Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/dc358deb03e2fa8bf93de7f92835ae33f838bc25.roa
File:                     dc358deb03e2fa8bf93de7f92835ae33f838bc25.roa (raw, json)
Hash identifier:          v1FFawjluLUGciBH7Rima8sZisxkQLGPygftRSE2gMU=
Subject key identifier:   77:BC:13:AA:E4:51:A5:25:38:49:EC:1E:79:D5:EE:C5:D1:B6:E9:7C
Certificate issuer:       /CN=44abde35adbcf04fb85f8b032b43e458648b74b4
Certificate serial:       27177A
Authority key identifier: 0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/dc358deb03e2fa8bf93de7f92835ae33f838bc25.roa
Signing time:             Mon 22 Jan 2024 20:05:36 +0000
ROA not before:           Mon 22 Jan 2024 20:05:36 +0000
ROA not after:            Thu 22 Jan 2026 20:05:36 +0000
asID:                     262589
IP address blocks:        190.211.160.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2561914 (0x27177a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44abde35adbcf04fb85f8b032b43e458648b74b4
        Validity
            Not Before: Jan 22 20:05:36 2024 GMT
            Not After : Jan 22 20:05:36 2026 GMT
        Subject: CN=dc358deb03e2fa8bf93de7f92835ae33f838bc25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:61:5f:e8:c4:f9:f0:a6:b1:a1:73:14:fd:a4:
                    f0:12:5e:c7:f8:e8:43:00:df:cb:b7:1c:63:1c:31:
                    74:7f:e2:c4:24:f3:11:18:2d:79:b2:e4:45:b1:b1:
                    43:0c:d8:d3:cc:a4:56:1f:82:99:47:77:bc:99:82:
                    fd:92:6f:cf:ef:8c:15:15:00:a9:eb:fa:f5:68:f2:
                    65:2b:1b:ae:d7:2f:6b:d7:a5:6b:72:25:1e:d6:ad:
                    1b:b8:00:c5:18:cf:4d:84:d7:c1:b7:a2:a8:f1:4a:
                    b0:67:1c:6f:56:18:2c:64:5a:d3:7b:6e:85:60:f8:
                    d5:66:0c:5f:15:d3:32:1d:d8:48:3c:cc:7d:9d:80:
                    67:04:fa:ea:c9:90:8d:1b:fa:e8:7f:d6:50:86:f4:
                    f7:10:b1:8c:10:f0:17:7c:2b:ce:7f:f8:b4:69:b2:
                    ea:85:12:f8:db:6c:31:c7:b9:9b:2f:1d:c9:f6:0c:
                    ec:cf:4e:7e:77:da:69:24:bb:34:86:22:4f:a9:55:
                    3e:b4:06:99:6e:77:3d:94:1f:d2:1f:b5:de:9b:ae:
                    9f:10:ab:e9:25:f4:c2:ae:93:c0:39:e1:01:df:2a:
                    8c:19:8a:35:3b:bb:fd:dc:d5:02:a8:c8:40:10:3d:
                    9a:03:c2:b3:75:02:e5:82:f3:59:d8:06:ae:4d:35:
                    f0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BC:13:AA:E4:51:A5:25:38:49:EC:1E:79:D5:EE:C5:D1:B6:E9:7C
            X509v3 Authority Key Identifier:
                keyid:0E:93:05:9C:CA:D0:F9:E1:47:B5:E4:FF:AE:97:62:A2:76:DF:87:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44abde35adbcf04fb85f8b032b43e458648b74b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/dc358deb03e2fa8bf93de7f92835ae33f838bc25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68835589-a6e4-4be1-9ddc-bf212c3e410a/44abde35adbcf04fb85f8b032b43e458648b74b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.211.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         58:e7:3a:47:0f:52:a5:e1:78:76:00:30:b2:a0:98:9d:35:d5:
         39:69:9f:8e:97:78:dc:cf:7c:17:5b:24:8f:16:0e:5f:81:f4:
         1b:95:df:e9:04:a6:78:d7:51:0f:61:35:e2:d9:03:81:c4:16:
         cf:c2:d9:02:2f:d4:05:eb:64:ed:58:36:dd:d6:f4:c6:46:93:
         48:52:2d:31:9a:01:ac:d1:41:f5:73:84:50:73:83:e1:4f:f9:
         7b:bc:cf:76:84:eb:a8:41:e6:da:57:a9:d7:a1:b4:83:23:1d:
         38:64:9a:11:58:9d:4d:c2:3c:fa:bf:98:52:81:8a:42:b5:13:
         47:81:a7:a8:fe:cf:a2:f4:e8:2c:48:eb:af:5b:db:e4:a6:df:
         07:fc:ed:8e:f7:e6:48:52:fc:02:58:83:42:10:d3:d7:6e:9d:
         34:a6:2d:d1:4b:30:36:a8:66:7b:e9:6b:e4:ca:39:52:a1:07:
         e6:d0:84:34:46:5d:17:1a:d6:42:da:61:99:e5:ff:27:36:2d:
         fc:6d:b7:37:1f:07:81:e0:04:d1:be:4d:1e:02:f2:58:3b:88:
         96:2e:1d:54:49:fc:d3:fa:21:78:72:a6:07:e2:9f:40:89:9e:
         0f:90:b6:3c:9d:91:dc:d1:54:b4:dc:02:0d:e1:a2:38:5d:fd:
         2b:03:23:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----