Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/c597ad154f756ce498781e30281ddf5eb5eeef40.roa
File:                     c597ad154f756ce498781e30281ddf5eb5eeef40.roa (raw, json)
Hash identifier:          NulJt72XAuQCfyl6rMTkNdxLjdSOTBc84c+/Q4Crk0Q=
Subject key identifier:   99:B6:49:14:CE:AC:D2:2E:99:7E:C0:8A:80:0F:59:44:BF:43:B5:3E
Certificate issuer:       /CN=8a1fb2a948dd0ade62e316b2f9231b002d40088e
Certificate serial:       1D8F2E
Authority key identifier: 40:F5:A6:AF:1D:7A:85:94:04:37:DA:93:ED:C9:6C:5B:AA:4C:27:D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a1fb2a948dd0ade62e316b2f9231b002d40088e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/c597ad154f756ce498781e30281ddf5eb5eeef40.roa
Signing time:             Tue 13 Jun 2023 23:29:35 +0000
ROA not before:           Mon 12 Jun 2023 23:29:35 +0000
ROA not after:            Fri 13 Jun 2025 23:29:35 +0000
asID:                     269912
IP address blocks:        187.62.110.0/23 maxlen: 24
                          45.190.15.0/24 maxlen: 24
                          2803:1ce0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937198 (0x1d8f2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a1fb2a948dd0ade62e316b2f9231b002d40088e
        Validity
            Not Before: Jun 12 23:29:35 2023 GMT
            Not After : Jun 13 23:29:35 2025 GMT
        Subject: CN=c597ad154f756ce498781e30281ddf5eb5eeef40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5a:9e:84:b2:39:17:c8:73:91:54:4a:04:d3:
                    ad:a2:fd:6d:56:91:f9:f4:57:a9:8e:eb:94:34:4b:
                    a1:f4:02:85:6f:1c:20:63:80:99:db:fc:54:99:b1:
                    ab:0b:fa:3e:44:5f:fc:2e:cf:c1:2a:9a:af:29:0f:
                    fb:26:f8:c4:85:4c:31:b6:09:79:c6:95:aa:90:ce:
                    4b:df:cb:e1:e6:bc:06:08:12:4d:b3:a6:ee:76:83:
                    94:b5:f1:f9:d6:04:45:83:a0:28:4b:0d:85:0e:8c:
                    c8:08:fb:00:82:1d:6d:eb:68:73:92:99:d2:7f:d1:
                    cf:92:4e:e9:af:19:8c:a3:18:53:61:1b:11:76:f5:
                    2f:81:6c:98:4b:6c:23:5c:58:d1:79:e7:85:16:7d:
                    24:4b:93:db:41:6e:86:f7:db:4a:41:00:ee:7b:87:
                    21:72:b0:d1:ad:12:f5:92:2c:13:a6:e0:47:5b:e9:
                    ff:c7:fe:49:33:e2:8f:d8:e6:17:87:db:c7:38:4b:
                    9c:dc:6d:a7:31:bb:b7:8d:71:c7:11:20:9e:fd:96:
                    12:9c:f1:85:ad:63:2f:3c:08:0f:5e:98:5f:db:8a:
                    56:11:33:b4:67:93:86:6f:cb:ae:91:d0:60:97:63:
                    ac:70:3a:5d:c2:d2:ad:1c:58:81:87:a3:0c:95:2b:
                    5b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B6:49:14:CE:AC:D2:2E:99:7E:C0:8A:80:0F:59:44:BF:43:B5:3E
            X509v3 Authority Key Identifier:
                keyid:40:F5:A6:AF:1D:7A:85:94:04:37:DA:93:ED:C9:6C:5B:AA:4C:27:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a1fb2a948dd0ade62e316b2f9231b002d40088e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/c597ad154f756ce498781e30281ddf5eb5eeef40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4e8c68e9-ce58-4583-bfb1-4a7056ed8fec/8a1fb2a948dd0ade62e316b2f9231b002d40088e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.15.0/24
                  187.62.110.0/23
                IPv6:
                  2803:1ce0::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:ab:71:c5:97:26:e0:4b:95:d9:70:58:1b:fc:68:02:9c:a1:
         e2:58:7b:08:71:7c:72:bb:6c:ae:5b:27:88:8b:a7:65:c1:fa:
         1c:86:89:9d:53:f2:1c:bf:2e:55:d6:e2:27:12:33:da:94:22:
         51:5a:06:c9:73:8f:91:4e:e2:94:48:ba:fe:fd:6e:6e:85:3b:
         fc:f2:9c:f8:da:cf:a5:9d:da:6c:94:aa:db:20:f8:11:b1:f0:
         ee:0f:28:39:6c:42:58:a0:a6:fa:b6:4c:3c:da:48:2f:cf:21:
         0c:85:a3:5c:93:dd:f4:0d:61:6c:63:f8:68:fb:e2:fc:7e:33:
         47:d6:d8:df:dc:6b:c2:3a:80:18:b4:2f:05:dd:13:77:6d:77:
         1e:c3:a3:3d:74:07:94:53:81:71:04:a6:04:58:75:1d:ed:b0:
         21:84:c3:e3:ed:32:bb:90:08:10:f0:e6:a0:ab:65:67:8b:f7:
         a6:a0:cf:c8:de:f4:9a:5b:75:21:ed:ee:a4:51:72:b2:13:b7:
         fb:78:34:ff:c8:8b:a4:48:5d:73:95:71:77:bf:bd:d8:9a:ed:
         c9:bf:40:a4:77:4a:fc:17:f2:e9:00:72:24:af:01:e3:e0:2c:
         48:95:2a:58:66:08:ef:66:11:8f:b1:86:b8:c4:ca:bd:39:75:
         f4:1e:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----