Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/a2d7ce6a8f44281b3ca1a1f2da73113779432226.roa
File:                     a2d7ce6a8f44281b3ca1a1f2da73113779432226.roa (raw, json)
Hash identifier:          haH8kNjyMLFntyJ2nkdafmDERCbGzaH17x1kNJ0cB40=
Subject key identifier:   7B:02:12:70:2D:15:DC:2A:6F:F5:5A:7B:CE:EF:20:55:2E:BC:2A:4D
Certificate issuer:       /CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
Certificate serial:       229822
Authority key identifier: A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/a2d7ce6a8f44281b3ca1a1f2da73113779432226.roa
Signing time:             Thu 22 Jun 2023 18:16:24 +0000
ROA not before:           Wed 21 Jun 2023 18:16:00 +0000
ROA not after:            Sun 22 Jun 2025 18:16:00 +0000
asID:                     36040
IP address blocks:        190.210.140.128/27 maxlen: 27
                          2800:40:0:65::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2267170 (0x229822)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29bfc63c4d2e222df3a099e222567deb9e88bb27
        Validity
            Not Before: Jun 21 18:16:00 2023 GMT
            Not After : Jun 22 18:16:00 2025 GMT
        Subject: CN=a2d7ce6a8f44281b3ca1a1f2da73113779432226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:44:3b:10:d6:6f:7a:8f:20:44:22:f9:84:8b:
                    70:6d:e3:f1:5c:8f:e0:c8:5c:ee:3d:de:0d:dc:e1:
                    ed:a6:f1:51:b4:09:81:4c:da:9f:fd:4a:0b:e2:4a:
                    07:0f:f7:fe:41:a8:cf:d5:91:ed:ed:68:27:2b:37:
                    ba:7d:60:d3:05:90:cf:49:c2:7b:bf:78:ff:3b:f5:
                    34:b8:4d:a8:59:1f:ab:38:be:75:90:a2:87:e8:4a:
                    9a:77:aa:c4:47:d0:cc:06:aa:78:67:c5:8f:b3:23:
                    e6:4a:53:d4:d3:24:7e:69:82:84:bd:ba:32:79:1b:
                    0c:52:98:21:d8:93:65:15:2c:3f:82:09:09:26:4b:
                    6c:41:fb:14:80:80:bb:3f:f0:68:f6:c2:94:56:08:
                    82:d7:1b:8c:79:fc:ad:d4:03:d8:90:19:9a:68:7e:
                    b2:42:82:72:96:87:1d:0f:11:60:c4:05:28:89:55:
                    5b:88:31:4c:cc:62:70:66:4a:6a:ea:06:a2:52:79:
                    39:ba:08:04:b2:d9:31:5f:a5:1e:29:6c:a7:c3:96:
                    01:a8:2e:c5:9c:d8:c4:2b:db:ec:ab:25:99:f3:bc:
                    d4:61:4e:d8:a6:1d:f8:fd:05:8e:20:72:f1:ce:99:
                    4e:86:c8:9c:50:e4:93:dd:ab:3f:1b:2d:e0:02:30:
                    d9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:02:12:70:2D:15:DC:2A:6F:F5:5A:7B:CE:EF:20:55:2E:BC:2A:4D
            X509v3 Authority Key Identifier:
                keyid:A6:C1:FF:61:8D:96:22:B7:89:0F:A0:98:36:A6:5C:D2:3C:EF:C4:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29bfc63c4d2e222df3a099e222567deb9e88bb27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/a2d7ce6a8f44281b3ca1a1f2da73113779432226.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/626f4f28-880c-4bb5-9442-9eef9325d7eb/29bfc63c4d2e222df3a099e222567deb9e88bb27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.210.140.128/27
                IPv6:
                  2800:40:0:65::/64

    Signature Algorithm: sha256WithRSAEncryption
         51:28:a8:3a:06:c0:bf:55:02:07:12:73:a2:ea:3f:69:ee:94:
         9c:e6:ef:06:0f:3a:dd:ea:de:3c:7c:74:1f:d1:1d:ec:0a:5f:
         2f:04:a4:85:e0:0a:b5:19:59:e6:58:f4:9b:16:57:f0:cb:01:
         25:0e:a3:d1:99:ec:ce:ac:99:16:ef:32:7b:20:1c:bc:e3:98:
         0d:9e:d4:ba:3a:8f:52:66:0c:13:4d:f4:dd:71:12:3a:b7:59:
         1e:79:5e:4c:63:c1:0a:a3:3c:9d:56:f9:e9:ef:de:6c:45:22:
         6e:f5:18:ab:f2:5c:93:f9:da:14:cb:a2:12:e6:70:54:cb:1e:
         5b:bc:22:c9:86:4e:2a:3c:ea:21:4f:fe:10:30:23:6f:12:4e:
         28:56:31:26:5a:8c:5a:22:88:3e:87:34:10:5f:8a:b7:a0:6b:
         30:59:ae:32:10:45:b9:31:46:13:8b:d0:48:3c:7a:c1:38:5b:
         9e:18:cf:90:53:73:4d:31:1b:4e:1e:61:0e:1b:0f:58:13:6b:
         d7:d9:1d:2a:09:dd:eb:9d:bd:b6:a8:06:f4:27:72:8f:63:7d:
         c0:f6:ed:42:4e:a7:c2:7b:3d:20:94:41:ce:88:4a:bc:a6:90:
         f4:76:e9:78:21:6f:46:47:f2:9d:92:90:0f:56:9b:7e:c3:a6:
         a0:08:a6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----