Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a76d17bf-da92-489c-bdd7-a9d2c8f16ffc/d56c8c592288a7fd407e0f65d35df1ba42743387.roa
File:                     d56c8c592288a7fd407e0f65d35df1ba42743387.roa (raw, json)
Hash identifier:          aZYy+5WJlo/9EMu3sJL0rdDuDNU7SUdKKM1L7A9Q8SU=
Subject key identifier:   19:76:A0:33:BD:28:60:E1:B2:BE:22:95:B7:E9:26:79:DC:6C:68:B1
Certificate issuer:       /CN=23805813b8db816d15bdbeeb6cf82b37f383e99a
Certificate serial:       23CD06
Authority key identifier: 9C:9C:38:E1:70:C0:8D:C8:0F:0D:99:DA:D6:A1:95:19:8E:21:76:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23805813b8db816d15bdbeeb6cf82b37f383e99a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a76d17bf-da92-489c-bdd7-a9d2c8f16ffc/d56c8c592288a7fd407e0f65d35df1ba42743387.roa
Signing time:             Wed 20 Sep 2023 18:34:19 +0000
ROA not before:           Tue 19 Sep 2023 18:34:19 +0000
ROA not after:            Sat 20 Sep 2025 18:34:19 +0000
asID:                     7303
IP address blocks:        192.140.16.0/22 maxlen: 22
                          2803:dc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2346246 (0x23cd06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23805813b8db816d15bdbeeb6cf82b37f383e99a
        Validity
            Not Before: Sep 19 18:34:19 2023 GMT
            Not After : Sep 20 18:34:19 2025 GMT
        Subject: CN=d56c8c592288a7fd407e0f65d35df1ba42743387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:76:5f:dc:5d:d0:29:bd:3e:35:f7:f3:ca:0b:
                    39:84:2d:32:d3:11:46:ee:11:0c:99:df:44:df:55:
                    be:68:0e:7a:47:b4:7f:71:d8:36:d5:32:3c:2d:30:
                    7c:26:78:ba:41:44:6c:4e:a8:0e:98:67:c0:82:6f:
                    1a:cc:c6:10:cd:76:ae:7a:a7:e7:e4:1c:49:f7:56:
                    86:a5:ad:c2:7f:a5:3e:67:dc:e2:7d:8c:f1:28:fb:
                    b2:27:c3:85:6d:c7:ef:92:37:cf:a0:35:29:68:b6:
                    09:5a:c0:6d:21:1c:d1:ff:ef:0e:db:fe:e2:a5:f5:
                    6e:66:8e:10:92:ab:1a:38:93:8d:b0:81:64:02:5f:
                    a4:83:14:b8:40:fc:68:e4:00:eb:d9:47:1d:35:9c:
                    da:14:e1:65:bf:5f:20:d4:6c:76:a7:af:b2:c2:91:
                    31:3e:31:bd:c8:a3:a1:97:fa:58:ce:62:bd:f9:02:
                    1e:1d:e8:ab:89:64:7d:d3:88:57:13:0e:27:30:a7:
                    ba:1d:bc:14:38:3f:ff:36:82:55:05:23:02:88:c7:
                    a0:1a:09:65:1d:aa:62:e6:59:af:db:d8:fe:f6:f1:
                    72:04:de:32:74:4a:4e:ba:16:34:e7:bc:ec:3f:0c:
                    e8:a6:2c:d7:ae:d4:fa:98:2a:94:f4:c2:61:3d:84:
                    11:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:76:A0:33:BD:28:60:E1:B2:BE:22:95:B7:E9:26:79:DC:6C:68:B1
            X509v3 Authority Key Identifier:
                keyid:9C:9C:38:E1:70:C0:8D:C8:0F:0D:99:DA:D6:A1:95:19:8E:21:76:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23805813b8db816d15bdbeeb6cf82b37f383e99a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a76d17bf-da92-489c-bdd7-a9d2c8f16ffc/d56c8c592288a7fd407e0f65d35df1ba42743387.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a76d17bf-da92-489c-bdd7-a9d2c8f16ffc/23805813b8db816d15bdbeeb6cf82b37f383e99a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.140.16.0/22
                IPv6:
                  2803:dc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:b9:ea:fb:41:4e:27:e6:eb:d0:20:5a:a9:66:42:7e:ea:c0:
         75:5d:64:3d:67:90:43:46:db:5f:f8:1c:ce:6e:62:0f:76:64:
         95:4a:e5:c5:7f:aa:79:5c:0f:c8:fa:3d:78:50:5b:47:52:4a:
         f7:26:ad:64:18:3f:ef:37:e3:d6:f1:2d:58:07:f0:67:ce:0d:
         db:7e:13:b7:60:70:11:3e:e3:7e:8c:a7:67:9d:05:c5:16:4b:
         0e:a5:45:71:e8:9c:13:a4:72:28:92:e2:2b:29:ad:6b:2c:81:
         35:f9:d0:b4:b1:a3:84:2b:be:64:2e:c3:fd:a0:a3:ef:c2:5a:
         16:f5:ad:43:7e:03:ac:c9:b4:14:59:83:6b:9e:3f:ee:1a:ac:
         dc:18:bf:3f:fa:9c:71:df:0d:90:63:8f:ba:f5:2f:8a:ba:85:
         45:0b:bd:a0:66:e6:b1:c2:ff:5a:62:ff:47:f1:6d:9c:d4:60:
         3c:58:f5:d7:29:61:8f:b4:8d:4c:5a:fe:8a:13:58:15:25:75:
         14:1d:20:34:22:45:30:8e:42:61:ea:8c:ea:7b:2c:e9:38:87:
         84:5a:08:2d:c2:59:3b:5e:6d:fe:93:a6:95:42:84:3b:4d:39:
         ae:31:99:a1:8e:bc:07:f4:fd:47:70:b1:c7:dd:14:3d:48:27:
         2a:75:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----