Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/f7c3dd77d790b827abbf600634a8b5eebc7d1383.roa
File:                     f7c3dd77d790b827abbf600634a8b5eebc7d1383.roa (raw, json)
Hash identifier:          2g8M6SPbJL7t3eKt0kMURfHgDpv2SS6HEkRsK0JD8eo=
Subject key identifier:   A3:70:96:81:A6:EB:8E:5C:87:4C:92:B1:13:C1:3A:3E:39:5A:D3:CC
Certificate issuer:       /CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
Certificate serial:       274AF5
Authority key identifier: 3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/f7c3dd77d790b827abbf600634a8b5eebc7d1383.roa
Signing time:             Mon 29 Jan 2024 14:43:48 +0000
ROA not before:           Mon 29 Jan 2024 14:43:43 +0000
ROA not after:            Thu 29 Jan 2026 14:43:43 +0000
asID:                     272858
IP address blocks:        190.54.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2575093 (0x274af5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Validity
            Not Before: Jan 29 14:43:43 2024 GMT
            Not After : Jan 29 14:43:43 2026 GMT
        Subject: CN=f7c3dd77d790b827abbf600634a8b5eebc7d1383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:41:35:3e:68:d9:f9:0f:45:21:ab:2c:85:13:
                    ca:44:93:8b:a2:6f:83:1f:c7:0d:57:9d:7f:4d:53:
                    42:79:0a:e0:0a:67:5c:4e:7e:f9:7d:6a:22:14:f7:
                    9a:78:c4:8c:73:f4:8c:1d:a9:5a:33:1b:29:b9:f2:
                    6c:06:3b:49:cc:59:b0:04:00:3b:01:74:93:88:f4:
                    97:e5:d1:83:1b:52:37:7b:5a:35:36:c0:6b:b2:b4:
                    48:e2:6b:fd:aa:d6:4d:d2:76:fd:4e:f1:56:29:1c:
                    18:d3:41:15:ba:74:be:9e:b0:32:b3:d8:e6:4f:cb:
                    dc:da:3a:6c:17:3e:47:16:6c:e1:66:59:8d:7a:bd:
                    48:27:19:e5:81:de:23:f5:22:c5:87:92:de:41:a8:
                    a9:6a:40:81:7b:50:eb:b1:cf:3e:d8:a5:97:6b:52:
                    cb:7d:3a:6d:f7:0d:7a:19:09:46:dd:8a:c9:b8:66:
                    ab:a7:c4:43:d1:88:b2:62:bc:cf:72:89:9c:01:c3:
                    f3:4a:1a:dc:82:4f:2b:22:b1:66:a1:05:df:d5:82:
                    ec:7d:2e:38:1d:73:4b:d2:03:7f:d8:e6:b5:70:57:
                    8c:45:37:11:7c:3c:3e:dd:25:02:e0:c8:b9:fa:c7:
                    ff:3f:a1:ba:52:f2:1b:b9:f3:d2:26:34:25:d4:3b:
                    d7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:70:96:81:A6:EB:8E:5C:87:4C:92:B1:13:C1:3A:3E:39:5A:D3:CC
            X509v3 Authority Key Identifier:
                keyid:3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/f7c3dd77d790b827abbf600634a8b5eebc7d1383.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.54.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:0e:f8:59:cb:58:e3:16:e4:70:c4:c7:2f:40:88:5c:40:5d:
         d0:00:bb:f8:aa:00:d5:4c:89:fe:17:68:41:e2:5a:5f:1a:c6:
         06:c3:4b:28:a8:6e:12:34:d9:dc:76:4d:fd:f0:4a:01:d2:dd:
         2d:4f:50:b7:37:3e:14:ec:e8:2e:0b:16:13:87:9f:af:ae:b0:
         87:07:8a:21:c6:d8:53:59:0b:08:0c:0a:6f:bc:a1:6b:12:84:
         08:01:f1:0c:71:6c:b6:68:7a:51:55:27:f1:2b:44:a1:6d:b9:
         89:8f:0b:e2:4d:b8:1c:8e:df:8c:42:b9:d0:48:7d:f4:64:22:
         a1:28:44:0e:b0:46:2e:16:d9:f8:b3:2d:44:53:86:fd:59:ea:
         95:cf:5d:08:ef:97:d4:59:bf:90:64:f9:44:76:d6:eb:23:81:
         cf:de:fb:e8:f5:10:90:5e:ea:92:14:d8:b6:1d:1e:8f:c4:a1:
         3c:ea:6b:50:c4:c0:3d:a4:bb:b7:01:d6:f9:27:8d:fd:2f:3a:
         39:ea:6c:5d:6b:d8:d2:4d:05:19:28:35:2d:d6:20:ee:7e:b3:
         4b:9a:aa:15:9d:23:05:50:9d:a4:77:89:9a:49:f2:01:e0:6b:
         17:d6:44:ff:33:9e:c2:94:46:71:85:e7:97:a8:70:fa:21:7a:
         b2:cb:ab:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----