Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/a988b331f9b302c33dce50435028ba89b9b7d3d4.roa
File:                     a988b331f9b302c33dce50435028ba89b9b7d3d4.roa (raw, json)
Hash identifier:          AgT//5vcyVVUCCd/NDXpwR7q/bUZcWlBVNowZ+Cf2xI=
Subject key identifier:   B7:B7:1F:79:78:5B:75:2E:4D:73:66:E0:2E:78:9B:33:21:FB:EA:52
Certificate issuer:       /CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
Certificate serial:       260E6A
Authority key identifier: 6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/a988b331f9b302c33dce50435028ba89b9b7d3d4.roa
Signing time:             Thu 18 Jan 2024 12:34:17 +0000
ROA not before:           Thu 18 Jan 2024 12:34:17 +0000
ROA not after:            Sun 18 Jan 2026 12:34:17 +0000
asID:                     42708
IP address blocks:        190.121.211.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2494058 (0x260e6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
        Validity
            Not Before: Jan 18 12:34:17 2024 GMT
            Not After : Jan 18 12:34:17 2026 GMT
        Subject: CN=a988b331f9b302c33dce50435028ba89b9b7d3d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7a:cf:d0:43:34:ff:98:3e:04:b5:fe:6b:d0:
                    c7:f2:c8:b7:27:84:df:40:48:91:3a:8b:b0:b2:fc:
                    88:6b:18:cb:e1:fc:e8:d7:3d:bd:5b:55:ba:f0:e8:
                    32:cd:59:34:b0:75:97:df:5a:fe:6e:f1:f7:bd:13:
                    11:9e:6f:64:4f:a1:59:e1:99:b4:57:aa:ff:11:62:
                    a2:ca:ab:98:8e:9e:7f:ee:d7:f1:c5:0a:13:8a:e8:
                    9f:83:04:70:c9:5c:6e:2f:9d:66:36:25:74:dd:00:
                    1a:c8:ed:cb:7a:f8:f8:00:4d:41:2b:dc:fd:6e:99:
                    97:b1:12:dd:97:be:62:5a:30:ca:0f:b6:2d:ab:70:
                    b9:f8:48:a9:ba:39:6b:78:90:f1:35:de:26:46:8a:
                    74:fe:ff:f7:fd:e1:c3:70:9c:3b:53:cb:e6:65:a0:
                    d1:f1:3e:04:90:2c:ba:c2:70:3e:b5:7c:e3:55:c6:
                    36:ec:13:68:98:e6:9b:5b:b9:6d:00:11:62:59:88:
                    0e:7b:53:4f:cb:75:3c:d3:ed:1b:38:a6:5b:17:0b:
                    ac:34:82:a9:51:cb:43:41:a3:6f:61:e7:80:23:fe:
                    fa:ec:80:39:80:79:89:63:50:4d:4f:44:a6:f8:b3:
                    e9:86:71:2a:3d:6c:4f:2b:00:dd:6a:dc:cb:c9:3f:
                    80:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B7:1F:79:78:5B:75:2E:4D:73:66:E0:2E:78:9B:33:21:FB:EA:52
            X509v3 Authority Key Identifier:
                keyid:6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/a988b331f9b302c33dce50435028ba89b9b7d3d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/4ec9e37ddb578cbbdc4e2281b37679864d80672b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.121.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:2e:12:a4:bc:ce:92:05:b7:da:64:13:f1:74:16:ad:a2:39:
         70:66:df:72:ff:c1:8a:6e:96:cd:3b:16:08:2d:3e:64:59:7f:
         7e:46:79:0d:e6:ac:8c:51:c9:e6:57:ba:90:2f:31:59:23:ca:
         9a:e4:ca:a9:d4:36:e6:85:72:e2:e6:69:90:5d:c8:15:33:9c:
         63:38:2b:77:a5:db:9c:a0:c4:55:71:a3:87:62:54:18:b9:e4:
         c0:e5:e6:65:aa:30:fa:f0:01:bc:e2:f3:e4:f6:54:70:6b:00:
         32:e2:c1:50:27:15:09:44:09:f6:50:fb:21:3d:63:d0:37:9f:
         2c:70:a6:23:39:55:4d:6d:22:a6:2f:63:49:30:8e:87:6b:d0:
         20:7d:0e:ea:d5:bd:ab:4a:53:a1:58:46:a1:4f:9a:ef:60:d7:
         e6:8c:fe:3e:44:1a:8a:52:ea:23:a8:bb:7c:ab:dd:79:5b:e8:
         b2:77:aa:89:2a:10:5c:8d:c1:ce:8d:bb:2c:bc:df:a2:2f:ef:
         fe:1c:67:06:fe:d4:3f:15:2f:05:d0:12:41:15:6b:1b:1e:b9:
         d8:a1:ce:8e:ab:a5:90:46:68:cc:b8:33:4d:9d:11:4d:23:89:
         3e:e3:f1:88:d8:ba:3e:f1:dd:c2:3e:2e:00:ff:0b:4a:1e:d7:
         f9:5c:bf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----