Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5aff93769523a133f93a2d20d3b0e63d2b7c8fbb.roa
File:                     5aff93769523a133f93a2d20d3b0e63d2b7c8fbb.roa (raw, json)
Hash identifier:          ngZFklHA25WZrfKEEX5DoRFaBTROSg9Kq6MgQl9vvnE=
Subject key identifier:   F3:78:74:07:EC:32:68:63:92:0B:AF:A3:8E:53:03:20:6F:CE:7F:5D
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       226B8C
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5aff93769523a133f93a2d20d3b0e63d2b7c8fbb.roa
Signing time:             Thu 27 Apr 2023 18:49:47 +0000
ROA not before:           Wed 26 Apr 2023 18:49:47 +0000
ROA not after:            Sun 27 Apr 2025 18:49:47 +0000
asID:                     264845
IP address blocks:        190.112.52.0/22 maxlen: 24
                          2001:13c7:7020::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2255756 (0x226b8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Apr 26 18:49:47 2023 GMT
            Not After : Apr 27 18:49:47 2025 GMT
        Subject: CN=5aff93769523a133f93a2d20d3b0e63d2b7c8fbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b7:e6:f2:6c:a0:47:0a:d6:4f:22:d0:64:ea:
                    f5:37:03:ea:cc:88:57:6b:84:69:3f:39:a3:4b:67:
                    13:b7:a2:33:c9:89:1c:1b:8b:82:06:07:da:d0:06:
                    31:5c:48:1b:ba:cb:94:eb:4e:d0:20:a3:84:a9:20:
                    21:58:77:be:35:c2:7f:10:52:22:4b:be:85:25:12:
                    53:d5:f8:8a:11:c2:8e:93:74:7d:ff:a5:ab:4b:e0:
                    8a:be:03:31:98:21:ac:a9:74:0c:02:2e:b5:8c:40:
                    fd:d0:de:60:87:1d:99:1f:d3:f7:3d:0f:0e:97:5a:
                    7e:fe:df:f3:e9:eb:03:6f:14:2c:29:c5:4d:c5:0e:
                    56:e0:d2:c0:b4:d7:35:af:30:ea:f0:55:1f:a9:74:
                    67:ee:ae:b4:9b:0d:a3:f5:77:28:9d:6e:48:18:fc:
                    5c:3c:f9:70:cd:e7:ef:07:ef:a6:92:e9:29:95:14:
                    8c:b2:16:75:82:e9:3e:0a:22:a7:3d:7f:4f:97:ba:
                    d4:fb:2c:33:40:6e:16:f0:eb:52:f1:64:f1:69:a0:
                    e7:d4:0d:23:09:c5:26:e3:92:cc:7e:cb:08:c8:9e:
                    a6:6d:61:e9:71:62:04:2e:77:4f:bb:17:37:ac:96:
                    c0:83:06:a8:02:8e:52:b7:cd:7d:fd:3c:62:1c:93:
                    89:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:78:74:07:EC:32:68:63:92:0B:AF:A3:8E:53:03:20:6F:CE:7F:5D
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/5aff93769523a133f93a2d20d3b0e63d2b7c8fbb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.52.0/22
                IPv6:
                  2001:13c7:7020::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:a1:0f:74:b6:a4:d8:b7:5c:1a:18:f0:a3:1a:75:d4:e3:8b:
         cc:b5:12:3f:0d:6d:d4:92:2d:17:ad:33:17:1c:47:b2:4b:89:
         f7:0a:e3:b8:9a:6d:94:39:eb:79:9d:c7:74:ab:82:20:41:23:
         1b:2c:69:00:08:2b:19:8a:33:00:ed:e9:39:94:ee:ea:48:7a:
         b8:e9:f8:89:3e:22:f2:ac:8a:e6:c6:65:f3:9f:a1:c8:66:4a:
         49:9a:b3:d6:5f:c1:d3:0b:31:94:90:58:fa:91:ed:30:a3:fa:
         34:c0:b0:cd:ba:b0:d2:a1:be:91:19:07:2a:15:4f:bc:a7:df:
         a3:a1:96:90:e0:24:9c:23:6f:3d:ff:d7:a9:49:63:d7:54:77:
         9d:25:2a:ff:af:c5:9a:5b:53:32:6f:09:c8:d7:89:45:2f:8e:
         44:de:da:7a:44:41:97:a6:45:2c:3a:d3:7c:30:5a:b9:9b:e1:
         96:94:38:a4:ea:d2:e7:bd:51:d1:d3:0a:0e:57:86:2d:3e:fa:
         60:e3:54:3f:1e:5a:66:b4:4a:cc:c2:a0:d3:d2:d2:6f:0b:1c:
         13:00:7e:a7:88:b5:c5:16:84:ca:b8:91:23:8f:73:c8:53:fd:
         07:cc:4b:3a:03:fc:0a:88:f0:a0:5e:c9:02:d2:a3:3d:bc:51:
         4d:de:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----