Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/06b07106f1e4719ef100b5d2753db06eadb78481.roa
File:                     06b07106f1e4719ef100b5d2753db06eadb78481.roa (raw, json)
Hash identifier:          lkB39amHpQ4LPwwv2xQDCginFP0KX/hN6odcbeIR4xI=
Subject key identifier:   EF:E4:2A:0D:FA:B1:7F:43:65:A1:0F:66:E1:66:BF:25:3E:8A:CB:7C
Certificate issuer:       /CN=e58627f336cb5c55bc61f9db9ff0b11701078350
Certificate serial:       1F571D
Authority key identifier: 54:22:0C:2A:3E:14:D7:01:16:61:D8:00:FA:1B:79:1A:68:8E:6A:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e58627f336cb5c55bc61f9db9ff0b11701078350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/06b07106f1e4719ef100b5d2753db06eadb78481.roa
Signing time:             Wed 29 Mar 2023 08:30:01 +0000
ROA not before:           Tue 28 Mar 2023 08:30:01 +0000
ROA not after:            Thu 27 Mar 2025 08:30:01 +0000
asID:                     52389
IP address blocks:        190.123.16.0/22 maxlen: 24
                          2803:1600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053917 (0x1f571d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58627f336cb5c55bc61f9db9ff0b11701078350
        Validity
            Not Before: Mar 28 08:30:01 2023 GMT
            Not After : Mar 27 08:30:01 2025 GMT
        Subject: CN=06b07106f1e4719ef100b5d2753db06eadb78481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ea:56:df:59:04:b9:6f:43:a4:af:53:77:40:
                    42:cf:d2:8a:38:b6:51:1d:ae:4c:61:b4:0e:10:d6:
                    77:96:aa:70:9c:fc:c7:a5:51:6b:55:65:ac:97:85:
                    0d:6e:3f:19:e5:32:1e:11:5f:fb:74:0e:64:4c:6d:
                    25:f0:c2:c9:57:c1:26:e7:98:e4:2c:7e:7b:a6:b6:
                    52:1d:37:49:30:51:25:64:67:69:bd:75:40:31:fa:
                    01:19:02:ca:2c:94:2a:21:ab:03:a8:00:ec:28:e9:
                    5d:71:60:0b:f6:2c:d3:19:5a:3c:dd:c4:48:e7:78:
                    0f:47:97:07:f6:10:d6:98:6d:e3:72:06:ae:d8:7e:
                    47:0a:cb:d8:99:88:34:de:2d:df:b9:78:be:f8:b3:
                    5d:99:57:f0:3a:72:43:c0:f5:02:7f:08:55:64:a1:
                    33:c0:75:5f:58:f0:79:9f:a5:1d:8a:db:d4:f7:c3:
                    fc:08:78:31:6b:68:43:6e:d6:21:63:fe:f1:c6:fa:
                    83:ef:6f:3f:ab:1e:6e:0c:35:f1:2e:48:f3:5f:ae:
                    2d:50:03:eb:ee:10:ac:b9:f2:19:45:85:88:27:b4:
                    3d:65:94:e6:f0:30:2f:9c:78:5e:31:d6:75:72:17:
                    2f:4d:a4:5d:38:14:4b:fc:42:7e:37:e8:2f:76:09:
                    a5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:E4:2A:0D:FA:B1:7F:43:65:A1:0F:66:E1:66:BF:25:3E:8A:CB:7C
            X509v3 Authority Key Identifier:
                keyid:54:22:0C:2A:3E:14:D7:01:16:61:D8:00:FA:1B:79:1A:68:8E:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e58627f336cb5c55bc61f9db9ff0b11701078350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/06b07106f1e4719ef100b5d2753db06eadb78481.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/e58627f336cb5c55bc61f9db9ff0b11701078350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.16.0/22
                IPv6:
                  2803:1600::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:b7:00:a5:1e:59:3c:d0:86:00:60:8e:07:b1:40:3b:66:d3:
         fe:e5:3b:c0:c3:2c:cc:e4:c7:77:be:cd:4b:6e:f3:66:b8:b5:
         8f:08:91:18:89:02:fc:cd:9c:97:4b:a7:0f:28:25:60:ba:b0:
         f0:56:1d:83:25:33:40:ac:d7:b4:28:e0:c9:e0:85:d9:2f:7e:
         ef:e2:e6:f6:a6:69:a9:f0:6d:63:6d:4a:82:bc:43:24:49:7a:
         d4:ad:50:f2:6a:00:10:75:a3:cf:55:6c:39:0a:f4:c1:81:2d:
         f0:7e:3e:d3:43:97:73:ba:40:72:b4:8e:ec:73:ec:c9:4e:ee:
         76:64:4a:c7:c8:81:6c:ce:c8:dd:c2:a1:e3:8d:25:96:32:3f:
         de:83:ad:8b:37:18:60:e4:9d:ac:4d:44:c7:5a:d0:b2:2f:26:
         53:1a:83:e0:30:b6:b6:2b:46:6b:41:df:ff:ae:38:a6:88:1d:
         84:2a:58:fe:51:90:a7:9e:b7:c2:08:aa:77:b4:db:62:de:a8:
         47:39:47:a6:3c:57:b7:0c:73:7f:e8:1b:d3:3b:5c:a2:89:82:
         b4:05:1a:62:98:af:89:b9:1d:34:c3:62:66:16:9a:6d:87:30:
         3a:c9:ec:82:3c:26:ce:33:24:45:7c:fa:39:2d:be:20:01:6d:
         ff:91:6b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----