Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/c375cd42b48348a944737973dd3c7d964fa86d2c.roa
File:                     c375cd42b48348a944737973dd3c7d964fa86d2c.roa (raw, json)
Hash identifier:          TL36wA6tn7sau2enZF4d6n5IvNkRJwyko16dLAwb8L8=
Subject key identifier:   83:BA:99:CD:65:01:EF:0B:1C:43:10:9D:9B:60:F8:71:63:E3:B6:A7
Certificate issuer:       /CN=035480923cfb3fc749b393f95a7b72c277263815
Certificate serial:       1820E6
Authority key identifier: 68:6A:59:4F:A9:67:FB:ED:13:5E:25:44:95:AE:8C:D6:9E:21:09:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/035480923cfb3fc749b393f95a7b72c277263815.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/c375cd42b48348a944737973dd3c7d964fa86d2c.roa
Signing time:             Sat 20 May 2023 00:08:00 +0000
ROA not before:           Fri 19 May 2023 00:08:00 +0000
ROA not after:            Tue 20 May 2025 00:08:00 +0000
asID:                     269953
IP address blocks:        190.89.128.0/22 maxlen: 24
                          2803:46e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1581286 (0x1820e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=035480923cfb3fc749b393f95a7b72c277263815
        Validity
            Not Before: May 19 00:08:00 2023 GMT
            Not After : May 20 00:08:00 2025 GMT
        Subject: CN=c375cd42b48348a944737973dd3c7d964fa86d2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:86:f2:af:a5:df:d8:71:cc:cb:9e:e9:f0:
                    cf:e8:0c:6d:74:8e:35:de:61:cf:98:69:22:49:e1:
                    4a:15:f4:5b:48:b5:3b:d5:96:63:3e:5d:e0:d6:2b:
                    62:b8:27:80:bb:7b:9e:61:c5:8e:19:7d:2b:18:3b:
                    67:2a:32:56:d5:85:0f:8a:a0:e1:d5:d8:2a:85:88:
                    c4:9d:bd:a8:4a:94:34:29:0f:0d:7f:1d:d5:8f:70:
                    64:83:e9:06:6d:c4:d0:54:f1:fd:4b:dc:04:6c:37:
                    cf:7e:6e:ce:90:32:ed:07:a2:54:f6:4a:aa:42:f1:
                    10:66:d3:41:cb:57:8e:fa:f9:6e:ef:cd:40:a2:3a:
                    d9:3f:27:37:bb:b3:b7:36:58:de:19:1f:b1:3b:f6:
                    2d:57:f7:ca:4b:3a:7f:fc:d2:36:57:e4:06:45:22:
                    1c:cc:fb:51:c6:f8:c0:b9:59:ce:69:8c:31:86:3c:
                    be:be:bf:6d:db:72:1d:59:af:b3:24:55:a5:62:9a:
                    24:f7:8d:25:e5:e5:e6:ea:82:c7:e0:fc:7b:20:5e:
                    4c:7a:29:81:26:57:6a:2d:9d:db:81:ac:83:60:0b:
                    e9:ce:8b:5d:a7:68:93:30:57:bd:43:f7:70:21:db:
                    fe:64:cd:2e:e3:b6:38:7d:40:47:a1:21:9d:2a:87:
                    e2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BA:99:CD:65:01:EF:0B:1C:43:10:9D:9B:60:F8:71:63:E3:B6:A7
            X509v3 Authority Key Identifier:
                keyid:68:6A:59:4F:A9:67:FB:ED:13:5E:25:44:95:AE:8C:D6:9E:21:09:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/035480923cfb3fc749b393f95a7b72c277263815.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/c375cd42b48348a944737973dd3c7d964fa86d2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1114e896-9a50-4f14-b19b-dc835dea8751/035480923cfb3fc749b393f95a7b72c277263815.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.128.0/22
                IPv6:
                  2803:46e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:fd:ef:95:9d:80:ad:26:b0:d4:26:fd:ff:9e:02:1f:4c:
         cb:6a:27:38:38:e4:4a:cf:da:84:8c:05:ee:2e:c4:09:b0:01:
         9b:bc:a6:54:09:d8:2b:8a:c3:7a:1d:6c:bd:e3:48:b9:62:a2:
         80:83:7e:f7:61:20:22:db:92:be:51:34:51:d4:06:43:a6:88:
         66:41:e9:d7:e1:e7:2e:e9:96:54:66:93:7b:d6:6b:83:22:27:
         8f:7f:83:a4:e1:07:ae:e2:17:2c:d6:ae:6e:be:61:89:54:d1:
         26:26:3b:e9:84:f0:bb:54:04:58:48:5c:83:85:ac:89:ae:49:
         d0:8b:29:8b:f8:0a:4f:19:91:08:71:e3:c2:20:6e:73:49:90:
         ac:a1:8c:41:21:c4:e6:61:d2:8c:f0:36:c0:e5:c0:0f:f3:5e:
         be:b9:58:86:b3:35:39:f4:0d:68:2c:39:e7:dc:30:4f:27:6b:
         01:9e:4e:7d:d1:eb:33:a8:ea:42:33:77:f7:e1:55:ab:32:53:
         70:42:40:1d:e2:78:ef:88:53:9a:cb:32:ef:88:f8:25:74:39:
         2d:bd:bf:8a:7e:5b:7b:6f:a5:43:30:17:f2:0e:7a:2c:af:55:
         fc:38:53:fa:8c:71:1c:53:b7:d2:65:6d:12:17:98:47:04:94:
         92:04:01:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----