Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/dc310f14d26124aa498478f6b1fe531eca21c84e.roa
File:                     dc310f14d26124aa498478f6b1fe531eca21c84e.roa (raw, json)
Hash identifier:          L9cce/vDOdWTTRLn92f8FxBoCgNdRBENGgSo13OUz9Q=
Subject key identifier:   01:3B:96:84:93:09:31:D3:EA:57:05:27:72:7C:4E:89:C6:7A:4C:2E
Certificate issuer:       /CN=28bbc56a25d664ac18a328309550c0f6329ea362
Certificate serial:       24F37C
Authority key identifier: EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/dc310f14d26124aa498478f6b1fe531eca21c84e.roa
Signing time:             Thu 10 Aug 2023 18:00:43 +0000
ROA not before:           Wed 09 Aug 2023 18:00:35 +0000
ROA not after:            Thu 10 Aug 2028 18:00:35 +0000
asID:                     272903
IP address blocks:        190.110.254.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2421628 (0x24f37c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28bbc56a25d664ac18a328309550c0f6329ea362
        Validity
            Not Before: Aug  9 18:00:35 2023 GMT
            Not After : Aug 10 18:00:35 2028 GMT
        Subject: CN=dc310f14d26124aa498478f6b1fe531eca21c84e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c2:b4:27:41:f5:00:fe:1e:91:31:d3:45:88:
                    8d:a5:a2:fe:e5:c3:43:3a:b6:eb:aa:b3:a2:e5:cd:
                    cc:77:b7:cb:e0:fc:08:1d:ae:cb:0b:8a:52:4c:6c:
                    d5:84:b2:24:35:b9:24:73:fa:a4:87:3a:e9:d8:e0:
                    ae:6f:5a:ea:58:f7:1c:ed:c1:54:28:2b:33:35:e8:
                    04:90:60:f0:47:2b:37:48:63:82:3a:ea:10:70:f0:
                    20:c1:85:e0:8d:7f:d5:5a:68:04:8a:7e:7b:ae:e2:
                    40:ef:4b:15:ce:73:26:a8:19:80:b8:43:a9:89:ba:
                    e2:72:89:49:03:c4:52:12:8e:3a:44:9d:5b:37:74:
                    4a:d6:c7:c7:24:35:f7:1e:3c:71:6b:31:18:ca:56:
                    a2:8b:2b:38:5f:4d:c3:20:d7:2e:cc:58:82:01:58:
                    13:95:08:8e:40:84:7c:78:2b:90:b9:b9:69:d8:e1:
                    e6:c1:38:58:ce:88:61:ed:08:dc:cc:19:8a:ee:1d:
                    c8:84:d7:c9:17:2b:f9:57:5e:9d:fa:0c:27:73:bd:
                    2f:40:28:95:7f:46:9c:e5:9f:44:97:dd:08:fc:83:
                    ee:64:14:77:7f:61:96:1d:ae:fc:16:a9:09:1e:a7:
                    99:8a:52:5e:73:8d:42:68:6d:53:f9:d3:89:6f:30:
                    29:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3B:96:84:93:09:31:D3:EA:57:05:27:72:7C:4E:89:C6:7A:4C:2E
            X509v3 Authority Key Identifier:
                keyid:EC:56:30:FF:A7:75:05:35:60:6C:1B:D1:79:34:3A:E3:17:63:DE:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28bbc56a25d664ac18a328309550c0f6329ea362.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/dc310f14d26124aa498478f6b1fe531eca21c84e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/38283047-8834-43d5-82f7-4d938e60571e/28bbc56a25d664ac18a328309550c0f6329ea362.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.110.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:c7:3f:0a:5d:53:2f:0b:a8:fd:05:1f:fa:42:93:e6:8b:6e:
         d3:d8:c5:0b:03:1b:d3:a1:bb:6d:aa:9f:a3:8c:28:bf:ef:c2:
         c4:15:1d:1b:3c:82:56:09:85:b1:c9:5a:0b:92:c3:dc:1f:50:
         ca:45:a3:f3:40:62:8d:82:c0:6e:41:e7:36:6f:7e:36:a1:15:
         2f:2a:78:82:62:ef:a3:24:bb:b1:52:f2:01:58:3c:bc:d1:40:
         1b:c2:f8:1c:54:6b:81:7b:08:01:e6:f6:16:55:d8:bd:ef:10:
         ed:95:da:6f:bf:c8:e6:a6:c9:b7:6e:8b:27:b2:2a:75:45:95:
         d6:87:44:60:1d:78:00:67:84:9f:90:f5:d1:31:75:c8:7f:34:
         3b:5d:4f:14:da:c3:8e:06:c8:00:70:a0:96:d7:b6:7a:c4:d9:
         60:ed:b9:b6:c2:49:23:bc:7a:c3:10:d6:e5:40:29:5f:d2:58:
         13:b9:84:3f:99:15:7d:83:57:be:3b:d3:96:40:4b:9c:a4:89:
         7b:ea:11:77:91:b9:13:14:b3:9e:70:3f:7c:69:48:18:9a:91:
         44:fc:18:49:26:79:dd:28:b9:51:a1:9d:64:22:b0:8d:4c:df:
         4a:1d:50:ea:0e:44:f0:5c:ae:05:9a:0e:f7:93:77:33:be:4e:
         fc:16:f8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----