Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/c9b39a1323e10f7c994dec42e0686831196adcd3.roa
File:                     c9b39a1323e10f7c994dec42e0686831196adcd3.roa (raw, json)
Hash identifier:          KAT9Eb1wMA0FpGQBkG7Y2yPFGf8p/ofYS3BfpQepzXg=
Subject key identifier:   23:FC:80:F5:5A:05:4F:43:48:B8:2A:A3:D0:71:CF:8E:82:11:45:68
Certificate issuer:       /CN=a23199cb189fb1502d1df2754deb1df76afcb5ba
Certificate serial:       24913B
Authority key identifier: 44:AB:5C:70:33:1F:8E:21:11:28:C2:50:CE:04:FC:95:27:BC:E2:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a23199cb189fb1502d1df2754deb1df76afcb5ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/c9b39a1323e10f7c994dec42e0686831196adcd3.roa
Signing time:             Wed 18 Oct 2023 00:26:45 +0000
ROA not before:           Tue 17 Oct 2023 00:26:45 +0000
ROA not after:            Sat 18 Oct 2025 00:26:45 +0000
asID:                     52238
IP address blocks:        190.99.72.0/21 maxlen: 24
                          2803:7260::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2396475 (0x24913b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23199cb189fb1502d1df2754deb1df76afcb5ba
        Validity
            Not Before: Oct 17 00:26:45 2023 GMT
            Not After : Oct 18 00:26:45 2025 GMT
        Subject: CN=c9b39a1323e10f7c994dec42e0686831196adcd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:a0:23:fd:f7:39:8b:31:1c:ba:f6:2c:68:
                    ff:64:13:2d:67:68:66:35:58:81:4c:41:41:c8:c8:
                    80:34:78:70:0c:fc:b5:33:da:c3:94:75:72:1d:e6:
                    eb:9a:ab:b3:b2:99:cc:38:e6:92:be:8f:4f:db:2a:
                    63:98:39:88:cd:9a:80:01:c2:78:f8:ce:d6:d4:a9:
                    a0:5c:c2:88:3e:72:d5:aa:66:c4:42:a1:9e:41:cd:
                    c7:f2:13:e2:0d:fa:44:db:3f:59:13:f5:e8:f9:bc:
                    2b:6a:9f:80:82:e3:b9:c2:e8:56:09:eb:b1:c0:af:
                    c1:5e:a6:5d:29:18:c5:6f:6b:57:00:af:a4:1d:3d:
                    cd:45:f5:4e:04:84:2d:67:38:6b:d1:0a:5a:7f:4d:
                    2d:76:00:4e:6e:87:b6:d8:c5:93:80:56:6f:ee:90:
                    3e:c6:0b:65:d4:c9:91:f1:68:0e:fe:55:5f:e3:04:
                    c5:d7:8f:10:b4:e1:62:20:bd:a8:0e:27:30:3c:20:
                    3e:a9:96:c2:5a:1e:94:72:95:d2:69:2f:3c:51:fc:
                    4d:44:19:a6:aa:7c:1f:e6:1e:22:33:ad:98:1e:83:
                    4b:c6:57:82:b4:3b:fa:6f:85:21:ab:d7:71:11:09:
                    25:cf:ff:e7:9d:c3:37:3b:be:97:4b:6c:a0:d5:31:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FC:80:F5:5A:05:4F:43:48:B8:2A:A3:D0:71:CF:8E:82:11:45:68
            X509v3 Authority Key Identifier:
                keyid:44:AB:5C:70:33:1F:8E:21:11:28:C2:50:CE:04:FC:95:27:BC:E2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a23199cb189fb1502d1df2754deb1df76afcb5ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/c9b39a1323e10f7c994dec42e0686831196adcd3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/a23199cb189fb1502d1df2754deb1df76afcb5ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.72.0/21
                IPv6:
                  2803:7260::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:dc:82:b6:c2:09:c8:c3:48:23:5f:d3:36:e1:d9:85:8e:f8:
         4b:1a:9d:e0:e3:eb:c4:99:fb:f8:be:09:a3:64:b7:7b:be:2f:
         25:30:a8:0c:90:10:b1:a5:c6:a9:56:dd:89:91:57:73:eb:96:
         99:e5:23:ca:5e:15:01:ba:6e:18:7c:19:bf:19:65:4f:ed:c9:
         43:a4:8e:c9:e6:99:0c:32:b4:f5:55:ea:d5:9f:bf:32:84:c8:
         ca:cf:73:2b:76:c0:de:ae:fc:db:05:73:15:e4:c5:56:85:28:
         ee:51:36:f6:9c:93:d2:25:5d:c0:47:37:1a:6f:5f:25:1c:84:
         7d:9b:40:9c:b4:ac:d6:88:20:38:db:c5:0c:a4:61:c2:2a:54:
         47:82:4a:6d:5e:9d:6a:e8:fe:03:2a:17:3c:6f:10:74:da:32:
         5b:ff:a9:46:0d:41:84:96:b0:44:e4:83:b2:62:11:da:4a:e2:
         7f:8c:0e:62:bd:ff:1f:ba:53:bd:32:5f:f0:a0:f7:d9:fb:80:
         c9:0e:dc:f9:0b:58:b5:7c:6c:ca:57:56:4d:80:48:83:78:6f:
         f0:46:49:8f:ad:24:74:58:0d:bb:bb:cf:b9:18:b5:18:20:76:
         b3:21:6e:27:f7:ed:90:13:10:e2:0c:b8:90:a0:b5:3c:df:64:
         e3:a8:51:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----