Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/d75d9093cb8d6d0569bdcad7b94d5db2b460c23e.roa
File:                     d75d9093cb8d6d0569bdcad7b94d5db2b460c23e.roa (raw, json)
Hash identifier:          eWof6879MBYEwu6tcY5UcIdOmdf1ItmgjfSbCtZ5h/4=
Subject key identifier:   F0:19:25:EB:1A:82:EB:80:AE:93:38:B2:C6:E4:5A:25:B8:11:EB:13
Certificate issuer:       /CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
Certificate serial:       261A01
Authority key identifier: 6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/d75d9093cb8d6d0569bdcad7b94d5db2b460c23e.roa
Signing time:             Thu 18 Jan 2024 12:35:14 +0000
ROA not before:           Thu 18 Jan 2024 12:35:14 +0000
ROA not after:            Sun 18 Jan 2026 12:35:14 +0000
asID:                     60022
IP address blocks:        190.105.192.0/24 maxlen: 24
                          190.121.213.0/24 maxlen: 24
                          190.121.214.0/23 maxlen: 24
                          190.121.216.0/21 maxlen: 24
                          2803:f500::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2497025 (0x261a01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec9e37ddb578cbbdc4e2281b37679864d80672b
        Validity
            Not Before: Jan 18 12:35:14 2024 GMT
            Not After : Jan 18 12:35:14 2026 GMT
        Subject: CN=d75d9093cb8d6d0569bdcad7b94d5db2b460c23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:b1:55:b4:0d:43:23:ee:b6:d8:88:f0:01:
                    bb:89:71:43:a5:86:c5:9b:87:eb:df:1e:52:01:04:
                    d5:6b:54:94:27:55:a7:bb:36:65:28:55:c6:16:b5:
                    1b:5b:08:37:c0:4d:68:97:bc:e8:24:cc:25:47:16:
                    ab:78:2d:97:c5:d2:c5:20:23:22:49:9e:62:c2:e4:
                    86:1e:52:65:99:1e:7c:53:66:bb:b8:97:60:b9:46:
                    28:e8:7f:67:1e:b9:18:b8:a4:36:94:63:d2:0a:4d:
                    5d:f4:3f:5d:1e:55:c7:83:1b:bf:cc:41:18:66:20:
                    e5:b1:82:38:d3:51:12:30:13:84:05:c8:0c:62:83:
                    d1:b3:d8:bb:9f:f1:f5:52:03:3c:2a:db:f6:82:8f:
                    a8:ec:ad:b3:40:00:94:98:bb:a7:af:f8:05:0e:0a:
                    d5:77:49:79:0d:c1:88:aa:cf:36:f5:0c:80:b0:ec:
                    46:18:86:cb:0f:c8:67:51:59:60:d9:85:a1:f2:a6:
                    c7:96:4b:05:a6:76:21:4c:67:ef:2b:84:23:56:16:
                    11:f0:af:49:c6:1d:80:7e:49:6d:8f:4e:6d:ea:0e:
                    f5:81:f3:30:1a:62:5e:ed:53:3f:a4:ab:fb:44:a1:
                    65:13:d5:14:10:63:9f:95:77:e3:ca:21:8b:b2:ed:
                    9c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:19:25:EB:1A:82:EB:80:AE:93:38:B2:C6:E4:5A:25:B8:11:EB:13
            X509v3 Authority Key Identifier:
                keyid:6A:32:EA:0E:A5:50:8E:89:35:14:6E:9E:46:73:44:A0:B1:21:57:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ec9e37ddb578cbbdc4e2281b37679864d80672b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/d75d9093cb8d6d0569bdcad7b94d5db2b460c23e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6e6e184c-3a6e-43af-b63e-95ee45a8b3b2/4ec9e37ddb578cbbdc4e2281b37679864d80672b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.192.0/24
                  190.121.213.0-190.121.223.255
                IPv6:
                  2803:f500::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:46:71:03:b1:08:bd:9d:34:31:d3:67:a4:7b:a9:a9:43:2d:
         a3:d1:32:7a:c2:cf:81:19:e5:85:93:86:53:63:1e:e5:08:99:
         02:45:d8:cf:ed:0a:73:92:ff:d6:08:e2:ec:c3:5c:2c:b8:f4:
         c0:02:ba:9a:9e:9a:1f:b4:76:aa:7c:d6:69:5e:08:48:c2:18:
         d4:1d:46:6f:c7:77:62:37:a5:c0:16:35:3e:9a:ce:eb:75:53:
         e0:c4:df:35:64:05:07:09:48:2e:55:21:fa:88:74:38:d1:21:
         c4:c7:c0:8b:ed:40:bb:90:78:d3:31:0d:19:0e:a9:d5:a2:c2:
         5a:9d:75:8e:ce:bc:d3:d9:d2:a4:24:1e:a5:03:d4:ad:d2:73:
         70:a3:2f:40:b7:4a:3f:d5:38:93:8d:48:6e:ad:1e:d5:8d:1c:
         aa:99:2b:24:28:31:84:35:f4:f5:ca:bb:75:74:26:b9:77:4f:
         84:0b:39:d6:21:be:6c:5c:37:16:15:ab:dd:f4:49:63:ca:ec:
         30:26:a7:45:20:3e:f4:db:2d:b1:c8:42:d3:86:bb:0e:d5:78:
         3d:0c:ec:2e:5c:61:83:0a:72:1d:30:94:00:e1:d3:d7:4f:b0:
         f8:8d:2d:9c:80:15:97:96:ac:09:2b:9e:99:d7:0e:63:48:d8:
         3e:fb:04:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----