Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/33608cc0debfdf980c7e2f2af2aa664c27c13124.roa
File:                     33608cc0debfdf980c7e2f2af2aa664c27c13124.roa (raw, json)
Hash identifier:          hVQ8za5FJGmFwh0gRgfQHNJRS/21SoBZjSuRv5pH8N0=
Subject key identifier:   49:77:A2:FC:1C:97:AE:EF:77:70:69:65:C6:67:35:9A:3C:24:1F:9E
Certificate issuer:       /CN=f10755e086c3f00dedf6589d23f8331bfccf8397
Certificate serial:       1FDAFD
Authority key identifier: E8:E3:21:E4:E0:29:1A:C1:D4:7E:E0:CF:EA:40:A4:B5:13:DA:66:57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f10755e086c3f00dedf6589d23f8331bfccf8397.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/33608cc0debfdf980c7e2f2af2aa664c27c13124.roa
Signing time:             Fri 24 Mar 2023 08:30:31 +0000
ROA not before:           Thu 23 Mar 2023 08:30:31 +0000
ROA not after:            Sat 22 Mar 2025 08:30:31 +0000
asID:                     27893
IP address blocks:        190.170.112.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2087677 (0x1fdafd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f10755e086c3f00dedf6589d23f8331bfccf8397
        Validity
            Not Before: Mar 23 08:30:31 2023 GMT
            Not After : Mar 22 08:30:31 2025 GMT
        Subject: CN=33608cc0debfdf980c7e2f2af2aa664c27c13124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:60:f8:65:f6:03:ec:c9:cb:45:fe:b0:a6:53:
                    6f:de:16:93:b9:a1:3f:16:30:43:23:92:cb:71:7b:
                    5d:ba:e6:35:72:c3:24:2d:1a:8a:6a:94:56:f4:57:
                    50:52:de:36:6f:80:ed:fa:df:ce:22:8d:86:3f:4b:
                    82:14:fd:86:d8:4e:22:c0:48:18:8b:21:b4:e6:d9:
                    6b:2a:d3:ea:45:eb:e8:1b:a0:3a:f5:89:db:18:9c:
                    01:88:57:13:b5:de:4f:94:85:14:f5:ae:11:6d:34:
                    59:e2:42:a7:46:1f:8c:c5:01:5d:db:b0:4f:cd:91:
                    c8:0c:55:16:5e:bc:fa:3b:5b:15:a6:36:08:b1:14:
                    18:b2:9a:6c:ce:81:5e:57:8b:3a:52:72:33:e0:58:
                    42:97:1d:01:f5:d7:c3:2c:64:e9:3b:d6:34:3f:12:
                    1b:9a:88:5e:31:8f:09:7c:44:0b:ff:b7:37:65:9f:
                    53:33:ce:b3:b6:04:56:71:6d:bf:bf:81:b6:85:77:
                    5e:08:ac:a0:99:56:6e:75:75:21:89:77:a6:c3:70:
                    c1:a9:9f:ee:73:90:86:d9:dd:a2:cb:d5:99:be:41:
                    bd:64:19:e9:be:e1:ba:73:1f:3d:0f:b6:e0:ff:ed:
                    3e:3c:7f:2b:39:c6:e5:ca:3b:af:3a:f2:64:9e:de:
                    0f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:77:A2:FC:1C:97:AE:EF:77:70:69:65:C6:67:35:9A:3C:24:1F:9E
            X509v3 Authority Key Identifier:
                keyid:E8:E3:21:E4:E0:29:1A:C1:D4:7E:E0:CF:EA:40:A4:B5:13:DA:66:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f10755e086c3f00dedf6589d23f8331bfccf8397.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/33608cc0debfdf980c7e2f2af2aa664c27c13124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/76f97e63-a1b1-4061-be85-e8b4c06ea00c/f10755e086c3f00dedf6589d23f8331bfccf8397.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.170.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:d7:0d:32:c7:34:29:19:7b:fb:57:1b:10:d8:9f:69:bb:b1:
         bf:16:ea:40:35:2e:6d:4e:53:6b:b2:6a:57:c3:b3:e8:b1:b7:
         8a:0e:b3:65:6f:10:e1:7d:da:27:b2:e2:12:d7:76:bf:72:5c:
         14:d8:ff:c6:3d:fc:b8:bb:5e:31:72:91:24:5a:d8:2e:8d:79:
         08:d7:90:24:ad:42:11:c4:33:c9:3a:f2:2a:23:36:d5:11:2b:
         7d:f0:f2:6f:92:2a:15:3c:78:bf:d4:f9:4c:bf:89:61:72:33:
         16:47:79:9d:2e:c5:65:e9:4c:94:8e:fd:90:60:60:f6:24:d3:
         1b:08:db:e4:f2:91:01:76:e4:b6:88:f8:3e:c5:69:e7:d3:bf:
         69:a8:d5:fb:53:c7:c7:24:de:a5:66:99:ce:cf:92:f7:d6:0f:
         60:66:a6:2d:d4:cd:db:b2:d6:70:05:3e:b8:8f:c5:32:e7:f3:
         17:17:06:f9:7b:93:b0:68:49:a5:20:94:13:1f:c7:38:8a:50:
         eb:15:e1:10:72:6d:22:b8:18:7c:cf:e9:f2:f8:90:ee:98:12:
         ff:19:fa:a8:fe:21:e4:c7:77:15:a6:10:f2:ba:57:f5:7d:20:
         58:3a:9b:e3:23:45:04:fe:f6:fd:5e:47:42:60:74:e8:e9:c6:
         bd:21:86:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----