Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/485f35b26bfa234758c61ea55057ede79d3eb7da.roa
File:                     485f35b26bfa234758c61ea55057ede79d3eb7da.roa (raw, json)
Hash identifier:          qf/1R4L7tuIZuaLzDEK3c3XyAZzpxGi9IAwauUroOow=
Subject key identifier:   92:E9:6F:DF:F0:A0:BC:34:F5:A2:84:68:28:C4:00:DE:18:B0:80:25
Certificate issuer:       /CN=05fbbb173c217aa8030fc6d9379843579229ce31
Certificate serial:       277998
Authority key identifier: 6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/485f35b26bfa234758c61ea55057ede79d3eb7da.roa
Signing time:             Tue 13 Feb 2024 16:34:24 +0000
ROA not before:           Tue 13 Feb 2024 16:34:23 +0000
ROA not after:            Fri 13 Feb 2026 16:34:23 +0000
asID:                     6471
IP address blocks:        190.151.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2587032 (0x277998)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05fbbb173c217aa8030fc6d9379843579229ce31
        Validity
            Not Before: Feb 13 16:34:23 2024 GMT
            Not After : Feb 13 16:34:23 2026 GMT
        Subject: CN=485f35b26bfa234758c61ea55057ede79d3eb7da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:36:f3:58:8b:99:29:c2:74:ea:ed:b5:63:
                    e2:c0:81:37:ca:31:23:84:8a:a8:24:03:43:9b:70:
                    6c:70:f3:60:78:0d:fe:19:51:cc:4a:e1:16:b1:77:
                    2b:8a:47:43:cc:b8:92:6f:d7:69:a9:c4:7e:16:3e:
                    99:cb:60:f6:63:d7:f0:33:48:f0:0d:c6:31:50:43:
                    cf:b1:e3:4e:97:14:5f:65:b9:63:91:34:41:3f:50:
                    a4:4e:13:6b:18:2f:23:7f:b1:40:5a:b7:31:e3:1b:
                    82:22:e8:74:aa:ae:c9:fa:68:ef:67:25:0f:3c:46:
                    ea:76:20:1f:bb:19:7f:f7:e8:61:74:0a:6e:e6:39:
                    34:04:85:f9:51:6f:fb:b2:15:32:9c:a7:bd:e7:b8:
                    f0:3a:ec:d6:9a:27:ff:db:50:7d:e6:fc:1b:c6:52:
                    91:a4:66:00:c5:2f:1a:71:86:a7:b0:0c:2d:a5:0d:
                    b7:8b:72:a7:53:c3:17:ce:f5:ac:51:b2:0a:fc:b6:
                    0b:78:69:b6:6a:b6:fd:52:4b:70:ea:10:50:50:61:
                    2a:75:61:76:f9:39:59:2b:f9:36:1c:ce:57:17:63:
                    0b:53:fb:55:04:85:ae:e9:ae:2b:46:03:f4:0a:e4:
                    9e:08:b2:68:df:2c:e1:99:11:e4:f5:0a:2d:fd:f6:
                    91:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E9:6F:DF:F0:A0:BC:34:F5:A2:84:68:28:C4:00:DE:18:B0:80:25
            X509v3 Authority Key Identifier:
                keyid:6D:D8:87:CE:7B:A8:45:9B:CA:48:71:1D:F7:C0:A9:E1:8F:D6:72:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05fbbb173c217aa8030fc6d9379843579229ce31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/485f35b26bfa234758c61ea55057ede79d3eb7da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44afd170-075e-43df-b4a1-c34f76c18cce/05fbbb173c217aa8030fc6d9379843579229ce31.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:9b:d1:56:0a:3c:3a:7c:79:1d:84:af:c1:1e:4c:da:d9:
         3b:7c:0f:a0:1a:48:12:22:b9:85:e4:c0:fe:83:81:0a:f8:96:
         05:9c:52:ed:fd:a2:aa:2c:70:df:53:25:9a:b6:4d:32:1d:9b:
         36:2b:f2:df:47:45:76:c9:3f:a0:af:4a:2e:0f:59:82:95:1e:
         31:ba:ed:fc:7c:4f:c5:cc:10:6e:7f:2a:06:34:f8:7a:36:83:
         83:1e:fd:cb:dd:00:52:f4:5b:f7:78:4d:da:cb:c4:5a:96:30:
         38:29:8d:af:11:65:67:c9:74:d5:48:54:cf:a0:2b:5d:2b:1c:
         c0:d1:f4:5f:a2:d1:8e:9e:71:bc:72:56:9e:7c:4f:06:22:14:
         67:cc:63:b5:94:0f:ca:cf:ed:0d:ab:80:5a:f7:f4:2a:6d:25:
         39:14:c3:77:90:bc:b7:c9:30:17:86:4e:db:ff:83:34:cd:cb:
         10:ef:64:c6:34:ff:89:8b:5c:0d:d9:6b:4c:f8:a5:f7:6b:72:
         3f:f9:f7:6a:3a:e8:2e:aa:4d:74:d5:5f:d8:cf:45:cf:61:42:
         bc:57:cb:48:cf:d1:65:f2:24:ab:ea:c1:a9:76:0c:4f:9f:a4:
         6c:e5:af:f0:1c:6a:47:5c:29:a5:cf:98:39:3d:93:c6:73:ad:
         d3:82:1e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----