Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7e81b4bf9838c2bf27defb18352cc563d1b4848f.roa
File:                     7e81b4bf9838c2bf27defb18352cc563d1b4848f.roa (raw, json)
Hash identifier:          K81RlgbzT3cFoudGaK9ovqkMHNRhMtPvy/dRWVVDC0c=
Subject key identifier:   0C:18:6F:A0:65:C1:FC:55:A9:F7:76:FB:3A:AC:C1:D4:AD:1A:8D:F8
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2E25B9
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7e81b4bf9838c2bf27defb18352cc563d1b4848f.roa
Signing time:             Sun 17 Mar 2024 18:46:48 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.145.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3024313 (0x2e25b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=7e81b4bf9838c2bf27defb18352cc563d1b4848f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b6:05:9f:d4:35:e0:ed:3e:6d:6a:76:ec:60:
                    0b:11:fa:ee:3c:ce:83:56:41:f5:fd:37:95:86:2b:
                    35:0b:24:5e:5f:c3:0c:c6:32:e7:e1:bd:f2:ed:f8:
                    7e:d0:48:e5:33:74:3f:66:d4:49:1a:77:ec:be:7d:
                    35:00:a3:13:bf:b4:bb:db:38:c9:10:e1:f3:05:d6:
                    6e:02:f1:df:97:a8:01:58:fa:f4:7f:1d:44:f3:91:
                    a1:04:0e:e6:cb:e4:12:73:c8:10:03:79:1e:10:6c:
                    46:81:3a:a6:79:1c:7b:12:4a:8a:1a:ba:28:d0:10:
                    c6:dd:8b:81:a9:a1:b0:7a:15:a6:11:8c:de:32:5b:
                    ab:4f:51:89:d6:fc:9a:58:c7:65:0c:dd:a0:5b:e5:
                    29:39:68:18:7d:ba:fc:4f:9f:bd:eb:51:3e:8a:ad:
                    55:37:61:97:34:85:65:6d:28:c7:6f:ef:69:67:97:
                    43:b4:81:fb:3e:b9:89:70:80:c0:3c:75:49:ac:e0:
                    cd:cd:7c:32:76:59:38:7a:ae:1e:97:e2:f0:04:99:
                    35:1a:b3:21:4d:4f:fa:40:40:f3:bd:80:42:dc:1f:
                    a7:07:c0:8e:7f:1a:65:fe:ce:9d:1e:b7:8d:3c:06:
                    3d:90:37:82:b7:3c:e1:8d:04:02:af:bf:66:73:c1:
                    eb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:18:6F:A0:65:C1:FC:55:A9:F7:76:FB:3A:AC:C1:D4:AD:1A:8D:F8
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/7e81b4bf9838c2bf27defb18352cc563d1b4848f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.145.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         42:dc:a5:a9:12:07:15:45:81:74:48:78:fd:b5:30:93:e0:5d:
         8d:74:1c:6d:7a:9b:c4:63:f9:fb:01:9f:2d:e8:5e:58:45:ec:
         74:43:2b:ce:e3:ba:a4:1b:b5:e7:e4:37:87:9a:87:cd:a0:2f:
         7c:68:d9:f5:f6:f1:e5:04:ef:24:6f:05:6b:1f:34:3e:f8:12:
         b5:2c:1e:d7:72:32:fe:d9:29:e1:76:9d:c9:df:e9:88:c0:17:
         bc:23:4a:63:a9:de:26:5e:6c:e5:28:cf:30:05:bb:81:ad:61:
         f5:13:19:86:ee:5c:2e:da:9d:03:2c:01:91:59:d0:f6:df:02:
         e5:e2:3c:a4:4e:fa:43:46:97:36:f7:63:75:e7:6a:5e:93:67:
         cd:ad:eb:f7:c0:74:30:45:f9:5b:0e:23:8f:9c:b3:81:03:58:
         17:62:0e:c8:7e:8c:cb:8b:b9:86:2f:7b:33:34:b8:ef:9e:59:
         95:80:d2:74:c2:8c:21:b5:ff:6b:d0:6f:46:db:6d:0a:a7:2a:
         33:a9:2b:19:19:64:9e:93:03:ff:76:5b:97:08:1b:66:37:da:
         57:70:78:e9:02:6f:f4:ea:07:b3:f2:b4:41:e5:d6:8b:be:b2:
         9c:23:c5:a6:04:fa:9c:76:20:fe:72:8a:bb:e3:c6:75:13:42:
         17:f0:c0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----