Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/070d1b47-85b0-4ddd-ac72-e76f7c316898/3e8791ca20c713af2f1a14c9abe5dd19864b9a1b.roa
File:                     3e8791ca20c713af2f1a14c9abe5dd19864b9a1b.roa (raw, json)
Hash identifier:          wxTjg80odQ+2siPSTnU64cEEs6Mp3PqLkbPw6oPOdJA=
Subject key identifier:   5F:2D:FB:78:15:8C:E9:D0:C0:8C:8E:93:BF:7F:03:24:80:4A:1F:5E
Certificate issuer:       /CN=e6322d97bafb983117628a59a2b307310ae7154d
Certificate serial:       1204CE
Authority key identifier: D2:CC:17:6A:68:CC:08:8B:69:04:F5:4F:4C:E2:99:E5:9D:2A:EC:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6322d97bafb983117628a59a2b307310ae7154d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/070d1b47-85b0-4ddd-ac72-e76f7c316898/3e8791ca20c713af2f1a14c9abe5dd19864b9a1b.roa
Signing time:             Wed 29 Mar 2023 08:30:00 +0000
ROA not before:           Tue 28 Mar 2023 08:30:00 +0000
ROA not after:            Thu 27 Mar 2025 08:30:00 +0000
asID:                     262181
IP address blocks:        190.185.64.0/20 maxlen: 24
                          190.185.80.0/20 maxlen: 24
                          2803:51c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180878 (0x1204ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6322d97bafb983117628a59a2b307310ae7154d
        Validity
            Not Before: Mar 28 08:30:00 2023 GMT
            Not After : Mar 27 08:30:00 2025 GMT
        Subject: CN=3e8791ca20c713af2f1a14c9abe5dd19864b9a1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2d:47:83:2d:93:1a:77:5c:a6:3a:b8:aa:af:
                    45:86:36:18:50:9a:49:5a:10:ac:2d:19:a2:79:fb:
                    b7:ac:b0:36:9a:ca:c2:52:fa:81:7b:5a:fb:6c:31:
                    a7:14:4b:c4:e6:dd:26:f5:32:5e:ac:ab:8f:5e:f7:
                    0b:01:ed:a5:f3:7e:f6:e8:4d:ed:3c:dd:12:97:da:
                    fb:60:81:d0:d2:d3:6a:39:a2:28:08:85:7c:53:dd:
                    13:6d:b5:7a:e7:7e:64:e6:f3:7d:db:08:66:a2:1e:
                    78:bc:2a:d4:25:e8:22:12:c3:a6:75:fc:c1:bf:f3:
                    f5:57:d3:5a:58:95:c6:c2:40:b0:49:99:8b:37:02:
                    aa:03:55:82:08:35:63:18:f1:e6:f3:ea:f8:79:88:
                    a0:2c:47:2b:ac:27:55:3a:42:5d:c3:ba:28:93:2e:
                    60:20:e1:f8:ec:f7:12:2c:17:63:4a:5a:d0:4c:48:
                    8d:2a:bd:89:3c:96:7b:1d:0f:52:3a:74:13:90:68:
                    58:df:45:54:d8:e0:90:bd:9f:36:b9:1c:a5:f6:98:
                    d3:ba:1f:5d:80:da:b9:57:4b:fa:48:3f:86:05:f9:
                    1d:d6:62:5b:a2:ae:33:f5:dd:3d:6f:ad:76:78:8d:
                    74:2f:fa:3b:94:ea:13:14:00:56:22:c5:86:92:72:
                    0c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2D:FB:78:15:8C:E9:D0:C0:8C:8E:93:BF:7F:03:24:80:4A:1F:5E
            X509v3 Authority Key Identifier:
                keyid:D2:CC:17:6A:68:CC:08:8B:69:04:F5:4F:4C:E2:99:E5:9D:2A:EC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e6322d97bafb983117628a59a2b307310ae7154d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/070d1b47-85b0-4ddd-ac72-e76f7c316898/3e8791ca20c713af2f1a14c9abe5dd19864b9a1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/070d1b47-85b0-4ddd-ac72-e76f7c316898/e6322d97bafb983117628a59a2b307310ae7154d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.185.64.0/19
                IPv6:
                  2803:51c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:e7:1c:ae:fd:55:54:c0:c2:d2:be:bf:3e:2e:47:50:e8:18:
         23:3c:61:0f:db:89:0d:04:c7:77:00:89:07:55:64:bf:74:f1:
         1c:f1:c5:3e:00:c6:78:da:c5:16:e6:fa:b4:1c:8f:ae:ce:d8:
         36:7c:d2:25:93:d6:5f:81:47:1d:48:1a:46:9a:16:4b:17:ae:
         48:96:b6:3c:63:a7:25:3c:2c:4d:2e:5a:ad:83:a6:5c:e9:71:
         b0:5f:ce:fb:65:e2:4c:d5:8a:31:75:87:a6:03:e6:33:8f:36:
         7e:92:5e:6c:02:0e:45:d5:19:d8:a9:d9:0c:dc:85:aa:c6:c4:
         7d:0b:53:0e:c0:09:86:a1:c2:13:96:3e:2c:67:03:d0:48:4c:
         06:5d:90:3f:63:7b:14:3b:9a:2b:d5:7a:ff:c5:89:9f:35:99:
         a3:c0:7a:cf:59:f6:73:ab:5c:7f:06:2a:56:89:75:8d:94:32:
         b6:01:0b:8f:02:ff:af:79:aa:db:d3:e8:8d:42:0c:eb:3d:66:
         56:bc:e2:3e:48:58:d7:71:a2:c3:3c:8b:13:1b:95:76:d8:b4:
         6e:fd:d7:c8:1e:46:5f:64:4e:74:78:2c:b2:77:49:1f:57:2f:
         6a:b8:d1:48:01:ee:4d:3a:c5:69:3b:f4:24:63:bc:62:62:c7:
         8e:2c:50:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----