Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/f193a8640b71f4ca17c47d7f0c64804b19116ffe.roa
File:                     f193a8640b71f4ca17c47d7f0c64804b19116ffe.roa (raw, json)
Hash identifier:          Tm0n924CQIi0W1jZtp0YeqTl9FKZS1t9yTeQ/eg7oc0=
Subject key identifier:   AD:0D:D8:73:70:B9:7D:64:F2:AB:0A:4B:E6:C0:22:9A:94:01:19:D9
Certificate issuer:       /CN=1866c45b21787e12af4deafc085303e786f50b2f
Certificate serial:       2D5772
Authority key identifier: C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/f193a8640b71f4ca17c47d7f0c64804b19116ffe.roa
Signing time:             Sun 17 Mar 2024 18:42:53 +0000
ROA not before:           Sun 17 Mar 2024 18:42:19 +0000
ROA not after:            Sat 17 Mar 2029 18:42:19 +0000
asID:                     32787
IP address blocks:        190.145.228.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2971506 (0x2d5772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Validity
            Not Before: Mar 17 18:42:19 2024 GMT
            Not After : Mar 17 18:42:19 2029 GMT
        Subject: CN=f193a8640b71f4ca17c47d7f0c64804b19116ffe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:78:cd:78:e7:31:c9:87:08:55:7d:63:b5:86:
                    bf:4c:c1:38:3b:26:0a:35:8b:8a:ca:41:90:34:9b:
                    b3:4b:da:ab:77:ed:4d:69:47:00:67:99:07:c4:44:
                    2f:bb:d4:62:25:9a:93:23:70:e9:29:50:40:bb:6f:
                    5e:eb:ec:de:08:e8:f0:a4:a6:82:ea:e8:5a:b8:3c:
                    ab:97:cd:8e:09:01:ab:01:56:d0:4c:ef:20:dd:9a:
                    cc:9c:2d:41:46:1e:f0:20:4f:d5:92:03:83:d4:08:
                    52:92:ab:c0:df:1e:1d:9c:5d:35:7a:ae:ea:35:4d:
                    20:17:8b:b9:56:74:87:76:03:93:79:a8:41:e3:71:
                    84:7b:f8:33:b9:50:0d:66:eb:cb:e5:12:98:b5:fe:
                    94:6c:ca:40:b5:86:43:fb:7f:fa:34:78:c9:c6:7c:
                    d6:ee:d2:9e:8e:dc:25:5c:8f:fd:c6:e1:0d:ce:aa:
                    9e:db:71:93:9e:ae:97:77:6a:41:22:57:73:de:93:
                    45:ef:ae:55:1c:a5:6f:06:9c:3e:e0:2e:99:56:35:
                    e0:5e:55:5e:38:a1:e7:57:48:4b:00:13:ac:c3:9b:
                    b2:87:5b:ac:37:07:e4:3b:13:4a:ac:cf:db:99:36:
                    e0:75:9b:75:62:e9:13:9c:8f:0e:85:ab:fb:d5:b2:
                    9a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0D:D8:73:70:B9:7D:64:F2:AB:0A:4B:E6:C0:22:9A:94:01:19:D9
            X509v3 Authority Key Identifier:
                keyid:C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/f193a8640b71f4ca17c47d7f0c64804b19116ffe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.145.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:17:cc:23:2f:a3:1e:da:5e:97:16:7e:f4:ba:f0:aa:9e:83:
         6d:e0:bb:28:d7:ce:24:19:cf:24:29:88:c7:e6:96:a9:ac:c1:
         18:44:c0:c6:08:24:8e:89:ef:aa:0f:05:ca:84:a9:7d:15:d4:
         26:da:21:78:9b:f5:b6:45:00:d0:a3:ff:7d:bd:cd:ef:c6:7c:
         04:7c:cb:54:56:38:68:ab:03:ab:07:88:a0:dc:e9:d8:79:20:
         ca:5c:58:23:f4:84:b3:d0:db:c7:e6:c7:c3:bc:13:a4:16:dc:
         d5:07:83:02:80:d6:e9:2d:94:40:9b:c6:e4:22:01:c4:b4:7e:
         a7:a9:1f:8f:ff:8d:51:f8:58:97:a8:4f:fa:69:d2:b2:f8:1d:
         9c:73:2a:ea:47:8a:11:e1:d3:ea:38:1c:4d:68:3f:fe:40:b9:
         c2:dd:a3:79:58:53:03:4a:6b:51:7f:0f:c9:d4:40:a6:a0:d0:
         36:95:7f:5b:30:aa:f5:37:0d:4e:cd:64:30:11:f4:b5:5a:11:
         4c:cc:55:f7:78:a6:01:c4:0e:d7:c4:bb:85:e4:08:60:9f:c1:
         be:37:0a:ed:d2:d7:ca:ad:ba:36:f1:39:fc:a2:e0:6e:99:ee:
         58:9f:24:df:9d:5f:a2:87:ac:e9:bf:4b:d4:5f:76:39:54:db:
         5c:d5:fd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----