Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/3074d761ded12071228f4dd5f3c43520dac20dcc.roa
File:                     3074d761ded12071228f4dd5f3c43520dac20dcc.roa (raw, json)
Hash identifier:          Law6cT2d21RHng5yL0fPq7CEVP7Jv8H0PVNx6fRra/0=
Subject key identifier:   A2:73:0F:4E:45:A1:54:1D:E4:52:30:96:65:16:74:B5:87:FA:0B:E5
Certificate issuer:       /CN=f8caf642faab23f93e78dca96f7b8df57ece73a8
Certificate serial:       20BE94
Authority key identifier: 5F:47:E4:E5:C1:1D:A5:88:2A:CE:4D:2E:19:06:23:57:8F:B3:DC:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8caf642faab23f93e78dca96f7b8df57ece73a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/3074d761ded12071228f4dd5f3c43520dac20dcc.roa
Signing time:             Fri 19 May 2023 17:33:59 +0000
ROA not before:           Thu 18 May 2023 17:33:59 +0000
ROA not after:            Mon 19 May 2025 17:33:59 +0000
asID:                     25620
IP address blocks:        190.180.0.0/17 maxlen: 24
                          190.186.0.0/16 maxlen: 24
                          201.222.64.0/18 maxlen: 24
                          190.171.192.0/18 maxlen: 24
                          192.223.64.0/18 maxlen: 24
                          200.58.160.0/19 maxlen: 24
                          200.119.192.0/19 maxlen: 24
                          2800:390::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2145940 (0x20be94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8caf642faab23f93e78dca96f7b8df57ece73a8
        Validity
            Not Before: May 18 17:33:59 2023 GMT
            Not After : May 19 17:33:59 2025 GMT
        Subject: CN=3074d761ded12071228f4dd5f3c43520dac20dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e4:11:00:c6:64:5c:91:1c:e5:83:c8:2d:6d:
                    ce:07:ab:8e:15:04:dc:2a:3d:d3:6b:e6:45:d8:5b:
                    c7:30:f6:e1:98:60:61:ee:e5:56:b6:66:aa:4c:21:
                    bb:c4:77:05:9d:15:1a:fb:0e:6e:bd:6c:4b:78:95:
                    c9:5b:01:26:38:2a:9f:8f:2b:37:9d:0b:51:7e:06:
                    f7:05:3b:eb:c2:3d:8b:57:2e:ca:c5:15:e4:47:9f:
                    eb:25:c2:83:97:0b:d6:6c:bd:07:0a:b1:04:00:c1:
                    0e:62:47:03:6e:4d:f0:e6:50:f7:f6:93:32:4a:48:
                    ed:be:c5:1d:b0:ae:05:15:c1:65:6b:b8:30:65:1b:
                    4f:10:c0:3b:7a:5c:c3:e9:d9:73:b0:3a:e0:74:17:
                    73:64:c7:11:59:20:19:55:aa:e8:6a:d4:8c:52:9e:
                    3c:29:96:a0:28:88:39:f5:5a:b8:60:d4:84:00:06:
                    29:27:f8:29:f1:25:15:49:cd:39:27:af:70:2d:23:
                    b5:92:68:52:1c:5b:a5:0d:ee:33:35:4c:2c:58:53:
                    75:34:29:39:0c:85:8f:e4:38:9d:58:b2:27:25:34:
                    56:31:12:4e:81:6d:01:f5:8c:98:74:5c:e3:12:f5:
                    da:62:b9:b3:08:8a:55:32:4b:3c:fe:1e:27:d1:2f:
                    9e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:73:0F:4E:45:A1:54:1D:E4:52:30:96:65:16:74:B5:87:FA:0B:E5
            X509v3 Authority Key Identifier:
                keyid:5F:47:E4:E5:C1:1D:A5:88:2A:CE:4D:2E:19:06:23:57:8F:B3:DC:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8caf642faab23f93e78dca96f7b8df57ece73a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/3074d761ded12071228f4dd5f3c43520dac20dcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/f8caf642faab23f93e78dca96f7b8df57ece73a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.192.0/18
                  190.180.0.0/17
                  190.186.0.0/16
                  192.223.64.0/18
                  200.58.160.0/19
                  200.119.192.0/19
                  201.222.64.0/18
                IPv6:
                  2800:390::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:9f:eb:87:8e:11:3b:45:2d:d4:07:f0:1c:60:89:0f:63:40:
         b9:f9:a3:6a:0e:4f:4f:16:fa:d9:7f:09:85:c0:2f:15:b7:c9:
         af:51:c4:95:28:86:93:f9:6d:eb:03:d5:90:8f:a9:65:76:1c:
         21:d3:38:5a:41:9d:87:35:a8:f7:0f:df:ff:cf:e6:e6:92:01:
         69:72:cd:9d:1d:47:7e:5f:ff:14:88:85:0b:32:7d:eb:74:a4:
         eb:0d:4f:b7:2d:c2:c7:cf:aa:c7:8d:f8:58:80:f6:6d:12:23:
         6f:a1:2a:a3:69:27:a2:fd:14:fc:94:26:ca:4b:5c:78:78:17:
         fc:43:60:15:f0:84:e2:91:fd:2a:cf:3b:b8:d9:d6:04:0d:82:
         35:fd:0d:14:02:6b:0c:b1:2f:6a:3f:0b:f7:6c:70:c3:1f:eb:
         c4:4e:77:f1:aa:f7:ae:f5:28:4d:38:b6:61:b0:14:48:67:22:
         aa:63:2e:3f:83:a9:4f:8d:f3:1a:d6:89:74:06:9a:ae:a8:f9:
         b4:4a:e4:2d:55:35:c0:ae:68:3b:ff:4d:a6:c2:79:09:6f:82:
         20:98:2b:cd:a1:5b:13:a2:bc:c2:c5:70:e8:d7:ad:84:2c:b3:
         33:74:d4:f5:d0:d4:fb:cd:0a:f1:9f:eb:6a:70:97:29:5d:79:
         60:fd:36:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----