Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10a66029-9837-460d-b4c0-76df2d5a1730/19f7ab41c9dfe939525aaadbc58c0e7eddbfda50.roa
File:                     19f7ab41c9dfe939525aaadbc58c0e7eddbfda50.roa (raw, json)
Hash identifier:          dnhNTguiUEfTZVhVRwifacc0UO7wxc55hKWtE2SGMuE=
Subject key identifier:   74:DF:D2:15:BA:0D:09:20:32:DC:B9:8F:B8:39:A5:BC:A5:EA:46:14
Certificate issuer:       /CN=919b8ddca443dca5af7dde710225040d3f9e4ebb
Certificate serial:       2653A2
Authority key identifier: CB:68:9E:CC:9E:81:F1:02:85:6E:91:05:D9:6F:7F:4C:51:64:01:15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/919b8ddca443dca5af7dde710225040d3f9e4ebb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10a66029-9837-460d-b4c0-76df2d5a1730/19f7ab41c9dfe939525aaadbc58c0e7eddbfda50.roa
Signing time:             Wed 29 Nov 2023 18:32:27 +0000
ROA not before:           Wed 29 Nov 2023 18:32:27 +0000
ROA not after:            Sat 29 Nov 2025 18:32:27 +0000
asID:                     394684
IP address blocks:        190.113.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2511778 (0x2653a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=919b8ddca443dca5af7dde710225040d3f9e4ebb
        Validity
            Not Before: Nov 29 18:32:27 2023 GMT
            Not After : Nov 29 18:32:27 2025 GMT
        Subject: CN=19f7ab41c9dfe939525aaadbc58c0e7eddbfda50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2b:ec:c4:85:86:cc:da:23:5d:e2:72:9f:1e:
                    f9:17:01:b8:a3:25:24:27:fc:63:09:70:d8:80:9a:
                    fe:6d:49:04:4c:3a:d7:75:38:2d:99:3b:15:d1:c5:
                    bd:2b:6b:dc:2c:e9:78:fc:e6:a6:ae:3a:2e:d8:94:
                    98:1e:75:3c:08:5a:68:ec:a8:72:27:98:de:51:dc:
                    9f:28:ad:ca:45:81:b7:e9:c4:30:19:98:75:d8:2f:
                    13:19:b7:c9:99:37:30:08:59:aa:2f:06:55:f7:e6:
                    44:44:6b:cd:65:29:68:eb:8a:10:d8:99:46:a3:03:
                    bf:e7:78:99:7e:ff:b3:24:51:8b:f0:1e:9f:51:9e:
                    b0:ff:1c:f2:5c:72:2e:6a:50:40:3b:7e:45:0f:5d:
                    16:53:27:c6:d1:a2:06:84:43:7b:5a:66:84:60:65:
                    4c:8c:2a:bc:44:a3:3f:fa:d4:f2:5e:e2:ac:b8:6a:
                    55:10:16:41:d1:97:5e:5c:67:1b:a5:0d:7a:98:19:
                    cb:96:f7:e7:d5:58:73:60:8e:ec:97:a5:a1:74:33:
                    57:35:3e:87:0b:bb:d0:bd:83:de:0f:c6:0e:ab:8c:
                    ac:33:f0:55:d5:0f:d7:89:89:38:37:c8:50:02:e0:
                    25:79:c4:e1:b8:3d:d9:4b:e2:a9:ee:09:f5:1d:25:
                    68:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DF:D2:15:BA:0D:09:20:32:DC:B9:8F:B8:39:A5:BC:A5:EA:46:14
            X509v3 Authority Key Identifier:
                keyid:CB:68:9E:CC:9E:81:F1:02:85:6E:91:05:D9:6F:7F:4C:51:64:01:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/919b8ddca443dca5af7dde710225040d3f9e4ebb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10a66029-9837-460d-b4c0-76df2d5a1730/19f7ab41c9dfe939525aaadbc58c0e7eddbfda50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10a66029-9837-460d-b4c0-76df2d5a1730/919b8ddca443dca5af7dde710225040d3f9e4ebb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:b0:17:86:f6:fa:b8:df:8a:61:bd:c4:a5:f8:ba:e2:16:60:
         15:05:9d:14:5b:c4:74:06:a9:c1:1f:07:9f:e8:79:d5:1e:b7:
         e5:e6:82:50:b2:e0:5e:46:22:9d:ab:a6:48:8a:f0:71:88:c3:
         fd:55:b6:53:d6:ba:eb:fa:ee:06:dd:f7:f7:67:3b:d4:79:1c:
         b8:30:ba:f6:fe:3d:98:9d:0d:aa:14:1b:cd:8b:3c:b3:2e:70:
         b1:5c:81:83:dd:de:1e:b5:2d:ff:e5:75:61:7b:2c:03:e1:fd:
         39:fd:cc:00:e6:8c:28:3e:7c:62:32:cd:b7:ee:65:d4:37:83:
         25:ea:2c:9f:8e:73:74:b6:f2:b2:13:dd:10:f7:d1:7c:9b:91:
         6f:6b:cd:7c:cf:9c:a3:88:e2:53:c4:13:d4:bb:c7:88:ec:ae:
         40:c7:e7:99:d8:c9:f0:74:82:ca:0c:f8:97:23:51:ee:e4:13:
         a8:98:4b:39:2d:dc:9d:3a:1a:0e:5b:3e:f1:17:82:68:49:0a:
         88:d6:e3:8f:b7:c8:d4:54:5e:da:20:d0:63:b5:e3:42:7c:9c:
         d9:69:9a:d0:7f:75:3e:41:4d:c0:e9:0d:94:6e:bb:89:ed:d2:
         45:5c:a5:41:5f:b0:7a:bd:9b:13:e4:2d:e2:88:32:bf:8d:79:
         36:52:1b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----