Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/70e7861cfc7f209de0a7460b3c51a52cbcc995e4.roa
File:                     70e7861cfc7f209de0a7460b3c51a52cbcc995e4.roa (raw, json)
Hash identifier:          Om20ppeyY8VPAvmFVyf6N+TYs3CCQVfTWtBztIMEOgk=
Subject key identifier:   94:06:DB:D7:90:33:C9:B1:A4:AE:F5:7E:FF:60:17:EC:ED:8A:A6:2F
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       1F9B98
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/70e7861cfc7f209de0a7460b3c51a52cbcc995e4.roa
Signing time:             Tue 31 Jan 2023 16:03:05 +0000
ROA not before:           Mon 30 Jan 2023 16:02:12 +0000
ROA not after:            Fri 31 Jan 2025 16:02:12 +0000
asID:                     262171
IP address blocks:        190.93.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071448 (0x1f9b98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jan 30 16:02:12 2023 GMT
            Not After : Jan 31 16:02:12 2025 GMT
        Subject: CN=70e7861cfc7f209de0a7460b3c51a52cbcc995e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:52:b3:07:e8:ba:ce:0a:c7:fb:c0:dc:c3:
                    8c:ff:24:f0:14:dc:64:05:6c:4f:35:80:85:7c:82:
                    39:9c:43:bb:ec:b3:82:15:5b:f7:84:e8:54:54:1e:
                    e9:aa:da:17:d6:b9:46:42:d7:2d:6a:f9:d0:6c:c0:
                    7f:4c:cd:a8:b5:e6:05:6e:0a:eb:4b:f7:98:15:17:
                    a0:d6:aa:d6:7d:be:17:a1:f7:67:31:b7:5c:1d:c4:
                    0c:be:cb:22:31:65:e3:c1:8f:07:94:9d:a3:cc:88:
                    a7:31:14:0f:20:6f:5b:91:ed:ac:a4:91:e0:a6:a9:
                    06:a7:1d:84:9d:5f:13:96:33:8b:8a:b3:52:e8:91:
                    ce:82:19:01:06:b1:ef:2a:70:56:1e:33:3e:5f:c6:
                    98:9b:6a:61:bd:bb:e6:3b:c1:c6:7a:82:bd:2b:4d:
                    48:19:a0:74:78:83:88:df:32:3f:85:52:58:17:98:
                    3a:c8:93:ac:23:da:5c:fc:97:48:6f:af:f9:76:6f:
                    42:7d:ec:59:69:8b:93:f5:2b:70:c8:bd:93:58:a3:
                    22:d5:35:c3:bb:ea:36:ff:0c:56:e2:f7:ee:9d:45:
                    00:91:9b:b9:3d:86:bf:c4:8b:31:c3:5d:4c:a7:3c:
                    8e:55:e2:78:8e:1f:b3:7f:53:78:01:fa:17:0b:d6:
                    bd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:06:DB:D7:90:33:C9:B1:A4:AE:F5:7E:FF:60:17:EC:ED:8A:A6:2F
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/70e7861cfc7f209de0a7460b3c51a52cbcc995e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:36:a4:c4:64:1c:13:42:7c:88:00:f5:a3:bf:fc:d0:96:93:
         b5:d3:7f:3a:98:0a:b8:2a:ff:83:8f:ea:2a:e3:c2:f3:3d:18:
         2e:04:8d:91:aa:56:f7:19:b0:99:9f:40:9f:19:66:ab:b4:e5:
         cf:a9:8d:50:78:e1:87:23:5e:60:35:53:5f:ec:ab:b2:10:99:
         c4:03:82:2e:19:8e:43:b4:d3:44:df:19:7c:1a:3c:4c:76:ef:
         8a:a4:78:7b:52:4a:b1:25:0a:d9:4f:b6:17:20:2a:73:a7:2f:
         27:06:1b:e1:2e:5e:d3:a7:80:54:85:d6:59:2e:73:b9:61:58:
         a2:76:3c:f7:76:d3:64:4d:b9:60:f3:d6:28:3b:af:0b:85:ec:
         30:0d:11:ef:44:22:62:e6:fd:44:b1:84:21:69:b0:da:eb:3c:
         0c:b6:ef:25:d3:24:34:67:fd:9c:04:ec:ec:3a:f7:59:da:79:
         dc:5c:d2:0f:c1:06:97:74:cf:67:67:c8:f3:7d:52:5f:92:74:
         ea:1a:d5:ad:0f:63:1e:78:43:1b:c9:a0:b3:ea:8a:26:44:83:
         03:49:ac:e7:e2:7f:41:e4:ae:d2:1c:25:c9:be:73:ec:fd:c8:
         a3:06:19:98:cf:58:8b:2c:56:94:03:93:d7:7d:c3:7e:5a:6c:
         7e:f9:d8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----