Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/5e656d2c64e19701f52e1bfe678cbe03762acda1.roa
File:                     5e656d2c64e19701f52e1bfe678cbe03762acda1.roa (raw, json)
Hash identifier:          h3cZ8oG0c/nL3YuOEoqaZnIsoh1uc5D+LeqCXxhBA1U=
Subject key identifier:   2E:56:5E:3D:94:2C:6A:AB:1F:A5:06:6B:39:E5:68:8E:5D:34:6D:DC
Certificate issuer:       /CN=a016a5c461a1f289e43e8833d657227c9b30df0c
Certificate serial:       17B8F5
Authority key identifier: DC:90:D4:05:40:1A:AC:99:BF:76:42:3E:82:55:17:BF:51:28:34:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a016a5c461a1f289e43e8833d657227c9b30df0c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/5e656d2c64e19701f52e1bfe678cbe03762acda1.roa
Signing time:             Tue 12 Sep 2023 10:40:16 +0000
ROA not before:           Mon 11 Sep 2023 10:40:16 +0000
ROA not after:            Fri 12 Sep 2025 10:40:16 +0000
asID:                     269979
IP address blocks:        187.0.40.0/23 maxlen: 24
                          2803:8ee0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1554677 (0x17b8f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a016a5c461a1f289e43e8833d657227c9b30df0c
        Validity
            Not Before: Sep 11 10:40:16 2023 GMT
            Not After : Sep 12 10:40:16 2025 GMT
        Subject: CN=5e656d2c64e19701f52e1bfe678cbe03762acda1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4d:6c:35:cb:6b:fe:21:02:0f:a1:d5:b9:bb:
                    96:84:81:fb:24:0c:bb:0d:cd:19:03:04:d8:01:89:
                    35:a3:40:3d:0b:42:89:dc:fa:9e:0a:e1:d5:19:a9:
                    1a:a8:95:de:6d:6f:63:c0:f2:ef:4a:38:e1:cc:31:
                    e8:64:bc:ae:f7:57:ac:cf:cc:33:60:05:52:50:91:
                    96:d7:d8:2a:24:7a:ed:aa:70:8b:88:bb:70:11:f4:
                    a5:d8:17:e7:11:df:31:8b:64:b7:b4:42:b6:a9:95:
                    37:24:5e:37:7e:36:71:b8:9f:30:47:01:1f:c9:e4:
                    45:10:29:1d:82:25:03:2c:29:16:a9:7d:15:c1:8c:
                    b3:87:b1:77:b9:ab:e5:41:52:3f:df:6e:0e:0a:95:
                    ee:a0:f1:79:5a:f2:d3:a3:18:b3:20:be:8a:79:48:
                    05:92:18:c8:65:8c:eb:66:a8:02:67:24:2c:b1:b0:
                    f5:60:46:02:18:27:e1:7f:9e:52:c7:e5:eb:2f:e1:
                    54:9f:d7:8b:c8:16:9b:fb:ba:10:a3:07:d6:b4:c8:
                    ac:2a:30:ed:18:71:3f:c4:11:fd:a1:2c:04:d6:b4:
                    44:5c:fd:29:14:36:a3:65:31:dc:c4:ba:a7:93:66:
                    bd:3a:4c:3f:16:09:5e:e5:8a:a7:eb:95:c2:53:3b:
                    8d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:56:5E:3D:94:2C:6A:AB:1F:A5:06:6B:39:E5:68:8E:5D:34:6D:DC
            X509v3 Authority Key Identifier:
                keyid:DC:90:D4:05:40:1A:AC:99:BF:76:42:3E:82:55:17:BF:51:28:34:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a016a5c461a1f289e43e8833d657227c9b30df0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/5e656d2c64e19701f52e1bfe678cbe03762acda1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44968b5a-09e3-4839-bbf2-95503818643e/a016a5c461a1f289e43e8833d657227c9b30df0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.0.40.0/23
                IPv6:
                  2803:8ee0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:52:ef:d6:b9:88:e4:6f:19:82:ad:33:56:65:c5:e9:09:
         be:1e:4d:a7:79:e4:0d:ea:46:d3:4d:64:ca:7f:ac:34:c0:f8:
         a5:e1:4c:84:10:b1:25:8e:41:15:ca:0b:75:3b:c5:ae:fb:00:
         14:03:92:32:c5:d8:c7:94:a0:f8:42:b6:ce:17:46:93:18:5c:
         3b:7d:cd:03:d2:78:5c:e0:3a:8c:bc:e4:67:cc:20:19:52:5a:
         25:c4:a8:25:67:f1:f5:fb:0d:91:6b:45:e7:12:d3:b6:6d:17:
         05:41:35:2d:2b:57:a3:5b:f8:45:fe:c1:40:e3:b4:5b:fd:0c:
         f2:1d:d5:88:5f:f4:dc:7c:b3:b0:54:88:99:23:ea:19:2e:ee:
         17:96:e2:f8:40:46:0c:68:70:12:3d:4a:60:3e:89:86:e0:ae:
         e8:f0:fa:f5:d4:14:dc:62:e2:66:da:4b:c6:09:c0:71:fd:6f:
         48:0e:7a:a7:61:c9:dc:38:6b:64:82:2b:46:91:06:53:c3:75:
         2a:33:ca:40:00:fb:42:7d:bd:fe:37:3d:3c:10:05:c2:fa:6d:
         29:75:32:b3:29:cf:4a:15:15:d8:1b:6d:66:2c:b2:de:dd:56:
         0c:93:88:5f:d2:c2:b3:8c:8a:9f:a7:3d:c1:dc:87:77:cc:e2:
         8c:92:f4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----