Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/793364d4-dc2e-4449-8e34-4610fa58e87f/9e7dd85900af9adc26ee605531db40092e6ded34.roa
File:                     9e7dd85900af9adc26ee605531db40092e6ded34.roa (raw, json)
Hash identifier:          Pin6Ej/ig4OkN/haA1qGU+Z69iK2+lwdi7k9N6Gl+rM=
Subject key identifier:   72:49:FA:C8:62:DD:D4:DB:CF:43:3B:70:1C:48:B8:4A:5F:88:F9:6D
Certificate issuer:       /CN=d81e5fc116ecd393cdbf8127afbbabd5b1758ebb
Certificate serial:       1DE8DA
Authority key identifier: 10:85:A4:CD:F7:8C:98:7B:F6:A3:6F:7B:6A:13:AC:B2:E8:91:E0:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d81e5fc116ecd393cdbf8127afbbabd5b1758ebb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/793364d4-dc2e-4449-8e34-4610fa58e87f/9e7dd85900af9adc26ee605531db40092e6ded34.roa
Signing time:             Fri 24 Mar 2023 08:31:47 +0000
ROA not before:           Thu 23 Mar 2023 08:31:47 +0000
ROA not after:            Sat 22 Mar 2025 08:31:47 +0000
asID:                     13335
IP address blocks:        190.93.244.0/22 maxlen: 22
                          2803:f800:50::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1960154 (0x1de8da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d81e5fc116ecd393cdbf8127afbbabd5b1758ebb
        Validity
            Not Before: Mar 23 08:31:47 2023 GMT
            Not After : Mar 22 08:31:47 2025 GMT
        Subject: CN=9e7dd85900af9adc26ee605531db40092e6ded34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:44:be:53:56:77:84:57:19:af:fd:c2:3c:cc:
                    39:44:2f:b8:4c:03:b2:c9:2e:99:2d:8b:7d:17:ec:
                    5e:a5:53:1e:15:ed:57:3b:7a:70:74:4c:71:fd:ff:
                    a2:68:cd:03:a3:ef:a3:5d:2e:22:09:ed:8a:f0:cb:
                    61:61:cc:7e:98:92:4f:53:e4:7c:b1:46:37:62:a6:
                    45:4d:5e:cd:73:05:c0:d7:ff:7f:3d:62:b0:18:2d:
                    37:7d:1d:fe:28:5d:97:3b:8b:c0:19:75:30:3e:ba:
                    90:3b:d1:1d:1b:74:2f:68:55:af:70:f1:93:b6:34:
                    e4:11:21:da:37:17:ef:c9:16:7e:f8:5b:fd:ae:8c:
                    f4:5e:3f:b9:f0:f1:52:4b:be:ae:67:57:e8:5f:95:
                    a6:8c:5b:25:a0:89:48:8c:43:9c:6d:25:b3:0b:27:
                    85:4e:65:51:76:28:0a:2b:98:d8:9b:a9:42:a4:6a:
                    bc:6e:c7:03:a6:eb:6f:1a:1c:0a:df:3e:47:7b:14:
                    0e:eb:73:42:45:c0:e8:b3:e2:44:7d:47:c2:dc:c4:
                    1f:58:dc:09:aa:30:c7:83:7e:c0:75:3d:51:b0:6f:
                    aa:4f:f1:cb:6c:e8:ec:a3:6d:9e:98:29:cf:30:2a:
                    4d:07:65:b7:18:d4:fe:d4:b2:f6:16:0c:88:8d:f3:
                    d9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:49:FA:C8:62:DD:D4:DB:CF:43:3B:70:1C:48:B8:4A:5F:88:F9:6D
            X509v3 Authority Key Identifier:
                keyid:10:85:A4:CD:F7:8C:98:7B:F6:A3:6F:7B:6A:13:AC:B2:E8:91:E0:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d81e5fc116ecd393cdbf8127afbbabd5b1758ebb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/793364d4-dc2e-4449-8e34-4610fa58e87f/9e7dd85900af9adc26ee605531db40092e6ded34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/793364d4-dc2e-4449-8e34-4610fa58e87f/d81e5fc116ecd393cdbf8127afbbabd5b1758ebb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.244.0/22
                IPv6:
                  2803:f800:50::/45

    Signature Algorithm: sha256WithRSAEncryption
         67:3a:6a:04:c4:5c:55:63:7a:41:fb:00:33:85:dc:1b:db:ea:
         84:f8:23:5b:80:fb:d4:28:5b:79:fe:db:37:f1:6e:09:a9:75:
         21:8c:1e:3c:fb:7b:eb:94:7e:f2:88:90:c1:13:24:7d:3f:68:
         79:e4:fd:f8:5a:de:f2:cf:b4:a0:b5:04:f2:36:14:84:44:78:
         fb:37:68:45:4a:74:0c:ee:8a:25:57:de:b2:d1:f4:2c:60:08:
         da:b2:e7:54:90:2d:78:7a:48:6a:05:a1:59:58:ec:0a:28:80:
         4b:b1:23:f7:4b:5c:bc:d6:27:8e:fc:5e:b0:83:11:0d:c1:69:
         24:19:01:9d:6e:1f:73:6b:de:6d:47:9c:59:19:54:38:96:76:
         c2:b9:d8:42:25:32:5d:eb:e4:f2:fe:ee:5f:6a:a3:7e:9b:b9:
         bd:d2:bd:d5:51:c7:59:bd:d9:f5:8a:89:ba:76:12:3f:6e:02:
         2e:ce:c8:e6:a2:21:7c:b4:42:94:88:7c:60:1f:37:0f:ee:44:
         4f:7b:18:82:15:d6:3b:8a:07:31:72:32:23:5b:ab:6a:de:96:
         ac:38:3e:d7:bc:f5:0e:70:e2:c8:f1:1b:38:1e:e8:3d:07:8b:
         e3:4a:77:7b:58:71:88:5e:c8:4f:5c:73:ba:9f:fb:b3:ae:3c:
         ac:60:07:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----