Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/9a9c1289e12d6df26bf4199bd45e000143ce78fa.roa
File:                     9a9c1289e12d6df26bf4199bd45e000143ce78fa.roa (raw, json)
Hash identifier:          OSXPmTxdlWO79bCLlO0c6ju1BVuiC8zafjDRqSVGxRs=
Subject key identifier:   CF:9A:04:4A:67:78:E3:53:13:C9:AB:4B:6D:F9:E0:A2:DA:B9:9E:C9
Certificate issuer:       /CN=38b29341362af70cee57f236bd01d638b2845ee4
Certificate serial:       1FAC98
Authority key identifier: A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/9a9c1289e12d6df26bf4199bd45e000143ce78fa.roa
Signing time:             Tue 31 Jan 2023 16:08:10 +0000
ROA not before:           Mon 30 Jan 2023 16:07:22 +0000
ROA not after:            Fri 31 Jan 2025 16:07:22 +0000
asID:                     262171
IP address blocks:        190.93.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2075800 (0x1fac98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b29341362af70cee57f236bd01d638b2845ee4
        Validity
            Not Before: Jan 30 16:07:22 2023 GMT
            Not After : Jan 31 16:07:22 2025 GMT
        Subject: CN=9a9c1289e12d6df26bf4199bd45e000143ce78fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a2:d9:a9:f5:be:24:cb:84:94:cd:c1:3d:80:
                    70:7e:eb:3f:58:f9:8e:91:9a:68:3a:e9:f9:7e:90:
                    01:35:94:fd:dc:37:e4:21:50:b0:ed:ac:bc:8e:af:
                    bf:d6:5a:f3:c0:2c:7d:32:02:f9:d0:59:10:b4:19:
                    cd:8e:a1:63:44:63:ba:93:fe:8c:00:e4:9a:8a:93:
                    ef:8a:79:ba:d1:9b:c7:e0:85:f2:4d:68:e9:f6:c4:
                    57:6b:90:99:a6:65:21:ee:88:dd:e0:fb:67:d1:83:
                    6f:df:91:78:10:ba:ee:64:7d:2e:57:e1:cb:90:97:
                    f4:cd:0e:0d:58:da:ed:91:0a:e0:07:38:92:36:0c:
                    af:d0:6c:ae:54:bb:7a:a9:26:12:f1:10:98:76:12:
                    f0:0c:94:26:d0:f6:ee:dc:23:ba:75:98:c9:2b:da:
                    bc:13:a5:55:f1:2b:97:a4:25:fc:e3:00:c1:f4:38:
                    2f:18:60:c1:4a:ee:36:92:28:75:e9:29:7c:c4:b3:
                    1e:d3:20:a1:98:46:92:b8:b7:3e:b9:28:aa:4f:66:
                    70:b2:20:7e:91:19:23:79:00:21:b0:e0:52:a8:cf:
                    44:34:d3:32:b2:0b:de:7d:57:8d:56:39:a2:30:26:
                    bc:bf:91:84:d6:0a:97:b1:b9:cd:ec:cf:df:00:3b:
                    16:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9A:04:4A:67:78:E3:53:13:C9:AB:4B:6D:F9:E0:A2:DA:B9:9E:C9
            X509v3 Authority Key Identifier:
                keyid:A6:30:D2:7A:2A:C9:20:A7:F1:E0:20:0C:B1:49:E4:83:39:77:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38b29341362af70cee57f236bd01d638b2845ee4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/9a9c1289e12d6df26bf4199bd45e000143ce78fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1865a074-ac31-4cf7-9a92-5fa934dbd6ed/38b29341362af70cee57f236bd01d638b2845ee4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:27:6c:d5:aa:3c:1d:56:d1:3b:24:da:1b:e4:8a:02:5e:1c:
         0c:75:55:68:e8:5f:e6:bd:00:6b:6c:1b:e4:50:f4:cf:5f:95:
         a3:28:7d:2e:2d:75:36:3a:60:9c:6e:78:06:9d:0a:ed:32:3b:
         65:d0:98:30:da:06:69:a4:82:bc:c7:19:fb:18:67:ff:0e:4b:
         02:53:a0:ef:53:eb:2c:f1:15:3d:6a:0a:15:cc:e6:b9:eb:a1:
         d9:f3:a6:a0:25:b0:02:6b:3e:80:49:9d:ff:ea:54:38:a0:99:
         97:84:13:a8:f3:7a:fe:f4:0c:c8:db:95:d7:47:cc:a1:81:19:
         6e:91:72:1d:00:a7:6f:06:10:a0:96:22:d9:89:de:c1:92:1d:
         fe:1d:e9:6b:b0:2e:3f:7e:93:0b:a3:b3:d4:d2:44:77:60:0d:
         0f:19:bd:1c:76:e1:53:3c:3a:91:e7:0c:ec:45:99:f7:45:33:
         d5:25:c9:dd:c0:aa:0a:ee:04:70:a8:d7:1b:e2:07:ae:e7:19:
         29:0e:0b:db:f0:b8:f3:46:16:92:9d:09:f0:5d:4e:76:3a:3a:
         21:ee:fe:85:e4:f0:9b:73:95:13:90:af:c1:11:88:1d:82:7c:
         ee:f8:74:c4:aa:29:f4:44:ca:40:1b:f6:38:d4:79:8f:9c:7c:
         b0:28:30:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----