Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/212625cf3dcea2a39e05f0e349449370cf0a69a2.roa
File:                     212625cf3dcea2a39e05f0e349449370cf0a69a2.roa (raw, json)
Hash identifier:          WGpteKuiAb2eA53FxmEW4F/CtJVorUTVotwjyP58T/o=
Subject key identifier:   6C:AC:97:0D:F6:14:DD:4D:AF:8D:03:C3:EE:EA:25:4E:71:68:13:7E
Certificate issuer:       /CN=8cca422c9ff30980ab758c3310c2e40a2e836482
Certificate serial:       225177
Authority key identifier: 2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/212625cf3dcea2a39e05f0e349449370cf0a69a2.roa
Signing time:             Thu 29 Jun 2023 20:28:26 +0000
ROA not before:           Wed 28 Jun 2023 20:28:25 +0000
ROA not after:            Sun 29 Jun 2025 20:28:25 +0000
asID:                     265620
IP address blocks:        190.61.32.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2249079 (0x225177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cca422c9ff30980ab758c3310c2e40a2e836482
        Validity
            Not Before: Jun 28 20:28:25 2023 GMT
            Not After : Jun 29 20:28:25 2025 GMT
        Subject: CN=212625cf3dcea2a39e05f0e349449370cf0a69a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:31:b5:4e:b5:de:14:10:1e:f2:fc:1b:d8:02:
                    a1:89:2e:35:15:4e:55:a2:23:e6:bc:c0:85:9c:e0:
                    c0:c7:dc:e4:ef:2d:36:09:16:35:54:91:15:80:3d:
                    a3:5c:18:67:c0:12:e2:9d:2f:f2:85:57:22:20:10:
                    04:45:a5:65:f5:39:20:8e:20:d8:ce:85:84:b9:46:
                    be:73:26:f5:5d:4f:7a:b7:de:b5:b4:b6:4a:2a:af:
                    48:6c:47:5e:33:30:70:59:6f:ba:6e:93:a3:ad:9b:
                    60:37:37:0e:3c:5e:1e:f0:46:41:35:58:4b:93:d4:
                    34:16:53:9c:77:e5:96:6e:eb:50:9b:a2:2c:c2:b4:
                    70:21:93:f7:ba:89:f9:00:6c:6a:f4:eb:5a:d1:80:
                    1c:59:be:4c:62:90:e0:c1:0b:11:52:fd:dc:a3:b8:
                    5b:ab:b9:d8:ad:ef:c1:c5:33:2f:c6:9d:4d:b9:88:
                    bd:d5:fb:64:e3:62:93:bc:2c:b4:20:9f:83:62:b7:
                    8e:90:59:4a:c3:f7:47:f8:e4:c6:10:83:ab:8f:fb:
                    42:9a:bd:54:5e:37:24:aa:1a:3c:70:33:66:71:60:
                    b5:9a:ea:cf:d3:76:3b:f3:37:c1:81:1e:b5:1e:17:
                    5d:87:7f:1a:a2:92:35:dd:be:77:ec:86:4d:2c:43:
                    cc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AC:97:0D:F6:14:DD:4D:AF:8D:03:C3:EE:EA:25:4E:71:68:13:7E
            X509v3 Authority Key Identifier:
                keyid:2A:0B:F2:11:DE:DB:46:2F:1C:7A:03:FA:E4:0C:91:34:F8:28:00:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cca422c9ff30980ab758c3310c2e40a2e836482.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/212625cf3dcea2a39e05f0e349449370cf0a69a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8ab6ff92-565a-4bed-a72c-64ceb3b605aa/8cca422c9ff30980ab758c3310c2e40a2e836482.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.61.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:13:6b:f6:01:a4:43:b8:97:10:07:4c:fd:e7:56:83:60:b2:
         a6:b2:df:c8:7d:50:f1:c8:26:1b:e9:92:5a:f4:73:15:51:72:
         65:9e:96:19:c8:a0:bd:67:86:a5:ea:fb:f7:e1:9e:52:81:97:
         61:4d:07:2c:77:ac:1c:36:e1:8c:84:d4:95:67:91:83:b4:e5:
         e0:fc:20:4e:e3:cd:11:50:fc:c6:06:f4:80:4d:ff:b7:f8:b9:
         f4:4c:5c:1e:64:b5:cf:4a:ac:5d:3c:cb:4b:d6:46:2c:62:e1:
         0a:4e:66:7d:e2:22:29:1c:63:ff:be:2f:86:bc:13:4e:a7:60:
         f0:1b:1c:b7:94:02:e8:fd:b0:f0:39:1b:58:a2:61:a1:f9:06:
         5a:31:a8:50:69:16:39:f2:e0:74:93:76:46:8c:ea:35:76:15:
         d0:b0:17:3b:54:13:ad:eb:4f:bf:75:eb:cc:02:08:4a:b8:03:
         6d:39:20:2b:7c:f5:dc:0a:c9:22:f8:0b:5b:cf:7e:97:ff:ef:
         eb:e3:e4:cf:2f:e8:9b:d7:48:69:47:68:45:df:75:71:74:51:
         71:ae:bd:33:d2:cf:08:75:e3:6d:8b:85:36:07:8f:67:7d:53:
         47:11:b7:fd:27:3c:15:2f:ce:28:5f:0f:47:5c:b9:0e:28:1d:
         48:48:71:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----