Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/88e265738ac751e15affae6d43ba1009b2957d0a.roa
File:                     88e265738ac751e15affae6d43ba1009b2957d0a.roa (raw, json)
Hash identifier:          6i97eZmX0JhyN1cKCUqLcCJpy1VySL4cBx6m+oecnhY=
Subject key identifier:   E7:F5:AB:4D:06:84:4F:3A:A5:27:5A:3C:F3:B1:FE:1C:C7:F2:F9:25
Certificate issuer:       /CN=ba813dbb0a3aeaa7f650c31656aa4e97e4295496
Certificate serial:       17495D
Authority key identifier: 38:B9:B7:EB:0E:96:FC:96:21:A8:9C:71:29:F1:D6:95:5B:67:3B:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/88e265738ac751e15affae6d43ba1009b2957d0a.roa
Signing time:             Fri 07 Apr 2023 08:30:06 +0000
ROA not before:           Thu 06 Apr 2023 08:30:06 +0000
ROA not after:            Sat 05 Apr 2025 08:30:06 +0000
asID:                     27883
IP address blocks:        190.114.192.0/19 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1526109 (0x17495d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba813dbb0a3aeaa7f650c31656aa4e97e4295496
        Validity
            Not Before: Apr  6 08:30:06 2023 GMT
            Not After : Apr  5 08:30:06 2025 GMT
        Subject: CN=88e265738ac751e15affae6d43ba1009b2957d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b6:f9:03:6b:96:12:92:ed:a9:a4:a2:c6:a2:
                    ac:51:aa:a2:c1:a9:5e:70:75:df:f8:8c:5d:39:ff:
                    97:85:24:1f:c8:7e:15:c2:5d:20:7a:c8:1e:6b:d6:
                    77:de:81:9f:58:5e:ad:d0:2c:4b:94:8a:cd:9f:65:
                    af:29:96:74:9a:a1:f3:55:ba:2c:1c:65:9c:6a:71:
                    98:47:1d:97:fa:e5:8a:76:02:e5:3c:79:16:2f:e5:
                    ca:ab:37:85:39:56:0b:50:2a:43:2f:81:cd:ca:b8:
                    36:9f:f5:87:62:93:8a:e4:32:27:9b:2b:ad:82:3e:
                    5f:2c:57:f0:0e:a6:ad:5f:53:39:6c:9c:83:9d:10:
                    86:12:97:76:83:ad:56:42:6c:33:51:8d:e6:76:4e:
                    0f:2a:0d:b7:1b:37:9b:f7:39:5f:26:4f:43:86:61:
                    6b:aa:de:f1:12:d2:27:45:3d:f5:f5:5f:8c:4c:4b:
                    18:55:7f:8a:d5:3a:01:a5:5d:63:fe:ad:b9:73:b5:
                    c3:cb:9e:d4:94:81:a0:b1:9b:fa:69:d8:83:75:af:
                    48:b1:fb:e8:e2:b3:f6:13:7f:e4:b8:50:37:7a:f0:
                    04:19:bc:c1:5e:05:53:09:24:37:1d:54:38:2d:63:
                    75:db:d2:21:43:08:01:18:ee:a4:94:cc:72:43:84:
                    8e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F5:AB:4D:06:84:4F:3A:A5:27:5A:3C:F3:B1:FE:1C:C7:F2:F9:25
            X509v3 Authority Key Identifier:
                keyid:38:B9:B7:EB:0E:96:FC:96:21:A8:9C:71:29:F1:D6:95:5B:67:3B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/88e265738ac751e15affae6d43ba1009b2957d0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9ddfa43a-8de8-459b-9f67-047bd64242a8/ba813dbb0a3aeaa7f650c31656aa4e97e4295496.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.114.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         89:e0:4f:ee:06:34:f6:dc:4f:21:bb:d0:a1:f4:71:21:c5:54:
         a1:6a:72:d5:0d:93:5f:d1:4a:09:6a:da:d8:15:d4:71:06:43:
         aa:cb:fd:05:52:69:17:d2:51:0c:ed:56:61:96:4a:cb:a5:b4:
         f2:20:52:94:8e:fc:8d:09:3f:89:ad:b2:df:07:b1:c4:bc:53:
         c3:7e:3b:11:05:eb:7b:9d:60:31:ab:29:a0:f9:ba:cf:ac:bf:
         f0:59:86:b1:6a:e8:5d:19:73:27:dd:17:f4:cf:ec:df:8e:09:
         57:36:5a:ef:5c:b4:da:1b:09:63:0b:11:65:c8:af:15:72:4c:
         d1:97:5d:44:56:36:bb:ca:0a:5d:12:fc:a2:e3:c1:c2:30:18:
         a1:c0:1b:46:06:13:36:f1:2a:97:09:10:94:b1:a6:b4:23:00:
         00:45:f0:8f:00:a6:94:fe:5a:f3:94:d2:20:59:4d:1c:b9:86:
         f8:ab:b9:98:e1:2b:92:c7:f8:a9:c2:cb:bf:01:ed:e4:7f:38:
         ab:ff:f2:fa:a3:20:3d:87:24:7a:87:89:cf:29:74:eb:47:b2:
         ce:6f:29:3e:3e:69:a9:4d:6f:bd:90:9c:77:40:bf:64:43:7b:
         9d:ba:08:db:53:eb:0a:71:c1:cd:78:c0:1f:89:f2:61:c8:d8:
         40:04:d4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----