Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c19c95f4c25113ebf06e8629210a016f5b6aae5f.roa
File:                     c19c95f4c25113ebf06e8629210a016f5b6aae5f.roa (raw, json)
Hash identifier:          RtoRMcODj+tFrWsN1VFAVeQBd0pYfwZ0Fg/YQXp5BtY=
Subject key identifier:   F9:A0:9C:0C:97:26:12:41:32:50:3F:12:66:B4:41:0D:3B:06:F4:EF
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2E1BE7
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c19c95f4c25113ebf06e8629210a016f5b6aae5f.roa
Signing time:             Sun 17 Mar 2024 18:46:36 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     14080
IP address blocks:        190.158.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3021799 (0x2e1be7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=c19c95f4c25113ebf06e8629210a016f5b6aae5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ae:f5:b4:b0:97:6d:f0:5b:98:1d:74:28:0c:
                    0c:41:62:2f:68:64:83:15:60:40:46:3c:1c:1c:a6:
                    26:98:b5:0e:79:cf:dc:3e:8a:04:49:a4:f2:4e:70:
                    2d:21:39:18:42:4b:7a:d7:80:00:44:61:9f:03:d3:
                    20:a3:d5:80:94:9f:3d:6c:fc:61:ea:5e:15:df:41:
                    99:d1:30:58:44:69:58:90:57:38:c4:ae:ad:20:f1:
                    c9:bb:68:ef:78:e8:72:66:78:de:ad:42:31:20:24:
                    5f:ad:25:17:45:6f:18:43:71:f2:3c:40:e5:1d:d8:
                    7f:f3:1e:83:8f:e2:3a:5e:39:a8:ab:58:44:5f:47:
                    d4:d6:e8:8c:a2:99:33:fb:23:a0:58:af:ef:ea:61:
                    f7:a9:27:20:64:2b:36:c3:be:ce:c5:99:7d:94:19:
                    b8:f0:39:5f:09:55:8c:91:b3:4b:d3:4b:71:bb:c6:
                    d2:0a:5d:be:7c:67:e1:55:ad:06:40:bc:7a:ca:8a:
                    b0:b9:d3:ce:c7:cb:b7:b4:d8:1b:9a:d0:dc:aa:af:
                    8e:7a:69:6d:ef:d5:da:75:fe:04:27:52:f3:d8:5b:
                    15:1f:48:4d:d7:48:3f:4e:86:63:0b:75:f0:5d:fe:
                    1c:2e:60:08:8a:15:bb:1b:ba:bf:d2:d4:73:a0:b5:
                    81:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A0:9C:0C:97:26:12:41:32:50:3F:12:66:B4:41:0D:3B:06:F4:EF
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/c19c95f4c25113ebf06e8629210a016f5b6aae5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.158.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:52:6e:32:74:ac:85:fb:93:2e:36:7c:4a:f0:7f:76:19:38:
         bd:8e:4e:b7:c0:c6:5f:9e:6e:33:91:50:04:c0:d2:e7:87:53:
         ac:b1:53:14:4b:9b:f7:c6:30:4c:86:a5:6e:9d:da:ad:23:85:
         34:77:ec:23:16:04:0e:21:c4:64:05:9f:70:06:59:e5:ea:09:
         b9:4b:d7:ad:7d:da:80:31:27:53:06:f3:6b:53:df:c1:38:4f:
         cd:cc:14:49:17:cb:6f:37:91:a6:e2:bf:9a:c0:eb:ca:47:5a:
         2d:e0:30:1a:c3:fe:66:d4:1d:01:0b:cd:95:81:2b:5c:5e:d8:
         61:24:eb:ba:2d:e9:78:e6:14:36:b3:45:08:f6:72:95:aa:08:
         71:7e:ee:c8:1b:28:3f:53:2e:6d:15:62:9c:ba:e4:a2:79:f1:
         72:af:9b:4f:7a:2f:9b:b4:0f:8b:ca:d5:4b:a7:92:fc:d1:62:
         3d:b3:03:0d:1c:f2:21:9f:66:ee:e1:8a:b5:e0:8c:7a:a6:cd:
         93:a7:06:2b:46:b0:dc:92:1b:fe:93:60:08:3e:4c:11:17:29:
         34:36:9f:4e:35:0c:0c:16:7e:07:7a:89:2c:2d:44:ec:d1:a3:
         0a:37:7f:96:1d:13:21:93:0b:c7:14:1e:43:96:41:34:a1:2d:
         56:e6:c1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----