Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2fc07446-1d1c-45df-b08c-e1b58a120945/9604bb8664d005465fc608d5cf10b739484b3ef0.roa
File:                     9604bb8664d005465fc608d5cf10b739484b3ef0.roa (raw, json)
Hash identifier:          c/oK0pJhXPPd2jUObfckHLrVzgl+ORklEvrHkbj6td4=
Subject key identifier:   AC:52:F3:F9:5D:35:3E:BD:07:49:D8:B9:3D:52:D2:82:CC:58:90:C7
Certificate issuer:       /CN=c77540182b1e52f99236719a50a5e0d2a60dd1e8
Certificate serial:       1F61B4
Authority key identifier: A8:2E:BB:57:9A:6F:1E:A8:21:96:58:9E:B3:EB:53:79:D9:9E:DA:F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c77540182b1e52f99236719a50a5e0d2a60dd1e8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2fc07446-1d1c-45df-b08c-e1b58a120945/9604bb8664d005465fc608d5cf10b739484b3ef0.roa
Signing time:             Tue 25 Apr 2023 08:30:00 +0000
ROA not before:           Mon 24 Apr 2023 08:30:00 +0000
ROA not after:            Wed 23 Apr 2025 08:30:00 +0000
asID:                     263759
IP address blocks:        190.122.188.0/22 maxlen: 24
                          2803:4300::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2056628 (0x1f61b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77540182b1e52f99236719a50a5e0d2a60dd1e8
        Validity
            Not Before: Apr 24 08:30:00 2023 GMT
            Not After : Apr 23 08:30:00 2025 GMT
        Subject: CN=9604bb8664d005465fc608d5cf10b739484b3ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:42:5d:7a:ff:47:56:af:88:54:7c:e4:ed:d2:
                    eb:10:b6:7d:dc:21:c0:1c:9f:22:d6:eb:ae:84:d0:
                    fb:cf:35:21:9e:e5:26:13:04:de:50:77:e9:c5:ea:
                    1b:bf:d5:71:f8:63:f6:1b:01:a8:97:db:24:b8:b8:
                    27:33:27:07:cf:c8:6d:f5:00:9d:f4:7e:03:9d:7d:
                    5f:57:2d:42:0d:62:bf:0e:08:d8:ff:87:04:f5:5e:
                    d4:cf:46:ad:ff:e0:38:e8:00:64:6e:9c:c8:dc:56:
                    60:15:f8:a1:09:eb:76:79:73:14:7a:48:94:b1:2a:
                    54:03:4c:c7:aa:7d:e1:bf:16:48:f6:e1:71:31:6e:
                    36:e8:10:e3:15:77:23:55:53:48:e4:45:c6:08:a0:
                    fb:87:d3:03:01:dc:95:ec:a5:48:98:09:3c:9d:88:
                    cf:6c:28:df:d9:97:6a:8a:e3:a4:aa:08:03:be:7e:
                    b1:7e:d4:da:fc:6d:5d:f5:c0:7b:fa:74:fb:8e:44:
                    99:ba:d1:4c:22:e1:9c:09:21:eb:ee:14:47:9c:dd:
                    ae:51:36:02:f5:8e:2c:3e:72:8f:f1:05:02:62:49:
                    15:5f:36:bd:ac:06:3c:f8:9d:3f:84:4c:0e:42:96:
                    e8:be:4a:b7:fb:8b:59:0e:2f:18:ac:11:a7:ef:06:
                    d9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:52:F3:F9:5D:35:3E:BD:07:49:D8:B9:3D:52:D2:82:CC:58:90:C7
            X509v3 Authority Key Identifier:
                keyid:A8:2E:BB:57:9A:6F:1E:A8:21:96:58:9E:B3:EB:53:79:D9:9E:DA:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c77540182b1e52f99236719a50a5e0d2a60dd1e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2fc07446-1d1c-45df-b08c-e1b58a120945/9604bb8664d005465fc608d5cf10b739484b3ef0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2fc07446-1d1c-45df-b08c-e1b58a120945/c77540182b1e52f99236719a50a5e0d2a60dd1e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.188.0/22
                IPv6:
                  2803:4300::/32

    Signature Algorithm: sha256WithRSAEncryption
         4f:09:9a:d9:1d:29:9d:90:90:5d:f0:99:d8:f3:ca:aa:97:76:
         b1:a1:99:f5:eb:c2:c7:e9:c3:65:d5:c1:1d:c1:d9:6f:f7:0d:
         b8:3c:f4:27:e0:03:c2:49:0c:2d:58:61:33:9b:86:01:bf:12:
         94:09:47:2c:5b:31:b7:78:56:ad:8d:3f:79:dc:15:eb:ed:d7:
         bf:3a:02:fa:c2:d2:28:78:47:34:75:21:09:b6:3c:cd:5c:fc:
         ce:a1:c9:13:71:97:16:ec:b5:d9:22:97:27:f6:9d:3b:17:bf:
         4a:b8:b7:b3:30:76:12:57:64:e7:43:ac:08:42:6b:13:6e:aa:
         33:b0:33:de:d3:18:d8:af:37:10:e8:61:ae:84:b2:d3:96:ed:
         ab:ac:04:e3:c4:e7:0d:a9:04:1b:51:07:da:f4:bd:7f:4a:02:
         ee:8a:d5:96:4b:b6:56:55:b6:15:45:b2:a5:a0:4e:27:77:08:
         ef:e5:1e:69:d5:01:6a:f1:b6:d9:14:ec:a8:4d:48:4b:1a:f0:
         57:60:a9:53:a9:b3:a3:f8:00:cd:e5:a5:db:e9:35:04:0d:2d:
         03:7f:a0:72:9f:a9:9a:8c:da:8e:c1:f3:6c:fd:ac:f9:31:54:
         b0:de:30:96:df:7e:8e:8d:18:02:77:78:21:0c:11:fc:c2:25:
         69:70:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----