Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/38a4f83d05f9aaf817e14f95ac8839e52371d840.roa
File:                     38a4f83d05f9aaf817e14f95ac8839e52371d840.roa (raw, json)
Hash identifier:          LypkVqCxYOqbBQQU7nA8mRmq//vqqTpK4fSNNgFcwks=
Subject key identifier:   56:FF:67:FA:56:E9:1A:51:28:B3:B2:5D:20:3E:11:BC:81:89:EF:25
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D53C2
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/38a4f83d05f9aaf817e14f95ac8839e52371d840.roa
Signing time:             Sun 17 Mar 2024 18:42:51 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     27864
IP address blocks:        190.145.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2970562 (0x2d53c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=38a4f83d05f9aaf817e14f95ac8839e52371d840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f8:3a:ce:26:98:de:7e:f2:f3:b9:a3:8b:a9:
                    cf:99:2c:a0:6e:bc:a6:fb:d0:71:79:3d:1d:08:71:
                    19:52:b1:b9:54:9b:c4:e1:8e:f8:8d:be:ee:6e:4a:
                    af:a0:4f:78:22:e2:39:8b:16:65:7b:e6:d3:ab:37:
                    af:71:8a:2f:34:2b:64:bd:f8:aa:ea:6b:a9:4c:46:
                    c0:04:e8:64:34:08:f8:d0:b3:9f:53:a5:a9:0d:55:
                    2f:5e:f8:9e:fe:cb:fe:bc:50:dc:12:78:ac:3e:0d:
                    78:ca:aa:74:29:b7:f8:f3:c2:97:5d:4c:50:f5:d3:
                    13:bd:22:69:fb:04:13:f6:49:ae:ed:28:7c:7c:71:
                    d4:19:b6:a0:42:a4:05:bb:ff:6c:1e:b4:e2:c6:b7:
                    81:e0:a5:11:e3:8d:ad:47:5d:e3:12:d8:92:e5:ea:
                    b5:07:7a:5d:5a:1e:fb:e4:8f:7c:0b:7f:5e:4e:6a:
                    a2:d3:6d:55:4d:6b:e4:5f:9d:da:ef:da:fc:44:c6:
                    c2:1c:36:7c:bf:8f:a5:cb:1d:2a:00:9e:61:bb:74:
                    e9:03:cf:5a:eb:b4:a0:7b:ef:3b:0a:63:bc:97:4e:
                    81:80:58:1a:6c:30:c2:03:7f:9b:ba:b9:8d:c5:d0:
                    cd:00:79:86:aa:56:10:fe:37:76:6d:5e:98:c5:86:
                    6a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FF:67:FA:56:E9:1A:51:28:B3:B2:5D:20:3E:11:BC:81:89:EF:25
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/38a4f83d05f9aaf817e14f95ac8839e52371d840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.145.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:36:a0:ac:84:b0:2e:4e:4d:51:18:ef:e7:66:a8:92:81:86:
         d3:46:56:92:1c:e5:ea:64:ce:b9:c2:98:bd:d2:fb:12:9c:01:
         1d:60:bd:99:f0:cf:e2:ab:e3:3f:b2:e7:b9:d8:87:14:23:39:
         f5:bc:c8:56:ab:d2:76:6e:4f:64:fa:ac:66:56:d0:85:cf:b1:
         7d:73:74:46:52:ae:d9:32:df:d4:5e:50:b3:5f:1e:1d:94:8c:
         36:7f:e8:93:b2:1f:b6:3a:76:62:cd:23:f1:f2:5b:78:aa:70:
         8e:40:00:f7:c7:f2:d3:e2:c5:cc:ac:07:73:a9:c8:0b:03:ad:
         c3:2b:0d:18:6f:82:b6:d2:a8:cc:93:30:3b:e3:d5:49:40:c8:
         97:55:0e:fc:1f:02:f6:d0:47:30:53:fe:ee:76:27:72:90:8f:
         e1:de:ce:d9:ec:c0:6a:bb:7b:31:fd:d2:82:90:64:3b:b5:ce:
         cc:00:3e:a2:ab:69:1a:7c:29:91:1e:3a:d8:7a:4f:b0:c1:1f:
         70:ab:78:b8:45:ce:1f:95:49:65:04:e4:26:35:31:a1:e7:84:
         f5:9f:1c:82:71:b4:eb:bb:51:58:87:fd:46:b2:4f:26:19:c2:
         8b:75:5a:e4:36:08:69:99:4e:9e:eb:14:9f:dd:20:ce:dd:8c:
         c8:a7:7b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----