Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/782742ab-a0ac-4004-8b80-91162b8201a0/95a5b6af63979c552dfcf1e0454b07e448ee49f5.roa
File:                     95a5b6af63979c552dfcf1e0454b07e448ee49f5.roa (raw, json)
Hash identifier:          lTpbPBkcR0X3d5UoiVoQVFWDg20ySb5zP/wQ4h0KA9M=
Subject key identifier:   02:16:A3:EF:89:84:32:BE:63:71:BE:9F:1D:B7:B4:AB:FA:44:3D:53
Certificate issuer:       /CN=9b55f937c3d99228fd4f412f3cb2937c2fdef79f
Certificate serial:       022C6E
Authority key identifier: DF:9D:03:3A:63:EE:C4:F9:E0:0F:68:55:42:A7:3C:1C:3D:78:63:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b55f937c3d99228fd4f412f3cb2937c2fdef79f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/782742ab-a0ac-4004-8b80-91162b8201a0/95a5b6af63979c552dfcf1e0454b07e448ee49f5.roa
Signing time:             Wed 05 Jul 2023 13:29:26 +0000
ROA not before:           Tue 04 Jul 2023 13:29:25 +0000
ROA not after:            Sat 05 Jul 2025 13:29:25 +0000
asID:                     269996
IP address blocks:        190.103.88.0/21 maxlen: 24
                          2800:ca0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142446 (0x22c6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b55f937c3d99228fd4f412f3cb2937c2fdef79f
        Validity
            Not Before: Jul  4 13:29:25 2023 GMT
            Not After : Jul  5 13:29:25 2025 GMT
        Subject: CN=95a5b6af63979c552dfcf1e0454b07e448ee49f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4d:cb:2a:2a:98:8c:51:50:9b:b3:18:b9:30:
                    d2:46:87:0e:2b:f3:be:41:2c:e6:06:8f:3d:d1:bd:
                    19:f4:52:15:42:20:21:ea:06:e2:0e:6f:84:f4:bd:
                    f8:5d:e0:26:f9:05:8c:b7:10:c2:60:1c:2b:31:74:
                    13:be:6a:a7:e7:75:a4:e1:cc:76:bd:1e:18:ee:6f:
                    f2:f6:b6:5d:ce:60:a9:c5:95:bc:42:ae:a3:22:4a:
                    de:ae:7d:af:eb:c3:8c:48:09:78:3f:8e:e1:a3:f2:
                    3b:7e:74:b0:06:b3:7e:49:f9:70:6b:58:94:84:08:
                    0e:0c:f9:66:14:3b:52:4f:49:44:6a:21:ed:9e:6b:
                    fe:0f:da:7a:14:07:66:77:ed:d9:d0:cb:7f:5b:7d:
                    02:2f:e9:09:60:1b:ce:91:6a:0c:af:a0:bc:83:4a:
                    bb:3c:bd:e1:67:68:2b:23:c6:61:70:4a:0e:98:d8:
                    27:f8:8d:ac:17:0c:49:58:b2:f4:94:ec:0b:48:83:
                    1f:ff:8b:ac:c5:a5:da:28:30:39:58:9d:bf:ca:b0:
                    87:08:ef:e0:4b:1a:93:c4:82:83:55:7d:04:65:db:
                    95:0a:ee:83:02:83:5f:3e:55:e7:52:9c:87:6a:22:
                    b9:6d:bd:71:c9:05:1f:92:c7:b3:42:d1:ca:ab:fa:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:16:A3:EF:89:84:32:BE:63:71:BE:9F:1D:B7:B4:AB:FA:44:3D:53
            X509v3 Authority Key Identifier:
                keyid:DF:9D:03:3A:63:EE:C4:F9:E0:0F:68:55:42:A7:3C:1C:3D:78:63:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b55f937c3d99228fd4f412f3cb2937c2fdef79f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/782742ab-a0ac-4004-8b80-91162b8201a0/95a5b6af63979c552dfcf1e0454b07e448ee49f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/782742ab-a0ac-4004-8b80-91162b8201a0/9b55f937c3d99228fd4f412f3cb2937c2fdef79f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.88.0/21
                IPv6:
                  2800:ca0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:98:f6:39:24:2a:cf:c4:6d:7a:1c:9f:3f:6e:6e:78:22:97:
         e0:74:5f:56:80:dd:80:19:63:92:7f:bc:33:d5:5f:41:02:06:
         b3:26:be:ba:1c:c3:e0:72:7b:df:e0:23:e8:7d:95:12:8b:96:
         4a:b0:cc:9c:62:62:49:c3:0b:dd:c8:45:34:e4:7b:8a:19:a9:
         15:ac:7a:85:e3:65:05:79:c3:6b:91:c9:10:15:60:1e:51:f6:
         9d:d7:e4:1c:4a:5a:39:2e:f2:f9:64:a9:11:c8:fe:c2:4c:95:
         c9:bd:a7:6a:5e:a9:17:3a:87:c0:d8:5e:38:1d:2e:6e:28:9d:
         dd:d5:86:cf:d0:79:85:c4:f2:09:15:e6:ee:6d:cb:21:f8:49:
         8c:03:c8:09:1b:f1:a1:86:61:1e:81:83:b0:0d:62:21:23:07:
         eb:5b:62:f4:b1:76:69:fd:3b:62:bd:ad:d8:58:5d:37:b7:f8:
         90:ec:27:f6:2d:82:aa:62:77:2e:b4:7e:e7:ec:2b:18:b4:8a:
         b8:55:7e:60:45:3b:cd:3f:39:0f:39:85:4a:19:64:36:da:06:
         88:b8:0e:98:16:bb:f8:f1:0f:1c:f3:82:c0:4e:a1:d4:8f:d6:
         8b:95:c8:19:84:8c:3e:8c:29:45:d7:d7:c6:2f:47:61:d3:f3:
         e2:9f:0b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----