            Tue 24 Mar 2026 14:39:23 +0000
asID:                     27868
IP address blocks:        190.123.0.0/23 maxlen: 23
                          190.123.10.0/23 maxlen: 23
                          190.123.12.0/23 maxlen: 23
                          190.123.14.0/24 maxlen: 24
                          200.110.232.0/21 maxlen: 21
                          2803:b00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886941 (0xd889d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c7aa2461fd621e3fbf1d5f744eb5dadd577d684
        Validity
            Not Before: Mar 24 14:39:23 2021 GMT
            Not After : Mar 24 14:39:23 2026 GMT
        Subject: CN=5543234cd57bfa3dec1bfc09d48219e7290d9e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f7:b0:0e:04:a3:62:96:6d:d9:12:99:eb:83:
                    65:cb:ea:75:a8:0c:2a:e1:9e:74:59:9a:15:40:1c:
                    e9:a9:c8:7a:46:96:34:e2:34:92:4b:16:4e:d8:10:
                    98:e9:7b:85:a4:de:e7:57:b3:86:13:0a:4f:bf:f4:
                    2e:3d:57:14:82:00:c1:9b:3a:d8:04:c0:1e:2f:c5:
                    b4:e1:a3:d5:78:53:5f:5f:ee:b5:ed:58:4d:59:19:
                    dc:70:fe:e7:51:b8:58:3a:3e:2b:b5:40:c3:18:47:
                    71:d6:a3:fc:a1:08:33:8e:eb:8b:c5:6a:93:76:78:
                    ca:c9:f5:14:bc:ea:54:00:a3:2d:e5:dc:d5:12:d7:
                    27:21:4c:d1:40:03:3f:a5:e3:22:df:2b:18:4b:0a:
                    80:8a:af:3f:31:9c:a9:bc:ec:03:5b:fd:8e:ca:c3:
                    66:bb:be:11:77:61:8c:bf:f3:48:d1:dd:35:f2:e1:
                    8e:7a:24:d0:0e:53:c0:fb:cc:a5:4f:83:29:7c:0b:
                    f3:7e:1b:b8:2d:6e:fc:75:0f:29:e5:92:70:f6:32:
                    93:48:12:29:54:cd:8b:df:fd:86:49:f2:d5:a7:60:
                    d3:b0:a7:11:28:af:81:eb:30:25:13:fe:e6:65:d8:
                    3f:65:f6:cc:d5:5f:81:c8:b9:3f:16:b8:d3:95:58:
                    5e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C7:6E:4F:E3:86:12:0B:32:F8:55:A3:51:E7:FF:06:50:9D:58:6F
            X509v3 Authority Key Identifier:
                keyid:26:7A:70:F8:D7:68:13:CB:9D:5F:F4:03:09:4D:E2:91:55:78:4E:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c7aa2461fd621e3fbf1d5f744eb5dadd577d684.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f5af963d-4439-4378-b8f7-b69ee355e29e/5543234cd57bfa3dec1bfc09d48219e7290d9e49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f5af963d-4439-4378-b8f7-b69ee355e29e/1c7aa2461fd621e3fbf1d5f744eb5dadd577d684.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.0.0/23
                  190.123.10.0-190.123.14.255
                  200.110.232.0/21
                IPv6:
                  2803:b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:54:38:69:33:77:a4:41:82:f3:42:c7:11:f0:18:4b:1b:0e:
         c6:48:3b:e6:3f:2e:94:0f:d6:f0:81:10:af:e7:65:a3:df:e5:
         24:df:60:87:f8:93:2a:eb:20:86:c4:71:89:bb:73:39:a6:e2:
         fc:33:7c:c3:f3:be:6b:cf:72:8f:bd:67:de:fc:d6:5f:96:55:
         c0:51:9b:08:d2:e0:9e:3e:d8:81:ed:f0:8a:1f:3a:e5:84:11:
         a6:dd:3c:fb:70:85:1a:41:a9:f3:d1:40:0b:6e:c8:82:92:97:
         52:92:d1:ba:96:7a:12:ee:59:41:b8:3a:71:80:ac:fe:68:cb:
         85:81:1a:37:58:3b:98:8f:9c:56:9d:1b:13:e0:f1:d8:39:97:
         9a:47:4d:0f:eb:50:70:de:b5:d1:2a:fa:42:bc:e8:2f:4e:92:
         36:ee:b2:ce:18:11:27:ad:52:3b:53:cc:5e:00:b7:99:77:f9:
         3e:08:05:ea:95:05:1e:07:5a:e1:8a:bc:c8:38:f9:07:c7:09:
         61:0f:47:3a:43:0b:79:a5:a2:86:00:64:77:2f:72:d1:56:7d:
         8b:37:6f:9b:2a:63:0e:f1:d5:72:9c:b2:8f:43:fc:36:aa:41:
         98:d3:9d:7d:5b:7e:65:76:ed:db:f7:57:eb:36:19:8a:3a:84:
         3d:6c:0e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----