Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/77357bbb11645847c2cc6d1946abbd5685bb43cd.roa
File:                     77357bbb11645847c2cc6d1946abbd5685bb43cd.roa (raw, json)
Hash identifier:          Hcw5F1w8Hg0/nsRhyoOhorRPzZhXsGN2ARiV8b4bIe0=
Subject key identifier:   69:AD:04:8E:F4:45:FA:55:96:AF:50:E8:E7:30:6E:34:E1:69:77:FD
Certificate issuer:       /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial:       185B39
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/77357bbb11645847c2cc6d1946abbd5685bb43cd.roa
Signing time:             Wed 13 Jul 2022 19:46:49 +0000
ROA not before:           Wed 13 Jul 2022 03:00:00 +0000
ROA not after:            Sat 13 Jul 2024 03:00:00 +0000
asID:                     52392
IP address blocks:        190.99.120.0/21 maxlen: 24
                          2803:b100::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596217 (0x185b39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
        Validity
            Not Before: Jul 13 03:00:00 2022 GMT
            Not After : Jul 13 03:00:00 2024 GMT
        Subject: CN=77357bbb11645847c2cc6d1946abbd5685bb43cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b2:ef:b4:68:d6:1e:3a:fc:c9:c0:e8:db:bb:
                    04:b2:8f:36:6c:45:00:2e:7c:d3:85:59:5f:fe:b5:
                    3e:23:8e:a5:e5:e1:e8:0e:9b:fc:e8:94:3b:d1:b5:
                    6a:d2:ae:55:fd:e6:de:67:76:ee:5b:2b:b0:c2:9e:
                    2a:4d:6e:30:2a:84:3e:5e:37:80:ad:d5:38:15:62:
                    5b:c6:26:09:b5:96:b9:75:10:24:4a:fd:e6:7e:57:
                    41:1f:db:74:c5:e9:8a:d5:16:d1:b0:11:c8:d8:03:
                    5e:61:31:2f:58:aa:3f:84:a1:40:3b:5e:10:f7:5b:
                    cb:ca:43:69:1a:48:ed:6e:77:90:c5:19:e8:2b:b2:
                    6e:ba:f1:7d:a4:bc:46:c2:2d:da:ff:3e:64:6f:3f:
                    d1:bd:e3:c4:5e:4a:77:00:65:41:47:d9:c2:af:9d:
                    57:1a:2d:33:45:38:ef:f3:80:c0:a1:59:4e:1d:1c:
                    6e:e7:f5:d7:35:ab:d8:c5:f8:dc:8b:99:6f:14:c6:
                    56:b8:03:7d:01:4d:fb:4d:ca:8d:84:17:bb:4b:1e:
                    20:f4:2c:f3:0c:11:c7:4f:6e:a4:c6:eb:9d:f6:a2:
                    0f:59:a8:1e:28:a1:c5:1c:af:96:9c:98:8a:31:a2:
                    2a:dd:87:81:36:13:82:9e:d3:e0:4b:9f:3c:6f:15:
                    79:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:AD:04:8E:F4:45:FA:55:96:AF:50:E8:E7:30:6E:34:E1:69:77:FD
            X509v3 Authority Key Identifier:
                keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/77357bbb11645847c2cc6d1946abbd5685bb43cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.120.0/21
                IPv6:
                  2803:b100::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:11:7a:08:3d:e9:3b:17:ce:8e:f5:38:36:0e:d8:73:de:90:
         97:70:d0:a1:1c:88:34:23:9d:eb:18:6b:2b:20:54:3b:61:23:
         a2:c6:8a:eb:db:48:9c:c0:0e:2a:5a:5b:97:31:ff:6a:24:05:
         30:60:fa:98:13:6e:19:ad:83:f0:22:31:91:00:e7:15:4e:48:
         ab:8e:a9:84:83:2f:c8:a1:7c:0c:e0:ab:35:34:b6:3e:1c:05:
         51:db:1b:34:8f:db:95:c1:d3:a6:1c:ad:85:8e:c7:d8:08:bf:
         5f:74:41:5b:b5:32:a9:1a:31:d4:d9:e5:87:22:19:91:70:4e:
         4e:70:96:ad:15:99:fa:d6:6e:2e:bd:79:6b:89:94:88:f2:8c:
         e3:41:8f:d5:a9:6f:ae:9a:86:97:38:e3:a9:95:53:c4:e0:c6:
         60:93:92:d3:a6:84:59:17:25:04:4b:28:ed:e9:95:2c:57:e5:
         16:fb:72:7c:49:98:e7:cf:c9:a1:40:4f:4a:e8:b4:55:1a:b0:
         72:ba:f9:ca:11:77:a2:a9:3e:82:94:b9:41:48:a8:dc:16:e3:
         c3:6c:ab:51:18:fa:e8:cf:46:92:40:3b:2d:ed:bd:22:b8:c6:
         ad:73:6d:21:7e:c5:4f:d0:ac:38:44:2a:0b:e4:85:c2:c5:bb:
         bc:1c:19:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----