Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/ecd8cbfda10909fc69083cf10af5700c492d0cda.roa
File:                     ecd8cbfda10909fc69083cf10af5700c492d0cda.roa (raw, json)
Hash identifier:          /FSeH/8VH1H/aLvGGDlmXiS3wplP4+mmKMkW6qr60yc=
Subject key identifier:   96:2B:AF:67:F2:8F:E5:62:63:42:0A:3D:12:5D:6E:B1:B5:E7:0C:0D
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       273372
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/ecd8cbfda10909fc69083cf10af5700c492d0cda.roa
Signing time:             Mon 29 Jan 2024 14:43:43 +0000
ROA not before:           Mon 29 Jan 2024 14:43:43 +0000
ROA not after:            Thu 29 Jan 2026 14:43:43 +0000
asID:                     263173
IP address blocks:        190.54.182.0/24 maxlen: 24
                          190.208.8.0/24 maxlen: 24
                          190.54.112.0/23 maxlen: 24
                          2800:3b0:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2569074 (0x273372)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Jan 29 14:43:43 2024 GMT
            Not After : Jan 29 14:43:43 2026 GMT
        Subject: CN=ecd8cbfda10909fc69083cf10af5700c492d0cda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:26:c2:33:98:6e:41:29:02:42:68:1a:a6:51:
                    4b:b1:ae:42:c6:2b:4e:7e:81:c3:08:b3:a2:b9:7e:
                    54:9d:1b:59:d0:9e:a5:01:24:95:b3:37:5d:b9:b9:
                    ab:95:f5:b0:ed:d1:36:c7:1e:79:cf:61:55:43:d8:
                    b8:87:d8:b1:fc:3e:d4:96:7e:ef:73:4e:e8:ed:61:
                    8b:2b:5d:4d:52:6f:5d:59:19:a5:cf:3b:40:99:18:
                    f1:49:69:8a:22:d0:54:9f:a6:32:1b:28:3f:09:31:
                    d1:66:88:3d:91:2d:77:f5:a3:c7:62:a3:84:8e:54:
                    b5:72:eb:9d:22:fd:f0:90:a5:49:9a:76:36:9c:b1:
                    bc:76:a4:2a:7b:eb:eb:d9:99:c6:95:5d:aa:aa:79:
                    40:5b:fb:50:94:ec:fe:dd:4b:32:9d:a5:be:8a:07:
                    6b:bb:d6:99:2a:57:b1:11:89:b5:c0:cb:80:23:55:
                    c3:d0:bd:c7:b5:80:24:36:7a:f8:b0:ca:eb:f8:4c:
                    02:8c:4d:bc:3c:2c:82:53:e6:f0:71:a0:fc:3a:73:
                    0a:8a:56:4d:74:c3:35:56:c5:dd:5f:00:bc:4f:b8:
                    f3:b5:cd:76:f4:4d:e1:96:81:f5:43:47:b4:e0:ec:
                    c0:b1:78:31:ee:4b:cb:cf:4e:c2:9f:68:c1:26:ff:
                    70:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2B:AF:67:F2:8F:E5:62:63:42:0A:3D:12:5D:6E:B1:B5:E7:0C:0D
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/ecd8cbfda10909fc69083cf10af5700c492d0cda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.112.0/23
                  190.54.182.0/24
                  190.208.8.0/24
                IPv6:
                  2800:3b0:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a5:10:81:0e:c1:83:e1:e8:ab:15:52:47:dd:34:2d:a6:1a:8e:
         de:59:f8:de:53:80:f1:c1:b9:46:44:b4:1a:dc:11:90:30:3f:
         e8:9e:a4:69:a5:d9:df:7d:0a:6b:31:c7:e8:9a:b5:3c:a8:91:
         04:a8:b0:9b:ef:39:b4:49:c4:02:86:65:a0:a2:4f:a4:5a:88:
         e8:b7:b6:f8:fe:2d:18:85:4e:7c:a4:78:c7:ab:1c:06:ac:4a:
         d4:21:0f:1a:f7:98:91:bd:cf:68:a4:40:5c:0b:8a:a6:ba:46:
         8e:df:61:94:61:18:40:41:86:5e:1b:ca:c1:50:dd:88:c0:a7:
         6c:f4:60:cb:f6:bb:c0:7d:50:07:c4:e1:2c:2e:d4:87:62:5c:
         a7:9c:76:8f:65:72:b5:ef:46:13:10:0d:eb:9d:25:52:d5:ef:
         cc:91:f6:16:ec:58:47:8d:51:3a:c4:f2:61:91:e7:2f:05:e3:
         3f:ac:6f:d2:10:b6:60:60:a8:d9:23:a0:ac:18:d4:88:c7:bd:
         0e:b1:ef:36:05:91:45:1b:1d:96:24:38:c9:8e:59:70:88:07:
         ad:cc:fb:a7:ce:07:91:1a:5f:d5:7c:37:12:59:fd:b4:42:59:
         15:77:5d:11:53:fb:94:2e:48:c5:a6:7e:b4:f4:4f:a8:60:88:
         99:1a:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----