Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/ec4cf87f6f03061cbbce27085519eb723d9c8b91.roa
File:                     ec4cf87f6f03061cbbce27085519eb723d9c8b91.roa (raw, json)
Hash identifier:          npfTXYid3uCHbISFA1XDOgIOs03w+1c8YlB6B7tJWhI=
Subject key identifier:   7D:C1:58:8C:ED:1C:9F:8C:C1:99:4E:EC:68:77:C1:6A:C1:14:5A:F6
Certificate issuer:       /CN=797fbc6cdda2f3661b2a335060cb84d808706659
Certificate serial:       28CE66
Authority key identifier: 2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/ec4cf87f6f03061cbbce27085519eb723d9c8b91.roa
Signing time:             Thu 30 Nov 2023 18:15:45 +0000
ROA not before:           Thu 30 Nov 2023 18:15:45 +0000
ROA not after:            Sun 30 Nov 2025 18:15:45 +0000
asID:                     273120
IP address blocks:        190.217.20.96/28 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2674278 (0x28ce66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=797fbc6cdda2f3661b2a335060cb84d808706659
        Validity
            Not Before: Nov 30 18:15:45 2023 GMT
            Not After : Nov 30 18:15:45 2025 GMT
        Subject: CN=ec4cf87f6f03061cbbce27085519eb723d9c8b91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ad:43:8f:14:c1:9b:b2:cc:9c:9f:5e:d8:14:
                    08:be:84:e5:75:ae:96:bb:c5:3a:63:d8:8a:4c:05:
                    55:61:04:04:46:ba:19:36:88:73:17:94:c0:4a:54:
                    1b:de:f1:8c:60:47:f9:7f:72:0e:4e:d3:99:24:50:
                    dd:d8:a3:b4:37:21:ae:7a:c1:86:45:ed:66:84:6a:
                    d2:d4:38:41:a4:4e:ac:98:61:6b:06:7a:03:ae:5d:
                    92:3f:26:2f:a4:d9:89:cd:2b:26:44:8b:b2:30:7a:
                    ce:76:f2:cf:90:d7:09:a8:b6:d2:19:53:7e:95:9a:
                    70:d6:cb:9f:2d:8f:ef:2a:72:5d:a6:6d:e9:9d:cb:
                    a6:c3:28:41:9d:c1:80:2c:ed:18:bb:81:b8:03:a6:
                    b7:29:dd:54:8f:04:fb:6b:d5:83:99:7d:22:cb:f6:
                    a6:22:b8:bd:5d:94:4f:e0:ac:d4:eb:59:d9:1d:93:
                    14:9b:1b:e4:68:63:a0:de:54:14:b1:2e:c6:96:ce:
                    82:35:bb:ad:6b:72:5b:f0:06:02:94:2f:8f:a0:e3:
                    ad:53:e5:67:62:e2:9e:3a:e7:a9:c9:dd:af:c5:16:
                    fe:3f:40:ca:04:70:35:48:24:16:62:f9:65:6b:89:
                    50:1d:e0:9d:36:90:15:cf:eb:cd:38:1e:15:7e:7c:
                    62:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C1:58:8C:ED:1C:9F:8C:C1:99:4E:EC:68:77:C1:6A:C1:14:5A:F6
            X509v3 Authority Key Identifier:
                keyid:2B:62:77:3F:02:D2:1B:26:DA:9D:06:63:62:D0:AC:29:75:5F:69:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/797fbc6cdda2f3661b2a335060cb84d808706659.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/ec4cf87f6f03061cbbce27085519eb723d9c8b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/127e4095-2f45-4ec9-8f75-e799385fbad0/797fbc6cdda2f3661b2a335060cb84d808706659.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.217.20.96/28

    Signature Algorithm: sha256WithRSAEncryption
         5e:25:2e:a1:b1:04:a7:72:1a:18:d7:eb:43:43:0b:26:61:b9:
         fe:e0:80:48:b0:9b:fa:77:eb:be:34:99:8d:fd:38:3e:29:1c:
         3e:bc:6d:95:bf:c8:17:fd:56:e6:65:38:4f:ae:7b:21:db:eb:
         83:ea:c5:2f:47:84:5c:dd:73:c2:02:ef:d0:6d:b3:9d:3d:9b:
         77:f7:e7:04:dc:fe:fa:5d:7d:a6:63:09:66:a6:ab:7a:2e:99:
         97:ab:bf:c3:66:e1:e9:7d:b1:75:34:7d:63:4a:52:5f:72:6e:
         98:1c:28:f1:41:f8:81:08:c4:74:a7:43:b5:ba:51:7f:a4:d9:
         e8:90:13:55:84:b2:35:84:40:78:2f:73:c9:df:71:48:aa:3a:
         33:8d:18:dc:c3:11:0d:0d:87:6c:93:d9:31:b0:32:64:00:1b:
         c7:d3:89:42:bd:f8:86:69:98:b0:ec:a6:39:f1:c0:73:c8:4a:
         a7:21:50:a4:9e:3a:08:6f:71:d6:57:53:a7:4b:fe:02:ff:bc:
         23:f0:a1:91:23:b7:fb:96:c7:53:9c:e8:32:51:80:0e:b1:af:
         7f:18:16:0d:0b:32:a5:3b:23:6e:78:9e:71:63:15:82:9c:c8:
         70:29:1b:93:ff:ea:c9:43:99:68:79:fb:87:da:90:d9:aa:46:
         11:74:4d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----