Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4f0459eb-621a-42f1-9ba5-142fc8252112/39f5c8f1e0e7d4cbc656611bcfffa0eb7b21fc0a.roa
File:                     39f5c8f1e0e7d4cbc656611bcfffa0eb7b21fc0a.roa (raw, json)
Hash identifier:          QqVT7fvRzq0N/MB1mAU/qYCWSDybP2DRn4PTPdHDF60=
Subject key identifier:   F7:00:23:AE:9B:71:8C:A4:3C:18:7E:C3:E1:84:1C:60:A4:D5:70:6F
Certificate issuer:       /CN=251cb6ee471b2f727c31cfe094988af028b65e96
Certificate serial:       1CE2
Authority key identifier: B6:99:64:2E:3E:93:13:1E:D3:57:F4:A2:1F:78:38:95:B7:1D:A1:74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/251cb6ee471b2f727c31cfe094988af028b65e96.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4f0459eb-621a-42f1-9ba5-142fc8252112/39f5c8f1e0e7d4cbc656611bcfffa0eb7b21fc0a.roa
Signing time:             Fri 14 Apr 2023 12:24:29 +0000
ROA not before:           Wed 12 Apr 2023 01:56:44 +0000
ROA not after:            Mon 14 Apr 2025 01:56:44 +0000
asID:                     52423
IP address blocks:        190.123.14.0/24 maxlen: 24
                          2803:3710::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7394 (0x1ce2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=251cb6ee471b2f727c31cfe094988af028b65e96
        Validity
            Not Before: Apr 12 01:56:44 2023 GMT
            Not After : Apr 14 01:56:44 2025 GMT
        Subject: CN=39f5c8f1e0e7d4cbc656611bcfffa0eb7b21fc0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4a:8b:ee:8f:34:6e:b2:d8:69:70:f9:46:3f:
                    9f:e4:68:85:01:c2:d2:81:fb:23:d1:c9:10:2c:d2:
                    8e:84:54:11:8e:e8:52:ae:3e:15:c3:4b:e4:ff:4b:
                    e2:ca:d3:16:5a:a2:7f:3e:b0:de:f9:4d:0e:fc:51:
                    6f:b2:b9:3d:2d:80:3d:57:6e:44:09:36:c9:4a:d1:
                    09:8d:0f:be:cc:62:1e:17:01:aa:27:e1:f9:eb:ef:
                    c4:4d:9d:10:b4:55:81:02:63:db:df:6d:48:97:c0:
                    64:20:bb:94:6e:49:d5:0c:63:36:ec:b1:fa:88:a1:
                    ea:de:7b:72:dd:b5:6d:6b:76:aa:85:00:49:a9:37:
                    f9:97:05:1b:34:78:0d:77:b8:fc:2b:0b:00:e6:ff:
                    86:35:5e:fa:d8:1d:ff:72:16:82:2b:a4:a9:fc:fd:
                    d9:67:9d:af:5e:a5:9c:2d:86:31:81:6e:5b:f3:da:
                    da:09:fb:c5:21:cb:8e:d8:ab:2c:05:95:a2:80:3e:
                    a3:54:20:37:cc:0e:e3:c2:2e:d3:f0:cf:b7:c6:39:
                    32:81:7b:b0:a9:c2:cf:9a:4e:7f:26:01:94:c0:9e:
                    3f:04:39:30:a9:aa:74:f6:68:b8:38:6b:98:aa:5e:
                    fb:8d:ea:47:9e:d0:3a:fa:79:29:6a:14:ea:ee:c0:
                    f7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:00:23:AE:9B:71:8C:A4:3C:18:7E:C3:E1:84:1C:60:A4:D5:70:6F
            X509v3 Authority Key Identifier:
                keyid:B6:99:64:2E:3E:93:13:1E:D3:57:F4:A2:1F:78:38:95:B7:1D:A1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/251cb6ee471b2f727c31cfe094988af028b65e96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4f0459eb-621a-42f1-9ba5-142fc8252112/39f5c8f1e0e7d4cbc656611bcfffa0eb7b21fc0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4f0459eb-621a-42f1-9ba5-142fc8252112/251cb6ee471b2f727c31cfe094988af028b65e96.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.14.0/24
                IPv6:
                  2803:3710::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:08:38:3d:5a:d0:79:90:05:04:53:c3:75:d7:f8:0a:cb:1e:
         74:55:bc:30:f7:ed:93:ec:0e:43:96:25:48:1b:bb:f1:72:fc:
         f5:c9:25:7d:d1:db:d0:63:b5:d4:48:cf:f0:ee:2b:c0:67:0b:
         46:d1:b1:5e:a7:b2:24:6c:0e:72:61:d9:49:d9:df:1e:6d:7d:
         9a:55:b5:5a:83:47:89:f3:c8:b6:0f:0d:25:0f:35:39:78:85:
         7f:a2:ef:e8:b3:cc:18:79:6d:68:0e:d5:f9:fa:9f:ac:89:b6:
         77:3a:6e:a8:ca:fe:8f:31:5d:fc:49:5b:5f:82:73:38:7e:f9:
         f0:35:82:ad:54:fe:bd:11:bd:d1:7c:11:d2:8c:f4:f8:d0:04:
         87:7f:2c:08:01:87:53:5a:18:16:c6:cf:57:97:43:f4:dd:72:
         a4:4c:58:7e:18:4e:f5:04:6e:97:50:22:07:7e:ca:80:0e:9c:
         62:44:ab:5d:c4:1f:25:f7:2f:26:ae:e0:11:c0:36:3b:7a:38:
         01:fb:7b:98:1c:08:3c:50:f0:62:f5:dc:ad:86:aa:41:ea:e7:
         de:c6:57:25:ce:e4:b0:d1:01:bd:f2:6a:0c:97:d9:d7:85:86:
         0a:80:2a:d1:04:54:8b:65:86:8d:52:1d:f1:a4:47:ba:f3:45:
         73:ec:48:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----