Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/5674caa01b64e70a7cd7c61e7df5656455d651ee.roa
File:                     5674caa01b64e70a7cd7c61e7df5656455d651ee.roa (raw, json)
Hash identifier:          VM1xdc0MnyGWlTKzyF6s5bF7AP+DYEaLSv9px7UMpIk=
Subject key identifier:   B6:C7:AD:1B:23:BC:08:5E:56:AB:51:8E:E7:BE:D2:32:4E:2C:5B:17
Certificate issuer:       /CN=e58627f336cb5c55bc61f9db9ff0b11701078350
Certificate serial:       208733
Authority key identifier: 54:22:0C:2A:3E:14:D7:01:16:61:D8:00:FA:1B:79:1A:68:8E:6A:DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e58627f336cb5c55bc61f9db9ff0b11701078350.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/5674caa01b64e70a7cd7c61e7df5656455d651ee.roa
Signing time:             Thu 11 May 2023 20:45:56 +0000
ROA not before:           Wed 10 May 2023 20:45:56 +0000
ROA not after:            Sun 11 May 2025 20:45:56 +0000
asID:                     52389
IP address blocks:        190.123.16.0/22 maxlen: 24
                          2803:1600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2131763 (0x208733)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e58627f336cb5c55bc61f9db9ff0b11701078350
        Validity
            Not Before: May 10 20:45:56 2023 GMT
            Not After : May 11 20:45:56 2025 GMT
        Subject: CN=5674caa01b64e70a7cd7c61e7df5656455d651ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d3:44:62:82:29:b9:ba:ac:1c:a5:45:17:cd:
                    00:bb:6d:8b:f5:45:fc:cc:4a:ec:f2:24:ce:97:55:
                    7a:44:73:50:b8:c7:62:99:98:a3:24:5a:c1:09:44:
                    41:74:cd:0b:43:13:4a:a2:78:1d:c6:7d:a8:26:dd:
                    c6:23:b4:35:4f:43:d1:f7:11:f5:68:49:6b:f8:8c:
                    56:65:06:5d:ca:97:b2:1b:a0:be:dc:7e:5b:0f:ff:
                    57:15:f2:23:3a:bd:1b:59:2c:cb:a7:e0:84:7b:a8:
                    0a:8d:d9:f3:f3:f0:49:f2:76:cd:79:96:e7:ef:b2:
                    99:ff:e4:81:80:d0:4c:51:25:92:57:04:9d:76:1f:
                    89:fe:a9:35:81:9c:3a:82:24:d0:09:3a:64:4b:32:
                    a6:af:e6:0a:55:c3:3b:35:31:d8:73:6a:9e:bb:ec:
                    08:a2:15:30:00:1f:45:e1:98:f4:32:da:2f:ed:ba:
                    b6:35:8c:21:ad:f3:60:77:d8:f7:39:1b:0d:4d:3f:
                    1b:28:d6:fa:d3:2e:cd:0d:cf:41:ae:2d:ff:c1:b6:
                    92:3b:e9:9f:af:21:a8:ba:c4:5c:9c:eb:f7:6f:68:
                    87:5e:30:79:72:12:47:4f:6a:0d:74:20:c3:9a:50:
                    ae:9b:aa:95:ad:d6:82:93:a7:5e:5b:73:e0:b3:0c:
                    0f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C7:AD:1B:23:BC:08:5E:56:AB:51:8E:E7:BE:D2:32:4E:2C:5B:17
            X509v3 Authority Key Identifier:
                keyid:54:22:0C:2A:3E:14:D7:01:16:61:D8:00:FA:1B:79:1A:68:8E:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e58627f336cb5c55bc61f9db9ff0b11701078350.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/5674caa01b64e70a7cd7c61e7df5656455d651ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/36cd2563-3498-4989-bf07-1a45adda1af1/e58627f336cb5c55bc61f9db9ff0b11701078350.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.16.0/22
                IPv6:
                  2803:1600::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:d6:54:df:b9:14:da:f4:be:80:89:37:0c:0d:9e:9e:28:8f:
         8d:e5:45:89:e7:bb:7c:46:32:c6:a0:7a:71:0f:d0:15:7e:9f:
         48:fa:92:4b:76:bb:ea:0c:60:22:61:64:e4:8b:1c:be:1d:da:
         55:3a:60:76:c8:fa:d9:a2:2c:d2:9f:55:26:a0:19:2c:3e:6b:
         ea:da:bd:83:e8:1b:ab:5c:c3:06:f8:42:68:8d:e7:d3:cf:49:
         91:1e:54:b9:cf:43:8f:64:1b:b3:77:81:d4:08:3e:33:eb:7e:
         b7:4f:72:0b:0f:43:0b:aa:78:84:de:d8:8c:f8:ab:b9:d8:4c:
         8e:5a:43:a6:90:dd:bf:30:77:a5:4f:3c:59:0c:09:0c:87:13:
         ba:c8:cf:80:11:b3:13:7b:e9:81:01:7d:90:a3:fb:0e:11:4b:
         b8:83:f3:0e:86:7f:0c:a4:75:5e:08:01:6b:14:b0:69:74:ce:
         76:a9:dc:14:ef:58:01:0d:cf:ca:b8:45:ea:85:a3:0c:bb:e9:
         2b:52:ce:87:1a:23:8d:ef:3a:95:60:fb:f5:e2:55:00:b6:48:
         c5:a5:f4:22:fe:0e:5b:d6:0c:15:a5:16:9c:86:45:7c:28:fb:
         49:fb:5e:29:3f:55:13:9d:f4:6f:16:36:5f:1a:28:64:76:5c:
         69:df:4e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----