Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/cc322605a594be89e44f7b41bd1b111df5460380.roa
File:                     cc322605a594be89e44f7b41bd1b111df5460380.roa (raw, json)
Hash identifier:          Q85oQ4ExBVGc2jMGF2xWytnYdVyA1O5NOb//CnnaIC0=
Subject key identifier:   7D:63:49:45:39:C1:A8:F7:56:49:4B:5D:4E:C9:9A:D5:D7:DC:95:BE
Certificate issuer:       /CN=a9b9d9319d2010f9907e00e3e1940885c59db093
Certificate serial:       204468
Authority key identifier: 9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/cc322605a594be89e44f7b41bd1b111df5460380.roa
Signing time:             Fri 12 May 2023 13:45:16 +0000
ROA not before:           Thu 11 May 2023 13:45:16 +0000
ROA not after:            Mon 12 May 2025 13:45:16 +0000
asID:                     28032
IP address blocks:        191.97.48.0/20 maxlen: 24
                          190.108.80.0/20 maxlen: 24
                          2800:650::/32 maxlen: 48
                          2800:650:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2114664 (0x204468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b9d9319d2010f9907e00e3e1940885c59db093
        Validity
            Not Before: May 11 13:45:16 2023 GMT
            Not After : May 12 13:45:16 2025 GMT
        Subject: CN=cc322605a594be89e44f7b41bd1b111df5460380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1b:39:74:5d:04:de:a8:9b:7b:63:7b:87:05:
                    d4:6d:5a:ed:2d:26:ef:6a:12:f5:8f:1f:b3:3d:58:
                    04:12:25:d2:9f:e6:c6:1f:a0:df:76:49:f2:07:38:
                    46:87:61:68:59:1c:a9:b2:c5:f6:f0:3d:dd:81:e9:
                    ee:f7:b8:8e:26:cf:0d:5d:ef:61:28:20:84:9f:be:
                    c1:a0:3c:d2:c9:5c:10:0c:90:16:5c:1b:47:0a:19:
                    9f:f6:c0:e6:6a:7e:fa:47:a9:e9:a3:1c:c5:26:29:
                    2a:94:e5:ae:7e:67:e1:02:19:30:79:be:ff:d9:04:
                    54:31:57:fa:ec:d0:0e:b9:62:15:1d:a7:f9:47:32:
                    cd:00:2c:c5:87:2f:d3:b2:ac:66:d5:68:f5:94:e9:
                    32:2b:1b:cd:7d:18:17:b6:81:ee:2b:fb:99:46:89:
                    30:39:1e:53:5e:9e:be:4f:b1:94:74:1c:c3:99:ff:
                    e9:35:e3:42:42:12:9d:c1:49:0f:4c:18:22:fe:e3:
                    3c:ec:ed:cc:e7:81:38:52:b1:54:7b:79:11:4e:8a:
                    06:3f:35:68:78:64:8e:de:57:10:a2:19:6e:01:17:
                    78:9d:74:da:9a:81:20:04:80:89:5d:c9:6b:c1:c9:
                    c9:10:1d:7d:c2:6c:b1:3d:af:3a:55:34:3d:c6:b3:
                    49:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:63:49:45:39:C1:A8:F7:56:49:4B:5D:4E:C9:9A:D5:D7:DC:95:BE
            X509v3 Authority Key Identifier:
                keyid:9E:B3:BC:DA:F7:48:47:3B:7C:17:4F:76:B5:48:5C:CE:C5:5F:33:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9b9d9319d2010f9907e00e3e1940885c59db093.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/cc322605a594be89e44f7b41bd1b111df5460380.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/637dc0cf-51c7-44e5-9bec-516a255a886b/a9b9d9319d2010f9907e00e3e1940885c59db093.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.80.0/20
                  191.97.48.0/20
                IPv6:
                  2800:650::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:e2:16:0f:73:f3:27:c3:72:34:db:96:45:17:b0:af:39:85:
         0f:c3:2b:41:ec:d5:38:27:b4:e9:9a:1c:80:26:04:42:07:09:
         3c:6a:00:05:6c:ea:be:39:79:8a:e2:27:b6:3f:14:40:1b:b2:
         a9:2c:46:55:b3:ca:55:70:3e:1d:82:11:33:7a:66:ab:ef:a4:
         f9:ac:cb:13:ee:d7:24:d7:92:12:c9:c0:8d:58:f1:73:09:46:
         ec:9d:6b:2d:2e:18:61:8f:63:56:78:25:a1:82:ee:74:c5:6c:
         a9:dc:70:0b:e7:50:c0:80:c7:80:2f:f9:24:3c:45:a5:83:a6:
         ee:29:8e:96:47:e5:8b:17:25:dd:fe:d3:60:1a:58:a2:1a:2d:
         62:b4:a6:61:97:ce:53:44:30:79:1c:c8:c6:9f:50:e0:6b:aa:
         a5:22:4e:19:61:92:ab:f5:bd:c9:33:e0:f4:d4:78:ef:4f:1e:
         46:01:fc:b1:1c:86:2d:f8:26:f1:c4:fc:cd:12:3b:08:2d:39:
         09:9d:4e:9e:d0:23:c2:f7:46:33:b3:61:2b:c8:72:6c:63:d1:
         84:5f:88:e9:bb:8d:0d:9b:d4:83:fa:fb:43:8b:e9:23:b3:57:
         b0:37:c0:83:98:40:ae:3d:12:96:15:f0:04:04:77:e2:c4:45:
         ee:a2:ad:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----