Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/7972c547dfc2f7355089193a94622e3ea3c3e7d6.roa
File:                     7972c547dfc2f7355089193a94622e3ea3c3e7d6.roa (raw, json)
Hash identifier:          qCWql8vWDLnKBAZnI8HYWkDB+GUqAhZ0Xd9bCZMEmhA=
Subject key identifier:   B0:F0:23:EE:30:F9:38:9F:7F:18:D0:7C:0F:D3:B8:3B:B8:E2:F4:9D
Certificate issuer:       /CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
Certificate serial:       169B0F
Authority key identifier: F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/7972c547dfc2f7355089193a94622e3ea3c3e7d6.roa
Signing time:             Thu 09 Nov 2023 16:11:36 +0000
ROA not before:           Thu 09 Nov 2023 16:11:36 +0000
ROA not after:            Sun 09 Nov 2025 16:11:36 +0000
asID:                     22698
IP address blocks:        190.13.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1481487 (0x169b0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8e7dd8c13e1c2ca15405d536134602a3fdfd429
        Validity
            Not Before: Nov  9 16:11:36 2023 GMT
            Not After : Nov  9 16:11:36 2025 GMT
        Subject: CN=7972c547dfc2f7355089193a94622e3ea3c3e7d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:af:d7:fe:f1:c1:fe:4c:e6:b8:29:70:43:
                    e8:93:92:62:00:64:c9:41:d1:7f:9c:ef:61:82:98:
                    9e:dd:5e:32:41:c0:33:79:a7:f8:b0:06:ce:21:cb:
                    c0:41:f5:bf:72:65:5b:2a:b3:4d:3a:dd:9f:0e:9e:
                    a3:0e:0a:bb:35:11:84:b6:2d:75:35:cb:0e:d1:d8:
                    cf:52:4c:59:3d:d5:3a:dd:4e:b1:8b:cd:65:b0:5e:
                    28:ac:16:7b:16:49:99:ba:b9:be:8f:3c:7d:6d:63:
                    b3:d6:78:fc:ef:74:8f:60:4b:a7:8e:d4:a5:19:ea:
                    61:f4:85:aa:37:da:79:37:73:b0:01:f9:80:a0:b4:
                    4b:63:1b:86:c1:30:de:51:8a:a4:55:5f:de:32:6a:
                    83:c0:c2:9e:04:3f:70:2e:90:82:5e:cc:02:8c:90:
                    97:a6:38:3a:82:2f:81:94:f7:23:8d:b0:fa:a2:f6:
                    cd:f1:d9:e3:d2:66:23:c0:05:8e:a3:54:b0:8d:e1:
                    94:ec:fc:14:60:9e:f5:4c:ca:ba:60:6c:e2:2f:25:
                    5b:e7:12:5c:79:d4:24:d4:df:ab:0c:4a:09:91:d2:
                    3f:ae:d7:e4:c7:80:7e:e2:0c:52:87:2c:7b:f8:fd:
                    ad:f9:ce:62:cb:e1:36:60:64:34:da:2a:96:92:38:
                    8e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F0:23:EE:30:F9:38:9F:7F:18:D0:7C:0F:D3:B8:3B:B8:E2:F4:9D
            X509v3 Authority Key Identifier:
                keyid:F4:A3:8A:B0:0B:BD:14:53:97:C6:DB:6F:D7:41:19:42:17:54:EA:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/7972c547dfc2f7355089193a94622e3ea3c3e7d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/44c81a2b-263b-40a0-932c-eb40c385ff0c/b8e7dd8c13e1c2ca15405d536134602a3fdfd429.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4e:41:ad:52:64:81:8e:d9:60:f6:09:c5:83:c1:0c:15:67:e0:
         e1:49:1d:fc:58:c9:e1:64:64:c9:f8:a5:ad:10:52:df:30:2a:
         64:63:e3:e3:df:41:cf:4a:48:24:e4:e0:87:2b:a0:55:5e:57:
         76:8d:aa:9e:27:a9:61:d0:76:a0:53:b8:c1:8c:48:40:60:cb:
         de:6c:13:52:f1:0b:22:15:14:0f:ca:6a:51:54:5b:7b:ea:6b:
         37:86:dc:76:1c:51:8c:cc:24:9c:27:e7:98:42:8e:73:e0:8d:
         1e:9c:5e:b0:2a:3b:aa:87:9c:09:17:d2:23:77:99:4e:dc:d1:
         2a:92:3e:8a:9c:74:a0:a6:9f:ae:7d:1c:58:8c:d0:d0:ed:93:
         01:05:0d:9b:8d:d4:2f:52:a4:97:18:2d:19:68:19:e9:cb:b8:
         19:2c:e5:55:e7:56:51:ab:ad:ab:fe:46:fb:7a:c3:e2:b6:61:
         09:c6:cc:ec:47:83:58:4a:a3:98:3f:da:6d:01:df:66:bc:b0:
         9c:c8:50:45:c7:52:34:c0:9c:42:6a:16:32:c7:5a:a6:b1:84:
         57:37:8b:71:59:0b:5e:14:20:60:f6:f5:9d:fb:2d:9f:96:47:
         0f:a2:a7:ca:66:b1:d2:fc:67:90:68:70:52:72:0f:66:04:73:
         0a:fc:0d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----