Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93324fdd-d684-4ba2-9561-fc1c18f8d8ea/9936f456ae7d268f25decfd370cd5b4726578ca5.roa
File:                     9936f456ae7d268f25decfd370cd5b4726578ca5.roa (raw, json)
Hash identifier:          4PWGCCfTulGRodKa/VR3sPNle4K3W6ybSw1WjgzuHms=
Subject key identifier:   CF:C9:06:B7:6A:3E:37:9D:7E:F1:D9:8F:EF:97:49:7A:1E:0A:58:D8
Certificate issuer:       /CN=1c33cd24270cada6da31a888012312771b5c5073
Certificate serial:       11758B
Authority key identifier: 50:94:73:16:DF:A0:9C:B8:94:55:B0:7C:B3:27:47:D3:0A:A2:38:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c33cd24270cada6da31a888012312771b5c5073.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93324fdd-d684-4ba2-9561-fc1c18f8d8ea/9936f456ae7d268f25decfd370cd5b4726578ca5.roa
Signing time:             Sun 18 Jun 2023 20:29:07 +0000
ROA not before:           Sat 17 Jun 2023 20:29:07 +0000
ROA not after:            Wed 18 Jun 2025 20:29:07 +0000
asID:                     269938
IP address blocks:        190.83.60.0/24 maxlen: 24
                          190.83.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1144203 (0x11758b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c33cd24270cada6da31a888012312771b5c5073
        Validity
            Not Before: Jun 17 20:29:07 2023 GMT
            Not After : Jun 18 20:29:07 2025 GMT
        Subject: CN=9936f456ae7d268f25decfd370cd5b4726578ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1b:63:6e:f9:cb:be:e0:62:ba:1f:7a:f2:27:
                    f4:3d:a6:ba:ea:89:e3:ff:f5:55:ae:72:78:ab:71:
                    c0:8d:14:1a:c0:72:32:f5:6e:4a:71:57:36:dc:a6:
                    82:3f:74:f5:c2:9d:c5:62:97:17:b7:69:7e:e5:c8:
                    49:2b:6c:fe:e7:61:2e:50:02:8a:85:52:e2:0a:42:
                    92:84:28:20:a5:46:30:f6:26:a2:11:94:58:65:31:
                    52:01:42:46:59:e4:87:1b:bc:87:33:15:ca:d2:9b:
                    61:d2:85:0e:38:62:ea:d0:3a:61:cd:26:4e:71:ed:
                    74:e9:08:e4:40:e9:73:67:57:b4:81:70:04:25:10:
                    41:71:57:08:52:dd:04:a6:a5:f9:25:5d:29:16:55:
                    d0:2e:87:58:d4:a4:2c:7e:97:fa:c2:55:72:9a:72:
                    39:50:dd:dc:88:d3:8e:4c:ae:69:70:12:5c:af:d7:
                    fd:18:c2:a2:05:e2:fc:24:18:86:83:40:c3:b3:4a:
                    1a:72:86:70:b0:c1:86:cb:c0:03:57:06:14:6a:ff:
                    89:40:da:1b:fd:1a:a8:b6:5e:84:63:f5:97:96:d4:
                    cf:75:84:ca:74:ee:99:1e:6a:a3:82:75:a3:2b:ee:
                    ef:57:73:cf:18:6f:04:e1:f2:d7:c4:e8:6b:52:7e:
                    f6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C9:06:B7:6A:3E:37:9D:7E:F1:D9:8F:EF:97:49:7A:1E:0A:58:D8
            X509v3 Authority Key Identifier:
                keyid:50:94:73:16:DF:A0:9C:B8:94:55:B0:7C:B3:27:47:D3:0A:A2:38:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c33cd24270cada6da31a888012312771b5c5073.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93324fdd-d684-4ba2-9561-fc1c18f8d8ea/9936f456ae7d268f25decfd370cd5b4726578ca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93324fdd-d684-4ba2-9561-fc1c18f8d8ea/1c33cd24270cada6da31a888012312771b5c5073.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:af:a8:43:b0:e9:3c:7e:cc:f5:8c:62:d6:c6:1b:12:f0:0f:
         86:bb:b1:3c:e3:3a:d9:4a:d2:96:36:6f:9e:3c:2d:bc:98:32:
         db:1e:93:b5:7c:65:19:9b:73:4b:83:04:34:e9:d9:21:58:3f:
         9e:23:70:5d:0a:0d:ba:7a:f9:cf:73:6a:b6:86:3e:7b:6c:5e:
         4e:9d:18:70:e3:3e:02:81:2b:13:03:9e:d4:68:86:c1:3d:59:
         51:87:3a:b2:ea:d6:5e:49:44:6d:24:20:ca:8a:18:3a:c7:bc:
         0c:c4:72:50:99:55:69:94:b8:96:1a:60:e6:5a:cb:3a:c7:1a:
         1b:cf:a6:7f:6e:f2:62:e4:ca:db:ee:07:0d:43:69:2a:18:63:
         66:0c:fa:15:fb:cc:00:b0:81:c0:93:7f:fd:20:21:f6:b1:dc:
         36:51:e9:8b:fc:7b:e8:b3:ff:76:14:35:d4:f0:6b:85:6b:92:
         a4:6e:ba:d2:48:f1:51:14:7a:8b:c5:4d:92:c5:b2:28:6a:f9:
         d2:e5:aa:33:c0:6c:5a:b1:2f:9b:a9:28:bc:5f:c9:de:6b:38:
         0c:eb:6d:fb:8a:a1:40:03:4b:79:33:b2:40:20:01:f8:7a:3b:
         38:aa:de:71:5c:3d:ef:53:da:1f:17:7a:de:1e:de:cf:8a:44:
         70:83:74:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----