Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/7b907fe0130c8421b96568f22549f68ae0f92820.roa
File:                     7b907fe0130c8421b96568f22549f68ae0f92820.roa (raw, json)
Hash identifier:          1j+qapuQoB9FS/QT6hEPghICL8KyKikE6R1tyKsjs9U=
Subject key identifier:   1A:19:D9:2C:B1:38:DA:25:FB:DD:17:14:23:0E:AA:10:E3:6B:C2:57
Certificate issuer:       /CN=be13c6d545795fa349d0c42f37ac051a6f4f88b6
Certificate serial:       181A73
Authority key identifier: D4:00:D2:DD:6B:DF:60:7E:29:18:A5:25:E8:0B:77:29:88:E0:72:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be13c6d545795fa349d0c42f37ac051a6f4f88b6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/7b907fe0130c8421b96568f22549f68ae0f92820.roa
Signing time:             Wed 19 Apr 2023 02:25:08 +0000
ROA not before:           Tue 18 Apr 2023 02:25:07 +0000
ROA not after:            Sat 19 Apr 2025 02:25:07 +0000
asID:                     269940
IP address blocks:        190.83.116.0/22 maxlen: 24
                          2803:9ae0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579635 (0x181a73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be13c6d545795fa349d0c42f37ac051a6f4f88b6
        Validity
            Not Before: Apr 18 02:25:07 2023 GMT
            Not After : Apr 19 02:25:07 2025 GMT
        Subject: CN=7b907fe0130c8421b96568f22549f68ae0f92820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:36:db:6e:c0:c3:c8:8a:23:f9:d2:48:69:3c:
                    7a:69:a7:a5:66:97:48:52:61:82:f2:51:55:2e:64:
                    2f:2e:a6:55:1e:81:41:cf:e9:e3:5f:b5:0a:e0:ca:
                    a1:50:35:e6:0c:b6:f4:60:b1:77:b8:b9:13:a5:b7:
                    7a:33:dc:66:4a:a2:0f:83:29:0a:ee:30:7b:a0:11:
                    c7:6c:be:16:6c:b0:5f:f0:62:9e:99:f5:77:74:60:
                    f5:1d:92:a4:97:42:a1:4c:9a:2c:df:b3:63:35:7a:
                    7b:45:ae:a0:27:e9:70:6a:7c:08:a3:ae:24:91:a5:
                    0b:22:83:40:3c:e7:3b:76:46:93:83:66:64:90:11:
                    4e:b1:f3:d5:e9:16:9f:4b:41:c6:5f:33:eb:b9:88:
                    4f:ed:84:9e:31:2d:e9:21:e3:f3:83:96:f8:47:5f:
                    2e:b6:79:da:3b:9b:43:dc:60:47:be:03:b4:24:4a:
                    29:79:78:5c:9d:2c:2e:c0:c4:72:ba:f3:e9:10:b8:
                    6f:cf:eb:af:ec:61:31:5c:35:b6:dd:a2:88:de:36:
                    4e:1f:82:e1:8f:41:d9:6f:9a:61:91:e3:87:11:7f:
                    03:f0:3b:94:0e:04:71:18:a8:5c:c4:99:0b:4a:86:
                    4d:85:c5:4f:91:8e:6a:f3:f1:03:4a:ec:a6:c4:49:
                    60:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:19:D9:2C:B1:38:DA:25:FB:DD:17:14:23:0E:AA:10:E3:6B:C2:57
            X509v3 Authority Key Identifier:
                keyid:D4:00:D2:DD:6B:DF:60:7E:29:18:A5:25:E8:0B:77:29:88:E0:72:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be13c6d545795fa349d0c42f37ac051a6f4f88b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/7b907fe0130c8421b96568f22549f68ae0f92820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5b1970f5-3371-4bc7-8855-1d53b2e4e3dc/be13c6d545795fa349d0c42f37ac051a6f4f88b6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.116.0/22
                IPv6:
                  2803:9ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:c2:71:0e:27:4a:19:76:6e:08:d9:55:51:e5:17:d7:25:ce:
         34:eb:0c:bf:48:72:a1:0d:81:a5:c0:fe:c4:e5:00:92:3b:b1:
         35:16:f8:82:36:64:dc:5e:47:63:48:8e:5a:95:30:3a:29:f3:
         55:7d:c6:0b:c9:b9:b5:ac:cc:7f:cd:f6:f0:21:2a:d2:52:d1:
         ed:53:4e:19:85:1e:1e:ed:52:00:42:ce:16:e1:16:b4:e7:93:
         21:0d:2f:63:02:09:17:c6:c8:58:67:f6:06:ee:1f:46:dc:59:
         52:26:c6:c3:85:10:6d:1c:56:d2:9a:f8:d1:83:f4:61:9e:03:
         5d:c6:f5:37:3a:db:34:9c:cc:19:07:6d:d8:eb:81:3d:f3:09:
         67:55:1f:71:ee:9e:8e:98:40:13:12:c8:83:d9:3d:81:de:e5:
         0d:a4:3f:7f:22:bb:4b:09:95:fc:11:0f:4b:8b:53:9a:42:1a:
         38:20:cb:73:af:91:5d:5e:99:66:0a:84:64:9c:90:72:73:11:
         38:c4:78:30:e3:b9:f1:e6:d2:1b:31:ff:a8:b4:6b:98:9a:c5:
         11:d2:b5:c3:41:6c:23:25:d0:25:a7:ff:b0:a4:08:15:52:f6:
         ea:f5:ae:bf:a5:af:6a:a9:92:ae:b0:35:2f:45:75:c2:52:97:
         d7:e0:cc:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----