Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/37345de6a88bec06165e3ed4215dfeb27ebfc7d7.roa
File:                     37345de6a88bec06165e3ed4215dfeb27ebfc7d7.roa (raw, json)
Hash identifier:          qj/Fg2GpZjVbhM6vMf57a3Ob32Jm5iPnydwrSaA6aXw=
Subject key identifier:   F5:25:F4:71:B3:F4:6A:B0:B4:D7:9A:D4:6D:0C:13:B4:8C:85:B1:3D
Certificate issuer:       /CN=1076b178dfcc599f8de3d8db587bc6a97166efe6
Certificate serial:       247641
Authority key identifier: 62:54:C0:88:69:DE:40:D1:4C:A6:E1:4A:A3:7F:49:06:2A:3B:EB:58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1076b178dfcc599f8de3d8db587bc6a97166efe6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/37345de6a88bec06165e3ed4215dfeb27ebfc7d7.roa
Signing time:             Thu 28 Sep 2023 17:15:23 +0000
ROA not before:           Wed 27 Sep 2023 17:15:23 +0000
ROA not after:            Sun 28 Sep 2025 17:15:23 +0000
asID:                     262187
IP address blocks:        190.211.80.0/21 maxlen: 24
                          190.211.88.0/22 maxlen: 24
                          131.100.180.0/22 maxlen: 24
                          2800:a30::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2389569 (0x247641)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1076b178dfcc599f8de3d8db587bc6a97166efe6
        Validity
            Not Before: Sep 27 17:15:23 2023 GMT
            Not After : Sep 28 17:15:23 2025 GMT
        Subject: CN=37345de6a88bec06165e3ed4215dfeb27ebfc7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:b8:b5:ab:72:54:c3:e3:5c:6f:c2:e5:33:
                    3c:a2:23:36:4b:fa:ea:4f:c2:f1:51:02:86:13:fc:
                    12:b0:28:64:1c:5f:63:52:39:14:b6:b2:a7:74:a4:
                    e5:3e:f2:6d:63:6f:b8:f5:92:48:23:36:72:ba:29:
                    0a:92:3d:92:96:93:51:b7:54:0e:17:90:28:eb:c2:
                    94:4b:c1:02:7a:0a:77:47:45:0c:ef:ea:e3:49:ef:
                    13:d6:9b:01:9f:55:23:a6:e7:74:32:1b:ce:4a:2b:
                    93:02:34:83:a6:72:3c:ed:aa:aa:62:cc:be:81:b7:
                    fc:e6:a8:2d:00:0f:2f:fe:cb:08:3d:7e:5b:86:cc:
                    8a:9e:50:1b:d5:40:5b:e7:26:e0:bb:00:29:9d:6c:
                    de:3d:0b:ab:e3:09:23:a8:3c:be:f4:f3:67:cb:38:
                    91:b3:81:e6:b3:3e:cd:21:a2:74:02:72:03:56:df:
                    72:29:08:ff:ef:e2:c9:3a:fc:67:98:15:b9:e3:44:
                    ee:a5:b8:a8:68:24:64:2d:4c:a8:9b:20:80:a0:77:
                    14:43:d3:31:56:65:8b:f7:e9:8a:71:6e:73:ba:3e:
                    cb:e2:90:ef:5d:55:d4:96:73:34:8d:49:5b:71:3c:
                    38:44:13:3c:be:9a:b4:42:c5:61:57:8e:ae:80:88:
                    62:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:25:F4:71:B3:F4:6A:B0:B4:D7:9A:D4:6D:0C:13:B4:8C:85:B1:3D
            X509v3 Authority Key Identifier:
                keyid:62:54:C0:88:69:DE:40:D1:4C:A6:E1:4A:A3:7F:49:06:2A:3B:EB:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1076b178dfcc599f8de3d8db587bc6a97166efe6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/37345de6a88bec06165e3ed4215dfeb27ebfc7d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ddaf4635-6fef-4ac8-a0a7-62f2a304a226/1076b178dfcc599f8de3d8db587bc6a97166efe6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.180.0/22
                  190.211.80.0-190.211.91.255
                IPv6:
                  2800:a30::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:01:22:a7:12:14:fc:ab:1a:5c:3b:a1:c9:a8:f8:1d:cd:db:
         be:f1:8f:ad:03:de:1f:58:9a:28:1b:c3:86:3e:ae:d9:41:c9:
         29:bb:9a:41:96:da:bf:26:a9:82:24:9a:fb:55:1a:fd:0f:ab:
         d9:9a:d3:ee:7e:c2:22:14:ca:fb:37:4d:ea:e3:92:d6:2f:fa:
         27:09:a1:f4:dc:46:9b:e9:26:b2:f2:dd:52:45:9b:47:10:30:
         a5:aa:0a:8c:a5:cf:3f:cf:a8:e1:63:a0:1e:2f:3b:41:35:73:
         0c:e4:5f:f3:11:f4:a3:93:b7:3e:1f:2c:91:59:31:0a:1b:7e:
         1e:34:ad:7a:71:b0:05:b4:60:7b:64:bb:5d:dd:45:28:39:93:
         9d:6c:a8:e9:cc:ad:36:3b:36:ed:3c:82:af:7e:6d:c3:fd:31:
         f3:85:60:83:88:a1:f8:f0:74:bb:46:b5:c3:16:5e:a9:72:ee:
         54:80:41:32:75:2e:cb:6e:fb:e4:c4:c2:01:75:f5:c9:5b:bb:
         49:bc:c1:83:4e:4f:13:8b:96:fb:e5:8f:cd:b9:8f:e0:05:0c:
         47:f2:3e:51:71:9e:50:99:bf:c6:d6:84:2e:9a:28:52:1b:f8:
         9f:8d:76:ab:54:3d:5e:d2:0d:94:91:6c:e8:39:d7:d3:93:4b:
         f2:b8:4f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----