Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/98a5515342f04eb65548381223c677f013cc81ad.roa
File:                     98a5515342f04eb65548381223c677f013cc81ad.roa (raw, json)
Hash identifier:          xjt1Jw4INtP0pr/WulHcfKiwrmXDDOoHgL08YqJL1hg=
Subject key identifier:   68:3E:7F:4B:BA:E2:1D:76:26:8E:0D:76:34:47:25:0F:21:00:92:3C
Certificate issuer:       /CN=b0aa757766600ae92f780498bacfcff9762981a2
Certificate serial:       2769D9
Authority key identifier: 11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/98a5515342f04eb65548381223c677f013cc81ad.roa
Signing time:             Wed 31 Jan 2024 16:04:48 +0000
ROA not before:           Wed 31 Jan 2024 16:04:48 +0000
ROA not after:            Sat 31 Jan 2026 16:04:48 +0000
asID:                     262239
IP address blocks:        190.211.146.0/23 maxlen: 24
                          186.65.88.0/22 maxlen: 24
                          190.211.145.0/24 maxlen: 24
                          190.211.146.0/23 maxlen: 24
                          190.211.148.0/24 maxlen: 24
                          2803:9a00::/32 maxlen: 64
                          2803:9a00:bb::/48 maxlen: 64
                          2803:9a00:17e::/47 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2583001 (0x2769d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0aa757766600ae92f780498bacfcff9762981a2
        Validity
            Not Before: Jan 31 16:04:48 2024 GMT
            Not After : Jan 31 16:04:48 2026 GMT
        Subject: CN=98a5515342f04eb65548381223c677f013cc81ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ab:4d:aa:7e:2a:3a:88:58:97:b4:03:ce:67:
                    2c:5c:cf:8f:64:e3:fd:c2:1f:b6:3c:5f:b2:2b:a1:
                    2c:74:79:39:c0:07:b1:bd:00:84:aa:31:bf:42:c7:
                    d0:86:bd:17:2b:56:c2:16:63:10:7e:96:1b:ab:3f:
                    9b:2f:fd:08:a8:94:f3:92:87:d2:48:0c:fc:ad:76:
                    5d:9d:07:a6:f5:80:98:8e:82:09:c1:79:e2:17:c1:
                    81:49:53:ff:1d:b2:50:5e:ab:71:09:95:ef:62:4c:
                    0c:88:df:52:68:45:ad:b8:81:58:00:cc:a7:e6:0d:
                    e2:28:57:86:0f:41:e0:8f:de:6d:14:db:7c:4a:98:
                    1f:0a:0e:65:42:f9:84:cc:64:ca:cf:db:44:e5:6a:
                    8d:40:2f:79:5b:28:46:ea:92:54:cf:b1:e0:05:41:
                    97:62:53:b9:00:53:ca:68:d1:db:aa:bd:f6:ac:a5:
                    a3:6c:5b:3a:5e:2f:3d:02:fa:9f:33:27:ba:1e:49:
                    0d:42:9e:c5:17:c9:fb:40:17:f6:3b:c1:5a:aa:05:
                    5e:e7:24:ba:df:0d:de:a7:83:4e:e4:fc:62:40:6b:
                    ea:7a:59:ab:21:d3:5a:10:af:e8:76:4c:ea:91:6b:
                    22:06:51:11:ad:d2:40:c3:76:9e:78:d1:f7:1f:b5:
                    f7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3E:7F:4B:BA:E2:1D:76:26:8E:0D:76:34:47:25:0F:21:00:92:3C
            X509v3 Authority Key Identifier:
                keyid:11:B2:C6:EC:B1:C2:E0:CA:EE:F2:27:05:A1:35:3B:85:FF:B0:E9:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0aa757766600ae92f780498bacfcff9762981a2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/98a5515342f04eb65548381223c677f013cc81ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/567df8c2-fcd6-4158-a06c-ad20960ea207/b0aa757766600ae92f780498bacfcff9762981a2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.88.0/22
                  190.211.145.0-190.211.148.255
                IPv6:
                  2803:9a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:f3:72:47:cd:49:6a:53:05:09:53:1e:89:cb:3e:2a:01:5c:
         f6:db:55:ef:41:c7:d0:27:02:98:0f:78:47:54:dd:00:2e:03:
         40:21:82:77:57:88:cc:fc:5c:f0:4c:af:96:7b:16:b2:e4:cd:
         f8:e5:51:30:15:14:85:f9:78:dd:46:c6:09:1f:ae:61:59:16:
         65:4f:cf:88:b8:15:aa:a1:45:f4:52:95:7b:1d:57:8a:32:13:
         01:ab:78:21:37:53:95:85:54:86:d2:ee:ee:ac:94:94:9b:9c:
         62:8d:4b:cc:16:70:17:f7:72:ff:ff:f0:04:84:b2:78:99:f0:
         64:f7:38:96:2f:e4:e7:4c:6b:d9:1b:d7:a7:29:1d:f3:3d:9a:
         dd:0c:5a:5c:5f:8e:0e:3d:fa:66:4f:1c:98:9b:6b:59:1d:c7:
         03:fe:62:d1:53:9d:a8:4a:53:1f:31:ed:37:88:a0:13:bd:fd:
         ff:df:07:4d:5f:cf:68:8b:6f:40:96:3b:6c:0d:2e:77:40:c7:
         f3:1d:29:bb:f2:30:a0:15:bc:ab:61:59:b9:a7:37:56:76:09:
         4d:40:3b:f1:56:c5:7c:83:a4:ed:41:35:50:68:0b:5b:d9:72:
         d2:4a:c8:d9:73:b2:67:59:59:98:eb:8a:4d:bf:74:ed:20:7a:
         29:ab:21:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----