Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/d12a85620ceb34da961676f7b58f044046841eb2.roa
File:                     d12a85620ceb34da961676f7b58f044046841eb2.roa (raw, json)
Hash identifier:          BexhFJOXkZbRDaUIdt6TRN+3I+5pa9k8rAaHh/nBaz8=
Subject key identifier:   A5:18:59:63:1A:33:E5:39:0B:45:D3:87:09:79:25:03:2A:10:20:08
Certificate issuer:       /CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
Certificate serial:       025378
Authority key identifier: 95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/d12a85620ceb34da961676f7b58f044046841eb2.roa
Signing time:             Thu 29 Jun 2023 18:17:15 +0000
ROA not before:           Wed 28 Jun 2023 18:17:15 +0000
ROA not after:            Sun 29 Jun 2025 18:17:15 +0000
asID:                     269931
IP address blocks:        190.110.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152440 (0x25378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=947e70d24d7c2abf8f701b48a1dcf062059b2bbe
        Validity
            Not Before: Jun 28 18:17:15 2023 GMT
            Not After : Jun 29 18:17:15 2025 GMT
        Subject: CN=d12a85620ceb34da961676f7b58f044046841eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:60:a7:f1:df:3a:10:62:47:46:d4:50:ce:84:
                    11:6a:33:bc:0d:56:17:d1:12:69:5e:c0:5c:8d:10:
                    24:3b:b8:6d:d1:1d:20:7b:c9:ca:48:cf:c2:8c:1e:
                    91:78:10:57:67:0a:8c:c7:01:3c:d0:3c:b3:96:bf:
                    df:5f:df:91:fe:73:20:f2:d7:87:c9:38:6a:a1:53:
                    00:f2:5e:54:0a:27:6e:88:12:e5:97:a2:9f:17:50:
                    d8:0a:da:0a:4d:c5:61:a3:d7:a8:20:f7:d8:e1:2e:
                    4e:fe:c1:50:47:0c:74:87:da:9b:b1:63:1c:ff:c9:
                    6e:b3:a0:23:62:a8:22:2f:04:68:32:14:59:2a:c1:
                    99:68:c1:bc:6f:e0:18:0d:28:ef:38:16:45:b2:e3:
                    62:89:cf:9f:cd:72:7d:ad:18:ae:78:99:24:2b:99:
                    eb:4a:5d:e2:3a:5b:b7:1d:b3:ea:a2:b0:90:27:a6:
                    e6:be:e0:ed:08:70:c8:da:00:20:ab:2e:cd:f8:47:
                    0f:b6:07:bc:22:e8:9f:1e:6f:a4:36:34:3f:f3:9d:
                    a7:c8:39:7a:ba:8e:96:56:3d:98:4f:ac:c6:76:8c:
                    b6:90:7f:c4:ae:c7:6d:03:ba:2b:39:6c:1f:2f:60:
                    2b:eb:a7:78:36:90:0f:22:ec:09:09:f5:5d:3d:14:
                    88:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:18:59:63:1A:33:E5:39:0B:45:D3:87:09:79:25:03:2A:10:20:08
            X509v3 Authority Key Identifier:
                keyid:95:58:64:58:FF:08:E5:CA:A4:BE:E1:05:FA:35:D8:43:8A:E8:35:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/d12a85620ceb34da961676f7b58f044046841eb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24af4045-a14a-4613-a192-b83b40149cef/947e70d24d7c2abf8f701b48a1dcf062059b2bbe.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:95:ec:b1:12:a2:a8:a6:ee:b9:ad:97:fe:c8:16:05:a0:8d:
         bf:d8:f3:65:4b:d7:84:eb:e6:37:2f:8b:91:b9:d1:1c:f6:1a:
         2e:be:f4:9d:90:48:c2:4b:ba:2f:8b:a4:02:c0:3a:6a:8b:46:
         e4:5e:4c:98:22:f8:75:43:04:cd:b9:c3:5b:86:dc:9c:e8:46:
         c8:63:42:b2:72:90:20:46:f4:4c:c8:d2:89:ab:f5:a4:8f:e8:
         0a:b7:d3:75:fb:dd:84:b6:ee:86:aa:97:2d:37:59:2e:f3:3c:
         b4:b4:11:ae:cd:88:53:41:a7:4c:5f:03:d8:69:00:c2:dd:3d:
         56:d4:0b:52:a5:ed:4c:8e:58:6f:6f:ea:52:e0:cb:4a:e0:4d:
         47:8a:14:1b:d6:12:f7:a3:4a:29:4f:70:a2:ff:02:16:5f:e4:
         3d:f8:c1:18:e5:a2:8d:95:ce:86:c9:3e:25:91:b3:00:8a:03:
         eb:a5:8f:2b:51:df:eb:7d:f1:98:e8:8c:9f:e0:69:2c:b0:f7:
         fb:f6:da:c5:25:99:83:18:78:ff:91:e4:35:c6:74:24:37:c6:
         a0:19:63:8f:14:9c:10:d6:96:60:87:bd:70:1d:7a:ec:b1:57:
         df:8c:19:18:94:5e:3c:6f:18:97:a9:8a:c8:8d:35:1c:4b:0e:
         16:a5:0f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----