Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/a15ee6bef2e1cec540657882e57799fc903d8deb.roa
File:                     a15ee6bef2e1cec540657882e57799fc903d8deb.roa (raw, json)
Hash identifier:          CGy9vRD4ttR3/dQK0/GuwTe4wHAmqHQIQpDqKezcU38=
Subject key identifier:   BA:0D:6A:FD:6C:5F:FB:A5:A3:4C:CA:E4:C1:B0:EC:E7:BC:BB:77:66
Certificate issuer:       /CN=17e63b4149d0b23e7b741a7cccfb0b544a043d7b
Certificate serial:       29003F
Authority key identifier: 7D:BF:36:DC:91:A2:4C:E6:1D:EA:8F:47:24:E7:9C:88:DA:69:03:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/a15ee6bef2e1cec540657882e57799fc903d8deb.roa
Signing time:             Thu 29 Feb 2024 01:31:53 +0000
ROA not before:           Thu 29 Feb 2024 01:31:39 +0000
ROA not after:            Thu 01 Mar 2029 01:31:39 +0000
asID:                     27947
IP address blocks:        190.15.128.0/20 maxlen: 24
                          2800:68::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2687039 (0x29003f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e63b4149d0b23e7b741a7cccfb0b544a043d7b
        Validity
            Not Before: Feb 29 01:31:39 2024 GMT
            Not After : Mar  1 01:31:39 2029 GMT
        Subject: CN=a15ee6bef2e1cec540657882e57799fc903d8deb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:59:11:f0:f3:11:fd:d8:31:f9:78:ea:f5:bb:
                    fd:fa:33:c9:11:0d:21:81:b6:92:1e:70:e5:a8:2b:
                    e4:61:d7:69:67:47:45:90:29:03:ab:49:a7:70:78:
                    5a:79:9c:5f:28:04:13:48:b7:59:4b:83:da:b7:be:
                    e8:97:cc:ea:a2:86:01:cd:c9:7b:13:c2:73:ec:e1:
                    a7:74:2b:4b:97:9b:de:7d:d6:0d:08:b1:8c:48:a0:
                    37:1c:ca:1f:0a:10:09:a2:db:9b:db:7c:c0:cf:52:
                    3d:bc:58:53:25:d4:3b:8c:ba:3c:ce:44:24:04:11:
                    67:74:d4:49:b5:89:6e:5d:95:81:9b:f5:a5:2c:b0:
                    b1:af:28:21:1e:d6:b7:ef:33:a5:8d:6e:92:f0:96:
                    29:27:22:a9:e4:f5:95:4c:be:fb:8e:89:11:42:e4:
                    a2:96:c1:8d:d7:37:82:5b:5c:50:da:3d:32:90:2a:
                    53:32:3c:9d:f3:1e:9d:4a:5b:81:05:d1:a9:52:31:
                    70:c2:b6:fb:4e:c4:49:6c:7e:4e:9f:4c:e5:17:06:
                    db:aa:ef:26:0f:06:bf:01:5c:3d:bd:11:48:6b:d6:
                    4d:25:14:a2:53:a5:6a:c1:5a:1d:09:d0:15:11:a0:
                    a2:c9:8b:79:3f:fc:65:02:90:e5:76:9a:1a:d6:16:
                    8d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:0D:6A:FD:6C:5F:FB:A5:A3:4C:CA:E4:C1:B0:EC:E7:BC:BB:77:66
            X509v3 Authority Key Identifier:
                keyid:7D:BF:36:DC:91:A2:4C:E6:1D:EA:8F:47:24:E7:9C:88:DA:69:03:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/a15ee6bef2e1cec540657882e57799fc903d8deb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.128.0/20
                IPv6:
                  2800:68::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:68:47:04:03:f9:5e:a8:b7:2f:e1:ee:3a:7d:e3:a4:ce:7f:
         36:13:28:6e:17:31:f5:c2:e2:6b:92:ec:6c:48:bc:5d:c6:1b:
         45:04:55:51:b2:7d:22:b0:d8:be:e5:a6:70:83:d5:1f:79:59:
         2a:ad:97:49:fb:77:67:7f:c7:4d:68:8e:f6:c2:4e:3f:50:e6:
         b1:46:cf:af:63:26:53:8c:3e:3f:03:28:9d:96:6d:78:86:3f:
         e2:fb:d3:6c:51:8e:f9:97:62:78:81:59:cc:db:55:7d:0f:5a:
         c4:cc:83:89:85:2b:f8:0c:21:69:01:19:f9:36:b9:d5:a1:73:
         4d:2c:1d:49:7a:b6:47:b9:6a:89:eb:e9:19:75:92:74:f1:34:
         67:f0:28:72:74:93:f9:8e:45:b2:7b:84:73:d3:85:45:b8:03:
         ae:41:47:15:e4:73:f7:bc:26:7a:f8:fc:59:d4:d2:f2:7c:17:
         28:bf:bb:d6:41:9c:fe:92:cf:80:94:12:43:5d:0a:f6:70:38:
         8c:a0:1f:15:ab:2b:f5:01:3a:48:e4:70:a9:4f:96:92:18:65:
         94:7f:87:57:ca:aa:cb:0c:4b:04:29:cf:ed:d3:eb:7c:99:f6:
         c0:12:59:1e:35:6c:b2:d4:67:91:4b:cf:df:cc:ff:9c:00:f4:
         46:ea:2a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----