Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/13f1d6365eefa65b7b953eb24d1fc4dcd68c2235.roa
File:                     13f1d6365eefa65b7b953eb24d1fc4dcd68c2235.roa (raw, json)
Hash identifier:          quF0D1+9tolWeyYZNKEzN2yL7INE/uEPDJz4y3wRBnU=
Subject key identifier:   54:25:E9:29:BE:AF:EB:1D:74:4D:43:7A:F5:C5:70:A3:EF:84:58:8A
Certificate issuer:       /CN=450e05696920146d80a6cffd7e47b4df43d2b64a
Certificate serial:       1E9BD3
Authority key identifier: 14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/13f1d6365eefa65b7b953eb24d1fc4dcd68c2235.roa
Signing time:             Tue 07 Mar 2023 21:20:08 +0000
ROA not before:           Sat 11 Jun 2022 03:00:00 +0000
ROA not after:            Thu 13 Jun 2024 03:00:00 +0000
asID:                     12127
IP address blocks:        190.57.0.0/22 maxlen: 24
                          190.57.4.0/23 maxlen: 24
                          190.57.6.0/24 maxlen: 24
                          190.57.8.0/21 maxlen: 24
                          190.57.21.0/24 maxlen: 24
                          190.57.23.0/24 maxlen: 24
                          190.57.24.0/24 maxlen: 24
                          190.57.80.0/20 maxlen: 24
                          190.57.96.0/21 maxlen: 24
                          190.57.104.0/22 maxlen: 24
                          190.57.113.0/24 maxlen: 24
                          190.57.114.0/24 maxlen: 24
                          190.57.120.0/22 maxlen: 24
                          2803:1000::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2005971 (0x1e9bd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=450e05696920146d80a6cffd7e47b4df43d2b64a
        Validity
            Not Before: Jun 11 03:00:00 2022 GMT
            Not After : Jun 13 03:00:00 2024 GMT
        Subject: CN=13f1d6365eefa65b7b953eb24d1fc4dcd68c2235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1b:55:f2:1e:f0:0f:02:83:e8:d2:e2:dc:46:
                    76:d8:42:8a:44:78:a3:aa:8e:74:73:09:71:c0:d1:
                    c8:4a:42:c7:52:e6:ac:3d:81:43:5d:c0:e8:34:74:
                    c4:0a:a5:aa:ae:17:de:9b:46:58:2f:8f:91:3b:85:
                    87:57:03:7d:20:e7:9a:e1:c9:95:59:d8:12:83:26:
                    9c:f0:16:ec:38:9b:e4:17:b6:7b:31:d4:6e:2d:e2:
                    3b:9b:f8:81:06:7a:4a:41:5d:e3:8d:f8:56:98:6f:
                    e0:f2:00:9e:fe:52:fc:b3:1d:b5:32:18:4b:14:18:
                    6d:60:c4:f7:b3:b4:e2:2f:34:79:d0:6c:15:ab:4d:
                    25:50:8f:f5:dc:38:d4:cc:8d:6a:7f:ea:8d:33:90:
                    d7:58:c0:2a:93:de:b5:61:b9:59:56:69:f2:af:8c:
                    25:d6:20:af:83:f2:31:18:18:12:7e:51:68:26:f9:
                    d4:a6:04:df:b9:bc:35:dc:63:e7:7e:39:13:6d:77:
                    24:0d:12:1a:2c:f9:75:c8:6f:0d:ed:f3:df:21:1f:
                    cd:fe:cc:49:99:8e:cc:18:72:54:3b:5d:b6:31:ce:
                    32:40:8d:2d:e2:da:b6:81:fe:21:a3:b5:b3:20:c3:
                    c4:b8:68:92:a7:28:86:30:9b:2a:69:b6:6a:5c:cd:
                    ad:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:25:E9:29:BE:AF:EB:1D:74:4D:43:7A:F5:C5:70:A3:EF:84:58:8A
            X509v3 Authority Key Identifier:
                keyid:14:FB:AE:BF:E3:D9:4F:3F:B2:71:61:18:07:0A:12:05:F7:BD:53:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450e05696920146d80a6cffd7e47b4df43d2b64a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/13f1d6365eefa65b7b953eb24d1fc4dcd68c2235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/693002ba-e833-41e5-bcb5-4d381c0d79b6/450e05696920146d80a6cffd7e47b4df43d2b64a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.57.0.0-190.57.6.255
                  190.57.8.0/21
                  190.57.21.0/24
                  190.57.23.0-190.57.24.255
                  190.57.80.0-190.57.107.255
                  190.57.113.0-190.57.114.255
                  190.57.120.0/22
                IPv6:
                  2803:1000::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:e9:ad:7b:33:9b:cc:7c:e6:3b:bf:ac:3d:93:02:1d:4e:35:
         e1:f9:7b:88:d1:91:79:9b:94:90:59:d3:c5:b1:90:3f:1c:b6:
         49:84:b9:94:98:39:01:85:66:4a:57:a5:ce:ea:30:d1:27:2c:
         b5:16:0c:6c:80:e2:38:94:07:99:01:37:33:12:fa:30:e4:9b:
         23:5f:33:85:a9:46:81:b6:b2:41:ea:49:4b:19:59:49:34:7b:
         72:22:99:52:31:e2:0d:f8:0c:a8:72:d2:a5:aa:a5:6a:4a:02:
         be:fe:7a:22:84:7d:1b:23:25:47:af:55:0a:01:3b:c4:4c:e3:
         e9:6b:c3:a3:35:3c:f0:ef:9f:91:02:62:e7:82:18:e5:be:d1:
         4b:e1:74:5d:af:20:de:dd:55:a0:7a:4a:15:83:4a:26:b1:f4:
         2d:b6:23:7b:ff:1d:a8:2d:a1:43:89:b6:a9:b3:4d:20:0b:89:
         ac:4b:c5:7c:a6:d5:67:6d:1c:38:4c:c8:3c:54:8d:02:7a:df:
         da:c9:44:5d:07:a9:32:e8:bf:74:c9:87:7b:d2:57:87:64:7f:
         7a:77:04:73:f2:e6:99:1e:f5:ca:ef:95:44:5b:3c:18:78:df:
         26:65:dd:bb:39:75:9f:7d:f8:a2:8d:a5:61:53:74:44:58:1e:
         c6:8e:ac:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----