Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/16a751eedc7d9c7ad4bc88589ae45b84ee376902.roa
File:                     16a751eedc7d9c7ad4bc88589ae45b84ee376902.roa (raw, json)
Hash identifier:          zLf3S/OZE+ZAPjjMsWKPCZd++InLqwzPNXqfFSCU2eY=
Subject key identifier:   D0:08:37:7D:DB:13:E8:BF:E3:AC:05:E5:D6:CF:4B:B3:70:3C:80:67
Certificate issuer:       /CN=63046ffca1186784d420944b2f52a6525f2a9b8d
Certificate serial:       2290D7
Authority key identifier: 8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/16a751eedc7d9c7ad4bc88589ae45b84ee376902.roa
Signing time:             Tue 25 Jul 2023 22:43:07 +0000
ROA not before:           Mon 24 Jul 2023 22:43:07 +0000
ROA not after:            Fri 25 Jul 2025 22:43:07 +0000
asID:                     22541
IP address blocks:        190.14.64.0/18 maxlen: 24
                          2803:7680::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265303 (0x2290d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63046ffca1186784d420944b2f52a6525f2a9b8d
        Validity
            Not Before: Jul 24 22:43:07 2023 GMT
            Not After : Jul 25 22:43:07 2025 GMT
        Subject: CN=16a751eedc7d9c7ad4bc88589ae45b84ee376902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:71:b6:5c:4f:6f:e0:cb:d9:e1:0a:83:01:
                    33:97:14:be:b5:c3:53:d4:06:77:75:e2:32:7e:3e:
                    39:64:17:b7:30:52:91:06:51:7f:22:37:0c:a7:03:
                    2a:a9:13:b4:48:f4:06:9e:d4:4f:62:aa:dc:3b:46:
                    e1:bf:9b:11:6b:81:37:8f:ec:35:9f:50:24:4d:35:
                    e0:6c:7e:c9:44:91:99:c9:ab:e4:ed:45:e7:b2:fa:
                    49:64:47:7a:f9:6e:06:ec:3c:45:71:19:7c:4c:98:
                    5e:82:ae:5e:d4:64:c2:f9:60:4a:92:6c:4f:6b:84:
                    dc:74:6a:08:64:ab:25:08:52:84:73:1c:2b:ac:2d:
                    fd:90:0e:1a:cc:aa:48:75:a4:a7:4b:90:93:10:e9:
                    e8:41:58:08:fc:26:b7:30:d9:c1:38:e8:40:a0:4d:
                    6d:0b:66:ae:4e:6e:5b:68:03:b4:99:3a:76:eb:00:
                    e9:a0:1d:3d:26:a2:4e:22:fc:bc:10:fc:16:05:fc:
                    04:1d:07:f2:c1:a2:6d:de:4e:74:3e:3e:3e:83:eb:
                    21:98:be:f4:eb:c4:9e:7c:25:47:29:be:3f:e2:7a:
                    f8:63:99:d2:06:ed:7a:9e:62:d0:55:43:8b:dd:ba:
                    4b:9a:4b:07:d6:32:ab:6b:f7:d4:6e:80:54:73:4f:
                    7e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:08:37:7D:DB:13:E8:BF:E3:AC:05:E5:D6:CF:4B:B3:70:3C:80:67
            X509v3 Authority Key Identifier:
                keyid:8A:EB:18:E1:CD:D6:F0:51:15:6D:EC:C0:23:B2:3A:79:B4:66:03:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63046ffca1186784d420944b2f52a6525f2a9b8d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/16a751eedc7d9c7ad4bc88589ae45b84ee376902.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/68d2eb41-6cb9-4c72-86a1-4a21b041a95c/63046ffca1186784d420944b2f52a6525f2a9b8d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.64.0/18
                IPv6:
                  2803:7680::/32

    Signature Algorithm: sha256WithRSAEncryption
         80:b2:da:5c:bf:b3:81:7b:83:32:be:d0:61:b9:d4:22:8f:16:
         c3:65:6f:e2:8c:f4:d9:4d:16:6a:82:96:77:ce:06:57:ce:0a:
         31:68:94:ed:bd:f4:db:1f:ac:4b:8a:25:c5:02:65:38:c0:95:
         6a:ec:17:e5:d1:85:e1:2d:1a:f9:a0:2c:9a:d7:e9:23:35:65:
         d1:b7:b9:a2:d2:04:58:ca:1a:a3:a4:3c:0f:39:e3:9e:89:2e:
         c1:3a:fe:9d:62:44:89:2e:16:44:f4:d1:bc:cd:a6:61:2f:76:
         e6:72:c4:5b:d2:f6:53:71:18:bc:b7:f9:51:7f:ec:31:59:cc:
         19:25:6e:35:6e:1c:1f:21:c1:77:e5:a3:1a:92:1e:89:fc:af:
         a4:b2:8e:e0:5d:b1:de:96:54:2a:29:f4:df:ff:62:d6:5b:3d:
         35:94:55:f7:6d:66:04:e3:93:f9:8b:8d:11:d5:64:2b:7c:e0:
         53:05:29:01:c3:f3:e2:2d:2c:2b:09:62:24:26:6c:47:15:7a:
         00:a0:49:f7:0d:83:2d:79:ef:c2:7e:1b:71:8d:b7:bc:d7:f7:
         b9:6a:ad:5e:72:bf:69:3f:b7:39:8c:d8:21:26:59:df:0b:c9:
         73:18:80:76:e7:c9:03:16:b9:d7:b8:fb:09:0f:c3:cb:6a:c5:
         be:1b:c9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----