Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/06a38a06ab1a6e3e14e74d2768df75bd7de5334f.roa
File:                     06a38a06ab1a6e3e14e74d2768df75bd7de5334f.roa (raw, json)
Hash identifier:          TdjXI13pPtcft2u6RIILJcGITEdz1xK4mspRBX3hDGw=
Subject key identifier:   FC:9D:30:DE:65:D2:04:3C:7E:79:03:36:64:43:F4:09:59:57:61:FA
Certificate issuer:       /CN=1c011c49ef045ef0e106ad87280aa70643378a03
Certificate serial:       18BC72
Authority key identifier: 75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/06a38a06ab1a6e3e14e74d2768df75bd7de5334f.roa
Signing time:             Wed 21 Jun 2023 16:27:28 +0000
ROA not before:           Tue 20 Jun 2023 16:27:27 +0000
ROA not after:            Sat 21 Jun 2025 16:27:27 +0000
asID:                     270035
IP address blocks:        130.250.228.0/22 maxlen: 24
                          190.151.142.0/23 maxlen: 24
                          190.108.76.0/22 maxlen: 24
                          2803:e5e0::/30 maxlen: 48
                          2803:e5e0:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1621106 (0x18bc72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c011c49ef045ef0e106ad87280aa70643378a03
        Validity
            Not Before: Jun 20 16:27:27 2023 GMT
            Not After : Jun 21 16:27:27 2025 GMT
        Subject: CN=06a38a06ab1a6e3e14e74d2768df75bd7de5334f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:02:9a:62:e0:3c:77:0b:66:91:fc:ca:15:
                    22:0b:70:8e:7b:7f:f3:a3:ed:d4:31:5a:02:d1:6d:
                    a4:0c:e5:b6:a9:a7:c9:bf:ae:0a:08:88:aa:9d:c6:
                    37:ec:fe:82:e6:47:74:fc:b4:b0:ff:9a:fb:c2:78:
                    6d:38:11:75:a2:22:c4:87:4a:f2:eb:4d:e6:e1:2b:
                    e1:19:68:30:c4:d2:58:f5:81:01:bf:b9:24:5e:cc:
                    3d:63:c2:27:1f:94:6b:cc:fd:82:42:b7:b8:d4:0e:
                    9b:d8:77:63:e0:43:f3:7b:d9:a3:50:0c:47:3f:52:
                    55:4d:69:d7:0a:9d:17:d6:a6:48:e8:ee:72:2f:ee:
                    a1:a8:3b:eb:7b:e0:ef:61:67:6b:04:3f:c8:65:c2:
                    08:0e:c9:4e:ab:da:77:16:9d:ae:12:a0:c6:c3:ed:
                    36:eb:9d:f7:54:2a:c8:c2:2e:8e:71:4e:2f:17:43:
                    31:62:fd:f0:ee:99:59:d3:b9:cf:07:ce:08:7d:9e:
                    d9:a8:9e:ea:31:26:e1:1e:5d:d8:2e:5d:5a:ac:a7:
                    73:fb:96:69:33:e3:0d:0d:92:c9:a9:48:65:7d:6e:
                    98:76:f1:85:b0:66:17:e2:ca:31:99:13:7c:f9:b5:
                    a7:a5:b8:55:0b:a0:e3:50:d7:6b:3c:21:f7:4d:8e:
                    63:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9D:30:DE:65:D2:04:3C:7E:79:03:36:64:43:F4:09:59:57:61:FA
            X509v3 Authority Key Identifier:
                keyid:75:6E:BB:B0:D4:5F:C5:C4:8A:C5:67:CC:FF:7D:CD:EA:94:F2:3B:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c011c49ef045ef0e106ad87280aa70643378a03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/06a38a06ab1a6e3e14e74d2768df75bd7de5334f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/658d48a9-b317-48f7-a9b3-0c9a08640274/1c011c49ef045ef0e106ad87280aa70643378a03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.228.0/22
                  190.108.76.0/22
                  190.151.142.0/23
                IPv6:
                  2803:e5e0::/30

    Signature Algorithm: sha256WithRSAEncryption
         04:3b:1f:74:30:a6:28:ce:d8:28:7d:9b:1c:ff:a1:16:e2:4d:
         9d:77:73:69:18:47:19:34:60:3e:f1:df:e1:18:24:77:70:17:
         6b:3a:80:9f:0d:dc:ed:7c:f5:35:13:3d:5e:be:1c:cb:ab:6e:
         2c:ad:a6:79:31:4f:ed:76:fe:f6:c2:80:88:8a:82:fc:25:bb:
         90:d7:21:9d:19:d8:14:6a:80:59:38:e3:32:5a:26:41:31:9b:
         90:ea:ca:19:6c:6a:95:ad:e3:f0:1c:b8:5e:a9:81:cb:03:a7:
         3e:0a:0a:86:1a:64:b0:29:ee:f3:3f:35:09:b5:b1:27:e3:3b:
         7d:16:8d:d1:7a:1f:a6:58:45:24:6b:8d:39:20:28:ac:37:03:
         a7:c3:62:7b:95:07:23:9a:e1:8c:65:0f:af:53:17:82:c0:d1:
         1e:28:a8:13:c4:4f:37:50:2a:a8:a1:b6:91:a2:b6:eb:4d:e5:
         0b:9f:7e:57:15:da:8b:25:c9:43:19:12:bf:51:91:48:8a:aa:
         26:f5:4a:58:b0:21:c6:be:4f:de:19:ae:19:a5:04:b0:e5:56:
         c6:fb:18:a6:a4:b2:60:bb:51:a7:7c:a0:7b:57:a4:19:a5:ee:
         17:d5:44:4b:11:84:43:55:1c:5c:1b:32:c5:53:9e:b1:77:4e:
         e7:12:56:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----