Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1414009e-0591-4a9e-9f5e-c3d021bda559/633b110ea35a9e40e372f76e744e020aa78c3cd1.roa
File:                     633b110ea35a9e40e372f76e744e020aa78c3cd1.roa (raw, json)
Hash identifier:          AUBAY8uA9D1DTy+oLWwpUfvBGgecosOfLKbu5LsYXhI=
Subject key identifier:   6F:4D:9A:D3:ED:E2:C9:28:C5:CF:24:C3:B0:65:82:A7:63:4D:18:1D
Certificate issuer:       /CN=614313966e4aafe32412b5d11f342cf235b5cdd6
Certificate serial:       11A40B
Authority key identifier: 59:3C:C0:4A:38:47:BD:41:BC:E9:E6:8B:4E:A8:A4:6F:D3:0E:38:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/614313966e4aafe32412b5d11f342cf235b5cdd6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1414009e-0591-4a9e-9f5e-c3d021bda559/633b110ea35a9e40e372f76e744e020aa78c3cd1.roa
Signing time:             Sun 30 Jul 2023 08:30:00 +0000
ROA not before:           Sat 29 Jul 2023 08:30:00 +0000
ROA not after:            Mon 28 Jul 2025 08:30:00 +0000
asID:                     271881
IP address blocks:        190.113.56.0/22 maxlen: 24
                          2803:dc10::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1156107 (0x11a40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=614313966e4aafe32412b5d11f342cf235b5cdd6
        Validity
            Not Before: Jul 29 08:30:00 2023 GMT
            Not After : Jul 28 08:30:00 2025 GMT
        Subject: CN=633b110ea35a9e40e372f76e744e020aa78c3cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:db:b8:f5:01:8e:76:03:6a:1d:8a:4c:54:f6:
                    a7:29:c5:9b:7c:c8:c2:5e:22:52:8d:cd:3f:3f:1a:
                    d3:b4:f5:89:23:0c:e0:d5:32:e4:7e:96:37:a0:35:
                    b1:2f:53:1d:c2:6b:fd:ad:68:8d:6a:4c:84:1d:31:
                    1d:bd:9f:96:30:13:18:4b:70:e3:b7:09:9f:92:07:
                    4f:be:25:e1:0c:c6:58:d9:92:b7:b8:db:b0:11:fb:
                    e0:5d:80:72:f5:71:e5:1f:89:f9:c4:c3:d1:37:6f:
                    55:ef:e0:49:3a:31:ce:78:eb:66:6c:f6:e5:02:13:
                    06:a7:8a:06:81:7b:1d:05:a5:58:f0:29:90:00:19:
                    66:7d:73:e3:21:84:87:a7:12:d8:e9:b9:e8:b2:f4:
                    fe:08:a7:14:ce:b7:7e:12:23:20:07:b0:f6:10:59:
                    8c:e0:e0:20:7c:c9:6b:59:e1:17:61:c0:88:9e:9f:
                    fb:97:ba:e1:b2:80:16:be:f7:ef:b5:27:62:8b:14:
                    78:37:4c:a8:8f:78:33:30:df:8a:29:d4:96:6a:e7:
                    19:5e:d7:02:91:39:19:ad:ad:09:f0:8b:71:fd:11:
                    44:cc:43:d9:c0:34:c3:b6:6b:87:19:1f:f2:83:54:
                    9d:11:64:88:89:b3:38:f3:35:9a:c7:e1:de:d3:5e:
                    f1:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:4D:9A:D3:ED:E2:C9:28:C5:CF:24:C3:B0:65:82:A7:63:4D:18:1D
            X509v3 Authority Key Identifier:
                keyid:59:3C:C0:4A:38:47:BD:41:BC:E9:E6:8B:4E:A8:A4:6F:D3:0E:38:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/614313966e4aafe32412b5d11f342cf235b5cdd6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1414009e-0591-4a9e-9f5e-c3d021bda559/633b110ea35a9e40e372f76e744e020aa78c3cd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1414009e-0591-4a9e-9f5e-c3d021bda559/614313966e4aafe32412b5d11f342cf235b5cdd6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.56.0/22
                IPv6:
                  2803:dc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:97:9e:49:b2:90:1c:e2:59:a0:b6:44:8a:d4:a9:29:7e:02:
         cf:3c:39:98:c1:9a:55:9a:47:fb:76:61:1e:4d:54:79:a2:b4:
         63:41:ee:93:19:fe:4e:a3:e4:3d:08:ef:80:d8:b1:54:95:16:
         3f:8c:0d:2c:88:ec:63:92:7f:52:3c:34:95:25:63:21:65:b2:
         3a:b4:15:a4:ad:85:5a:f6:49:42:bf:c0:c6:29:95:50:4b:ed:
         ca:f0:56:59:8a:05:4a:70:89:6a:f3:1a:c8:ad:4e:3a:dc:64:
         b8:c2:7f:21:43:45:0a:ea:0e:6e:63:7d:94:00:50:2f:c2:ad:
         47:dc:9f:2c:a8:1e:06:99:cf:3c:5e:16:cd:ea:10:0e:8c:d7:
         8e:89:39:eb:7e:d1:e8:c9:cf:cd:55:b0:5e:c6:a8:4c:31:ca:
         a7:9f:81:8b:d6:87:ac:58:63:45:29:3b:9e:d6:b0:95:eb:4f:
         f5:91:5a:6a:c6:65:71:29:12:24:94:b5:64:9b:a1:90:ff:c6:
         5e:96:78:71:af:f2:e8:fb:24:40:cc:23:82:17:05:78:11:8f:
         9e:e3:b6:b1:38:60:23:77:d8:2e:3e:ac:7b:54:62:63:85:4a:
         15:81:1b:06:d0:d8:24:45:2d:d5:93:ac:c9:8a:28:36:be:66:
         32:4d:4a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----