Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0ccca93ef0ba5dc93e836c270328d36aa64f5186.roa
File:                     0ccca93ef0ba5dc93e836c270328d36aa64f5186.roa (raw, json)
Hash identifier:          PjCuvN5Q8YZs3NBcFBPsSQDO/YGfA10oRGqftEjJHY4=
Subject key identifier:   69:2F:46:20:41:D0:A2:B5:3E:1E:C2:6A:ED:65:34:A1:41:B3:B4:DD
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2E28C6
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0ccca93ef0ba5dc93e836c270328d36aa64f5186.roa
Signing time:             Sun 17 Mar 2024 18:46:55 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.145.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3025094 (0x2e28c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=0ccca93ef0ba5dc93e836c270328d36aa64f5186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:af:e3:79:18:d7:7d:06:89:07:4f:57:3e:fe:
                    2e:cb:80:ce:09:25:48:69:0c:73:36:a0:fb:74:b1:
                    56:21:63:b1:51:6e:1f:e9:2a:bc:09:b1:ac:f4:2d:
                    35:fd:f5:2e:a2:10:ce:f0:83:07:0e:11:67:f5:4e:
                    44:d0:27:01:c7:c6:ea:59:86:84:ef:15:a2:d1:1f:
                    dd:ee:c6:b4:21:5f:6e:86:b5:98:8c:f2:62:9f:25:
                    c8:88:d8:71:50:88:ad:ae:c1:fc:1e:f1:74:54:4a:
                    70:1a:7b:0e:48:84:69:f8:c8:96:de:95:87:b5:ec:
                    cf:f2:de:79:2d:e6:71:2a:1e:a9:b5:24:22:d8:a3:
                    5b:8d:74:89:34:14:ba:29:34:92:39:93:ae:1d:46:
                    fd:84:82:3a:4f:c0:7a:5c:f8:2e:7b:8e:4b:bb:0a:
                    8d:66:4c:6a:35:06:89:fa:0f:55:a8:dc:c5:2e:ae:
                    6a:db:af:46:a2:ed:18:aa:7f:f8:58:1b:2b:2c:f2:
                    4f:d6:51:23:0f:70:52:05:3e:ba:4f:86:2f:bf:a3:
                    fa:0a:e8:b2:7e:e5:21:7e:be:4b:d6:ac:97:bb:cb:
                    87:36:25:ad:c3:f4:21:2e:7c:2b:4f:bb:3c:89:c5:
                    79:3b:3a:4f:63:46:26:61:00:5f:1a:b5:13:72:4a:
                    1d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2F:46:20:41:D0:A2:B5:3E:1E:C2:6A:ED:65:34:A1:41:B3:B4:DD
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/0ccca93ef0ba5dc93e836c270328d36aa64f5186.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8a:4f:c1:dc:e0:f0:f1:79:f8:ce:e3:9e:a1:db:c6:82:f1:87:
         33:70:9e:53:f9:6c:3b:31:01:ad:60:3f:d3:1c:cc:70:ad:f2:
         0d:d7:37:b0:03:00:5b:ff:59:bb:1c:4b:d8:7a:67:2f:c5:25:
         54:26:c4:55:b7:37:1d:1f:39:3a:a5:fc:8b:23:1e:cb:f1:63:
         db:66:61:ed:71:f3:d2:28:68:29:20:6b:2c:03:54:d9:c1:91:
         ff:b8:92:00:12:36:ef:52:73:73:25:77:60:aa:d8:d2:6e:bb:
         3a:ea:dc:36:c6:63:cd:12:1f:17:82:6b:63:9a:1c:9a:d3:0a:
         4f:ab:01:65:ae:7a:ca:fe:2f:c0:37:dc:39:cf:5b:cd:5f:19:
         29:6d:fd:22:3c:1b:19:6a:be:36:0e:f8:ff:2d:4d:8d:3c:70:
         dd:50:aa:e1:2d:fe:73:59:d9:b0:4d:2b:cd:8e:5e:d3:06:79:
         6f:e2:a2:54:e1:10:07:86:35:59:d4:03:c3:e0:36:2f:96:ad:
         26:1b:03:9b:64:3f:b8:ea:48:53:da:4b:c1:ac:b8:95:d9:8c:
         ee:3d:42:2c:4e:95:ea:dd:c9:12:e7:06:a3:7c:95:e4:bc:d6:
         35:e8:42:14:63:34:08:0a:50:12:57:7e:63:46:20:9b:88:8c:
         6f:db:e8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----