Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/723338d2-46e9-4267-8bb4-5524a9ca2af0/c67e256ebad122763ff59448b7ee3e4bd4decb2c.roa
File:                     c67e256ebad122763ff59448b7ee3e4bd4decb2c.roa (raw, json)
Hash identifier:          Nq/cvGCbPCCBcpvUaVIHdcKOLsVYRLEB7n/lyFrtSxg=
Subject key identifier:   2A:B8:9F:9B:7C:90:07:62:8D:0E:86:0C:77:86:C6:A1:56:CE:D1:71
Certificate issuer:       /CN=d15d0a8a7c7078d21f558df0247ed4ea8873b0df
Certificate serial:       01D6EC
Authority key identifier: CA:2E:A5:1B:6E:00:D1:EC:E1:5A:0D:8E:00:6F:7D:C8:FB:08:04:BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d15d0a8a7c7078d21f558df0247ed4ea8873b0df.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/723338d2-46e9-4267-8bb4-5524a9ca2af0/c67e256ebad122763ff59448b7ee3e4bd4decb2c.roa
Signing time:             Fri 30 Jun 2023 21:35:10 +0000
ROA not before:           Thu 29 Jun 2023 21:35:10 +0000
ROA not after:            Mon 30 Jun 2025 21:35:10 +0000
asID:                     266702
IP address blocks:        190.196.248.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120556 (0x1d6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15d0a8a7c7078d21f558df0247ed4ea8873b0df
        Validity
            Not Before: Jun 29 21:35:10 2023 GMT
            Not After : Jun 30 21:35:10 2025 GMT
        Subject: CN=c67e256ebad122763ff59448b7ee3e4bd4decb2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6c:36:1b:60:c0:2b:85:b3:71:80:cf:da:6f:
                    f1:74:41:ee:70:f4:8a:79:4f:20:0d:d9:df:06:ba:
                    b6:c7:3c:0b:6f:f0:46:c1:a8:31:de:d5:47:64:86:
                    3e:3e:c4:64:b5:9b:69:bd:bb:99:3e:7f:2c:0d:3d:
                    d9:29:9d:62:f4:5e:55:52:ca:09:f2:1e:26:36:43:
                    b8:18:49:ca:04:92:e4:93:76:53:0f:21:85:59:0b:
                    c2:0e:5b:80:c2:b3:c1:5b:8a:74:df:07:88:66:b8:
                    46:e2:8c:c2:3d:d7:62:a4:db:bc:c7:68:22:95:ea:
                    2b:35:55:e1:c0:e9:a4:f7:2b:d9:fe:ee:9a:54:c0:
                    4f:d7:4d:f9:75:e5:2a:78:a4:99:38:24:71:f4:f5:
                    7e:0a:b8:c2:e5:38:ca:62:d1:35:f8:f2:93:a3:7d:
                    0b:e0:7d:65:d5:0e:36:37:7e:ab:e0:cb:82:fe:83:
                    a9:24:83:cc:97:0b:43:2b:4e:67:13:73:c2:24:57:
                    f1:0d:0e:f3:5d:66:cf:20:d8:67:0c:63:1d:97:5f:
                    ee:98:8f:4a:53:a3:fd:31:24:51:60:c1:79:fe:a3:
                    10:5a:66:79:a2:e6:c9:52:69:36:a4:32:46:44:3f:
                    87:49:89:47:9c:f0:2d:4f:ae:64:4a:52:33:a1:2f:
                    f7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B8:9F:9B:7C:90:07:62:8D:0E:86:0C:77:86:C6:A1:56:CE:D1:71
            X509v3 Authority Key Identifier:
                keyid:CA:2E:A5:1B:6E:00:D1:EC:E1:5A:0D:8E:00:6F:7D:C8:FB:08:04:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d15d0a8a7c7078d21f558df0247ed4ea8873b0df.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/723338d2-46e9-4267-8bb4-5524a9ca2af0/c67e256ebad122763ff59448b7ee3e4bd4decb2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/723338d2-46e9-4267-8bb4-5524a9ca2af0/d15d0a8a7c7078d21f558df0247ed4ea8873b0df.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.196.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:5b:41:c3:88:b0:a5:bf:08:7d:7e:70:74:0d:3c:03:e8:65:
         3f:b9:14:8b:a4:17:ad:65:12:cb:2b:40:f5:dd:81:ca:d9:ff:
         47:4f:f9:92:bb:51:f8:4b:2c:86:bd:10:ba:df:db:99:b7:9c:
         64:ce:cd:5e:f7:71:13:d7:a7:2b:15:9b:74:e1:06:df:7c:d7:
         35:d9:d5:25:1e:14:5d:51:9a:37:20:6f:0f:7f:5c:50:0f:7b:
         9f:ad:16:7f:c2:66:1e:91:18:f4:ba:f1:bd:e3:3f:c4:d3:a7:
         3f:de:da:68:a8:27:36:ae:db:f2:f0:1b:cb:25:2b:39:73:49:
         f7:b4:2b:2a:3f:d7:72:7e:a6:29:4e:b5:d9:3b:15:aa:47:18:
         f3:ad:98:b8:d2:4a:41:3f:db:8f:b8:a9:48:77:c4:72:2a:e2:
         64:bf:26:c1:7f:2a:a9:29:ee:45:88:a6:75:00:af:ff:f2:18:
         70:fa:80:65:01:a7:0e:19:f6:30:6f:05:c0:76:e0:61:47:90:
         96:6b:9f:52:09:7f:43:b5:d0:db:e2:87:45:52:8b:96:d9:4c:
         e2:7e:3c:d7:f2:ac:9c:de:14:f7:7b:66:58:bf:9b:d5:fa:f7:
         15:00:c0:ac:41:ed:53:ce:b6:96:cc:17:ad:5a:b9:21:8b:11:
         68:cf:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----