Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/294188e5ffc4bf21cc4510a37bd2a22f88260cf3.roa
File:                     294188e5ffc4bf21cc4510a37bd2a22f88260cf3.roa (raw, json)
Hash identifier:          wsWvoTwkORObNWa85HSPtibTzu06PCZvGJ/mDGxDNqA=
Subject key identifier:   6F:FA:AC:DC:4F:B0:30:06:E4:A5:85:2A:6C:D3:09:5C:1E:A0:8A:75
Certificate issuer:       /CN=425b31fb70180b4aa636c240ebd5276c722716f7
Certificate serial:       1E622C
Authority key identifier: D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/294188e5ffc4bf21cc4510a37bd2a22f88260cf3.roa
Signing time:             Tue 10 Jan 2023 21:13:25 +0000
ROA not before:           Mon 22 Mar 2021 14:32:28 +0000
ROA not after:            Tue 24 Mar 2026 14:32:28 +0000
asID:                     262195
IP address blocks:        190.94.184.0/24 maxlen: 24
                          2800:a90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1991212 (0x1e622c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=425b31fb70180b4aa636c240ebd5276c722716f7
        Validity
            Not Before: Mar 22 14:32:28 2021 GMT
            Not After : Mar 24 14:32:28 2026 GMT
        Subject: CN=294188e5ffc4bf21cc4510a37bd2a22f88260cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b7:b9:cc:42:b8:01:c0:c3:22:d0:bf:1f:26:
                    a6:44:5a:ab:d2:2e:f7:28:d1:ce:a3:78:d8:1c:2d:
                    58:95:18:d1:2b:f3:fe:a1:fb:63:a2:3f:a9:23:95:
                    91:58:7a:e9:61:93:2b:2f:e4:fb:30:30:9f:2c:42:
                    48:90:c1:b4:1f:99:57:f1:6c:68:74:07:53:75:48:
                    e5:2c:4c:54:f1:f1:78:04:8d:38:9c:a5:ef:58:60:
                    6a:78:00:b2:e2:60:84:59:8c:63:7e:15:24:76:92:
                    83:f0:22:03:de:bb:b9:29:6a:ae:a4:22:0e:6e:e7:
                    f5:89:5a:25:9d:fd:8c:4c:83:3b:43:c2:e7:4c:de:
                    29:f9:e7:0a:ce:71:cd:24:ea:ce:f6:33:6b:be:88:
                    26:97:a0:12:b3:64:f8:29:c8:27:ad:c2:44:0f:e8:
                    e7:f8:43:ea:8c:07:36:24:62:c8:85:5e:8d:89:ee:
                    8d:c5:a0:69:61:1c:55:91:4b:2a:2a:aa:4c:55:c9:
                    f1:f1:56:17:58:c4:f5:e6:5e:41:dc:65:61:9d:de:
                    2b:0e:db:76:7d:e7:25:4c:22:b0:c0:27:df:f4:82:
                    dd:d5:88:cd:33:1d:04:30:34:b3:32:3d:39:28:9c:
                    3c:44:a0:9c:be:82:f7:36:d1:ee:60:26:f5:43:bd:
                    c2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FA:AC:DC:4F:B0:30:06:E4:A5:85:2A:6C:D3:09:5C:1E:A0:8A:75
            X509v3 Authority Key Identifier:
                keyid:D5:8C:2C:E6:27:CB:F6:7F:57:C5:09:06:E8:3E:1E:52:E3:61:82:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/425b31fb70180b4aa636c240ebd5276c722716f7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/294188e5ffc4bf21cc4510a37bd2a22f88260cf3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6157e3d0-9010-4766-a4ee-83ab867c273d/425b31fb70180b4aa636c240ebd5276c722716f7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.94.184.0/24
                IPv6:
                  2800:a90::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:5c:7a:c0:7d:9c:44:3a:1a:51:b7:75:0d:e1:8d:c0:e0:f6:
         17:29:8d:33:8b:91:28:37:f8:6f:18:04:0e:ba:73:6b:24:b0:
         bf:d6:3c:51:b8:2f:94:c3:15:df:ca:99:03:06:10:6c:94:76:
         4a:0d:bc:1d:4c:ad:78:d2:fa:7f:f2:da:10:43:23:ee:a4:7b:
         5a:7a:42:06:32:8d:ed:93:ac:ea:5b:b5:e7:3f:dc:43:15:ad:
         49:0a:ad:83:0b:e3:f9:40:d0:e4:1c:d2:6e:3b:ed:f7:84:76:
         9f:88:21:8e:17:27:44:18:29:69:31:8f:37:2e:13:35:e7:19:
         03:ad:4d:3d:64:35:e3:fe:ed:09:65:e9:2f:90:d6:7b:57:2b:
         99:b7:26:77:14:3e:73:71:99:4b:ff:00:4a:17:f5:f2:a0:66:
         0f:97:f3:be:7a:c0:b4:44:7a:92:f3:ad:e4:0d:0e:ac:1f:5a:
         c7:08:46:76:01:24:62:8b:88:94:21:45:e5:bd:c5:a8:e8:41:
         78:6c:93:8e:01:e2:36:2b:82:84:94:c1:48:94:b5:0e:65:1f:
         3d:37:32:77:1c:59:81:2e:9d:c5:bc:83:4e:af:94:96:1e:78:
         c6:5f:1b:c7:d2:19:13:49:83:25:94:37:ad:c7:33:c8:30:9b:
         f9:9d:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----