Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/90c3bdb5fa7127fd36979c280e8cfeda22fa3233.roa
File:                     90c3bdb5fa7127fd36979c280e8cfeda22fa3233.roa (raw, json)
Hash identifier:          k8hStkA6jWJn2170s5dnrThgExdh3/jtaE0NsOKf+Wg=
Subject key identifier:   88:F0:DA:29:AC:68:11:1E:A4:92:CA:87:52:BB:BE:29:C1:96:B5:31
Certificate issuer:       /CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
Certificate serial:       20FA4C
Authority key identifier: 57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/90c3bdb5fa7127fd36979c280e8cfeda22fa3233.roa
Signing time:             Thu 25 May 2023 20:31:45 +0000
ROA not before:           Wed 24 May 2023 20:31:45 +0000
ROA not after:            Sun 25 May 2025 20:31:45 +0000
asID:                     265788
IP address blocks:        192.141.164.0/22 maxlen: 24
                          2803:7fc0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161228 (0x20fa4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e7510573b4e2f6f118e04dc9188c5f3ef257302
        Validity
            Not Before: May 24 20:31:45 2023 GMT
            Not After : May 25 20:31:45 2025 GMT
        Subject: CN=90c3bdb5fa7127fd36979c280e8cfeda22fa3233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:21:81:fa:7a:d1:ed:62:10:7f:6f:3f:1f:a0:
                    0c:40:8f:19:7e:d8:84:0d:14:88:08:76:05:24:66:
                    66:b9:20:b6:01:3b:51:86:c7:67:30:65:11:46:c2:
                    35:f6:e0:49:22:6b:d5:be:0c:e6:e7:8e:7d:25:25:
                    18:dd:f8:ae:63:5a:e3:d5:bd:fe:fd:3a:8d:1b:5d:
                    d7:2b:f9:e6:9e:82:82:e2:55:0a:bf:d9:e4:fe:60:
                    15:64:55:56:47:94:0f:90:97:41:b9:af:e4:06:7d:
                    72:b0:e0:f2:15:e1:6c:58:16:39:aa:71:03:1d:9c:
                    db:2a:12:fc:c3:14:97:71:42:27:0f:ea:5d:ef:b7:
                    1d:87:d0:9c:45:69:2b:93:ed:18:72:d3:02:7b:b7:
                    2a:55:bf:72:d3:82:d2:c9:3f:15:75:f8:75:14:fa:
                    53:ed:82:a4:9c:8d:56:cb:3e:1d:6b:8d:0f:45:0c:
                    98:8b:e8:d9:53:88:58:a7:3d:e1:8a:18:c3:3d:4d:
                    bb:52:db:bd:54:3f:fd:89:71:ce:48:9f:ec:f3:f7:
                    c4:fe:30:1c:f3:dd:99:38:da:f6:b7:ee:6d:85:17:
                    75:64:d8:44:fd:30:b3:53:cc:93:43:12:c5:03:dc:
                    22:c3:c2:fe:d8:d2:84:6b:d7:60:25:fc:c5:12:fe:
                    2b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F0:DA:29:AC:68:11:1E:A4:92:CA:87:52:BB:BE:29:C1:96:B5:31
            X509v3 Authority Key Identifier:
                keyid:57:62:04:5B:C0:F0:4D:39:AF:ED:B9:CC:C2:E6:DE:8C:11:10:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7510573b4e2f6f118e04dc9188c5f3ef257302.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/90c3bdb5fa7127fd36979c280e8cfeda22fa3233.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/675f04db-6b1b-4906-b84d-2a1d5a3d6658/9e7510573b4e2f6f118e04dc9188c5f3ef257302.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.164.0/22
                IPv6:
                  2803:7fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:39:74:57:c9:92:aa:15:ef:32:bf:5f:e2:5f:90:ba:d2:1b:
         ef:d1:8a:c5:04:52:e6:64:7d:04:7d:e8:7a:d0:00:35:ca:76:
         6b:12:33:f0:d5:c6:0b:0f:af:a8:06:57:01:be:72:43:24:77:
         d5:a5:37:eb:0d:25:84:e5:31:7b:92:2b:26:fe:3e:6d:29:6f:
         c3:6d:ae:b5:8f:59:07:e0:c3:eb:b8:2b:0d:e7:b0:ea:e3:a4:
         1d:11:c8:78:24:05:41:19:08:bf:a4:49:78:a5:26:c0:59:7a:
         f8:a9:3c:19:46:ff:0c:b9:c8:7b:ec:3d:89:20:27:ed:78:3c:
         a7:08:9a:42:2d:fe:f3:fd:b5:5f:c6:d8:cf:4e:94:d2:ce:ac:
         86:b4:e6:48:30:05:80:cd:4e:71:1a:b0:d7:6e:c4:a9:c1:75:
         4d:3b:4f:83:66:45:e0:a3:9d:b3:d1:0b:3d:cd:a6:0d:01:98:
         6f:51:b4:73:26:35:f0:a0:da:62:81:94:86:c0:6d:87:40:8f:
         e7:a3:6d:e6:41:2a:f3:1c:84:43:01:81:10:41:b7:9a:f3:be:
         c7:0e:5f:80:40:b3:83:77:41:93:7c:c8:af:49:7e:73:c3:4d:
         e2:af:19:11:a0:3a:e1:2d:36:dc:55:61:2c:d5:6a:53:d5:10:
         3e:e1:9c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----