Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5f012356-38a1-4761-8cbd-a37b39e4d88c/0905ace609cfc575e80964dfda4eaab1d7e700fd.roa
File:                     0905ace609cfc575e80964dfda4eaab1d7e700fd.roa (raw, json)
Hash identifier:          Y311i2ioipZrZsKSCwJGVcMxBQy0pSl55QRoF9hkAzE=
Subject key identifier:   11:CB:A6:5A:A4:9D:91:5D:F8:90:4B:C2:2E:5C:05:73:AB:08:32:09
Certificate issuer:       /CN=4ea67142ab66d3f0131f50fe8d50f73aa53af52b
Certificate serial:       044C
Authority key identifier: E8:AE:43:61:12:30:BA:D7:B0:31:CC:4F:DA:10:D8:CB:C4:77:23:F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ea67142ab66d3f0131f50fe8d50f73aa53af52b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5f012356-38a1-4761-8cbd-a37b39e4d88c/0905ace609cfc575e80964dfda4eaab1d7e700fd.roa
Signing time:             Mon 30 Jan 2023 12:34:46 +0000
ROA not before:           Sun 29 Jan 2023 12:24:09 +0000
ROA not after:            Thu 30 Jan 2025 12:24:09 +0000
asID:                     52303
IP address blocks:        186.190.192.0/20 maxlen: 20
                          2803:1c60::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1100 (0x44c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ea67142ab66d3f0131f50fe8d50f73aa53af52b
        Validity
            Not Before: Jan 29 12:24:09 2023 GMT
            Not After : Jan 30 12:24:09 2025 GMT
        Subject: CN=0905ace609cfc575e80964dfda4eaab1d7e700fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ee:f9:48:97:7b:bf:30:57:6a:b6:18:fc:1f:
                    04:a4:8c:5c:80:41:05:e2:c9:12:a4:35:c4:f3:e6:
                    c1:7e:e2:8c:63:07:81:b1:01:23:33:2b:13:fe:75:
                    90:77:cb:18:59:76:92:05:5e:89:aa:74:38:ab:89:
                    47:5c:b0:48:82:80:dc:fb:e5:55:8a:1e:cc:1f:2b:
                    58:4b:be:06:34:d5:e8:fc:3b:9c:f6:5a:75:b5:f0:
                    e6:6f:ea:81:76:47:a2:79:5d:6d:18:de:c2:30:5d:
                    e2:4f:24:12:3a:98:9a:73:64:ea:11:e4:f9:4f:24:
                    22:be:80:f8:1b:44:c9:d4:ca:5a:ef:74:65:a1:89:
                    4f:8f:a7:64:3b:70:c9:21:5d:d6:35:75:f0:57:97:
                    be:06:c1:a6:05:a7:ac:9f:85:57:e9:fb:d3:98:7c:
                    99:d0:3a:64:07:50:ab:dc:05:87:61:17:98:25:47:
                    c2:3d:f8:e3:4b:24:18:ca:b0:9e:b6:6b:8e:a7:5a:
                    15:55:63:f1:89:d6:48:54:98:b4:f2:1d:5d:d6:5c:
                    9b:e5:9b:c7:11:38:d4:95:aa:a1:07:92:8f:68:2d:
                    8c:4e:f4:77:00:6b:07:d4:44:61:e3:b7:fd:10:35:
                    60:b2:55:15:41:32:ce:2d:f8:90:9d:76:4c:2a:46:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CB:A6:5A:A4:9D:91:5D:F8:90:4B:C2:2E:5C:05:73:AB:08:32:09
            X509v3 Authority Key Identifier:
                keyid:E8:AE:43:61:12:30:BA:D7:B0:31:CC:4F:DA:10:D8:CB:C4:77:23:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ea67142ab66d3f0131f50fe8d50f73aa53af52b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5f012356-38a1-4761-8cbd-a37b39e4d88c/0905ace609cfc575e80964dfda4eaab1d7e700fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5f012356-38a1-4761-8cbd-a37b39e4d88c/4ea67142ab66d3f0131f50fe8d50f73aa53af52b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.192.0/20
                IPv6:
                  2803:1c60::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:35:fd:ed:b1:93:21:76:e7:d9:cf:e6:7c:7c:24:ff:16:fe:
         8f:d3:76:65:c6:d2:17:52:75:59:0d:be:99:71:a9:d5:b2:d8:
         4f:32:58:b2:f3:cd:f5:1e:9c:ab:e0:bc:4f:c8:fe:8a:9e:53:
         62:77:2a:1e:cf:5d:46:49:d1:75:6c:da:d6:ef:4b:9e:23:79:
         00:7d:d6:90:98:40:a9:8e:0d:dc:e9:5f:fb:c8:5b:85:ea:83:
         a1:c7:25:10:28:e9:3a:8f:0f:3b:01:63:49:2a:87:b8:c7:7a:
         82:5b:30:e9:d2:27:b2:c9:0d:ae:e3:3a:90:c5:db:5c:b0:76:
         5a:18:49:c6:f0:27:dd:53:be:8b:bb:53:a7:fe:40:94:2e:7e:
         64:9b:24:c6:27:c6:f5:9e:6c:3b:ef:ac:4e:c1:f2:f4:75:1b:
         68:8b:98:1a:5d:43:ef:9d:cd:84:6c:93:ce:dd:d7:d1:54:67:
         93:fb:59:9d:20:77:cb:b2:61:1a:0e:8f:c2:1b:df:56:fd:a8:
         96:45:3c:4a:33:4f:f0:d6:29:ce:37:ea:c7:55:58:cf:02:fb:
         62:6f:a2:74:3b:af:6e:31:a6:af:25:e9:6e:98:8f:ae:3f:d2:
         05:17:ac:45:c1:40:b8:8d:ef:cf:ae:f8:23:ed:d9:9d:f9:77:
         3b:ee:2b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----