Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/67520e56ab525fba5a0c034cd6feb167bd68db20.roa
File:                     67520e56ab525fba5a0c034cd6feb167bd68db20.roa (raw, json)
Hash identifier:          GFaAYxXwU0FYB9HwJayLKXGkjnexIMXMMBKPPvdg4xI=
Subject key identifier:   DF:43:8C:F8:BC:2D:6A:6A:D0:39:72:8F:AB:7D:8D:7C:53:3C:20:6F
Certificate issuer:       /CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Certificate serial:       229E58
Authority key identifier: 0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/67520e56ab525fba5a0c034cd6feb167bd68db20.roa
Signing time:             Fri 21 Jul 2023 19:12:26 +0000
ROA not before:           Thu 20 Jul 2023 19:12:26 +0000
ROA not after:            Mon 21 Jul 2025 19:12:26 +0000
asID:                     52280
IP address blocks:        190.211.160.0/20 maxlen: 24
                          2800:670::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2268760 (0x229e58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44abde35adbcf04fb85f8b032b43e458648b74b4
        Validity
            Not Before: Jul 20 19:12:26 2023 GMT
            Not After : Jul 21 19:12:26 2025 GMT
        Subject: CN=67520e56ab525fba5a0c034cd6feb167bd68db20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:dd:62:9f:26:84:8e:c2:3b:fd:ef:b8:ef:
                    d2:ac:3a:d9:13:59:6e:e2:c3:ab:9c:8b:0c:27:c7:
                    3b:b4:cb:03:5d:14:49:f3:86:eb:84:44:4d:43:07:
                    f9:dc:f2:d9:65:fd:e9:90:02:0b:06:b8:11:6b:dc:
                    21:35:de:a0:5f:a6:c8:f9:ef:78:00:cc:f9:f8:84:
                    be:d1:68:38:73:8c:aa:6b:30:07:32:ed:1c:00:59:
                    69:78:0c:02:d6:ea:0c:22:b1:67:2d:0e:be:d0:13:
                    41:6d:fe:1f:98:52:e7:7d:bf:f6:d3:96:29:e4:f1:
                    a5:d2:53:e4:eb:7a:7b:11:57:fb:e7:96:30:f1:bc:
                    a6:bc:75:dd:d8:db:e7:5e:d5:bf:6b:be:0c:04:fa:
                    53:6d:7d:e4:90:9a:fa:d1:a1:0c:b2:9d:02:14:c5:
                    d4:c7:42:35:b2:f6:4f:d8:c8:2b:97:f1:44:cd:76:
                    77:1a:93:d1:81:6a:5c:de:97:1a:b2:b6:33:f5:30:
                    d3:7a:a5:8f:da:98:23:29:cb:59:f4:80:ff:39:73:
                    d6:99:15:46:31:7c:62:6e:40:fa:c5:00:af:b2:3a:
                    dc:ff:57:d3:f2:b1:b7:6e:f8:c9:a4:b2:a7:86:21:
                    d3:b4:40:f9:fe:85:e4:06:40:21:f5:26:09:90:33:
                    87:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:43:8C:F8:BC:2D:6A:6A:D0:39:72:8F:AB:7D:8D:7C:53:3C:20:6F
            X509v3 Authority Key Identifier:
                keyid:0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/67520e56ab525fba5a0c034cd6feb167bd68db20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/44abde35adbcf04fb85f8b032b43e458648b74b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.160.0/20
                IPv6:
                  2800:670::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:86:05:26:7b:2b:24:4f:d8:47:1a:9f:c6:0c:15:29:5d:d2:
         dd:95:43:3e:76:b1:c9:1d:59:47:23:60:fd:f8:8b:00:16:79:
         0a:ff:b1:f9:57:0e:ae:90:cb:aa:dd:82:dc:3e:3e:6f:b9:dd:
         f9:7e:1b:7f:43:ac:68:7e:aa:f3:d2:5a:c1:a9:cb:62:a0:ff:
         8d:68:26:f1:61:49:c8:e3:1e:14:ee:15:8d:da:84:53:8f:13:
         24:27:e6:99:c8:8e:b4:71:e8:96:a9:11:c5:1a:51:cb:a9:86:
         d0:e4:a5:1e:57:b7:85:f3:fe:75:0b:90:b4:99:d4:5d:09:9f:
         35:ab:b9:ce:5a:6a:3b:15:24:be:1b:bf:48:4b:9c:d2:be:b5:
         81:22:61:5c:38:4d:54:2c:fa:99:4e:1f:59:b4:5e:8a:e9:f7:
         13:05:b5:a0:1d:20:f8:82:e6:f8:7e:2f:b6:47:5e:a1:28:c5:
         30:52:10:aa:c6:54:28:91:90:41:76:1d:ff:81:a0:29:eb:cf:
         6d:1e:e3:fa:eb:c6:38:a8:bf:ae:be:02:3c:b8:bd:bc:22:8b:
         69:b2:9c:bc:33:85:9b:e1:57:cb:95:96:f0:be:f2:4d:b1:44:
         be:aa:d9:42:45:0a:78:2e:9b:3a:88:60:3c:d0:c8:2b:d3:07:
         5b:0c:d9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----