Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93324fdd-d684-4ba2-9561-fc1c18f8d8ea/fdabebb5868bdf0898ba5c7d73ca797fccacd381.roa
File:                     fdabebb5868bdf0898ba5c7d73ca797fccacd381.roa (raw, json)
Hash identifier:          30JzcaRFmqK+9pUX6JjQLB3nIL5D2QU3TfAYKCxDRT8=
Subject key identifier:   FA:F3:7D:BD:19:D9:3E:D6:CB:FD:50:B3:1D:E6:A3:68:25:BF:AE:9F
Certificate issuer:       /CN=1c33cd24270cada6da31a888012312771b5c5073
Certificate serial:       115A27
Authority key identifier: 50:94:73:16:DF:A0:9C:B8:94:55:B0:7C:B3:27:47:D3:0A:A2:38:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c33cd24270cada6da31a888012312771b5c5073.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93324fdd-d684-4ba2-9561-fc1c18f8d8ea/fdabebb5868bdf0898ba5c7d73ca797fccacd381.roa
Signing time:             Thu 15 Jun 2023 19:42:39 +0000
ROA not before:           Wed 14 Jun 2023 19:42:39 +0000
ROA not after:            Sun 15 Jun 2025 19:42:39 +0000
asID:                     269938
IP address blocks:        190.83.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1137191 (0x115a27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c33cd24270cada6da31a888012312771b5c5073
        Validity
            Not Before: Jun 14 19:42:39 2023 GMT
            Not After : Jun 15 19:42:39 2025 GMT
        Subject: CN=fdabebb5868bdf0898ba5c7d73ca797fccacd381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:67:7d:cc:61:46:2c:7b:3b:5a:63:8d:23:fe:
                    59:c3:16:7c:71:ef:97:d3:0a:1d:8e:ae:e7:6a:a8:
                    eb:66:c4:ea:b2:77:2c:a0:29:05:71:0e:89:42:56:
                    78:77:18:2d:2b:34:c9:fb:21:59:dc:86:d3:93:ee:
                    66:3b:64:25:f1:68:6e:cb:0f:f3:db:6c:b3:4e:c4:
                    3e:76:11:ea:62:a3:4d:2a:7b:74:4d:a3:f4:a4:08:
                    d6:f6:3b:16:11:fd:63:67:d8:aa:c6:91:04:e3:a7:
                    f0:a8:0b:4b:7c:eb:bc:74:a1:88:41:2e:c2:38:00:
                    82:12:aa:5f:ca:d8:5d:bd:c4:e1:c7:ab:35:f9:31:
                    82:ee:44:cf:5f:8f:e6:5a:ef:0b:4b:60:4b:4c:d0:
                    19:21:d4:35:cf:5c:2f:cc:0c:8c:c9:c1:12:1f:a6:
                    ed:aa:dc:c9:05:ee:3c:6d:93:e0:de:30:a4:de:40:
                    09:be:73:d3:6d:4a:c9:ef:ca:cf:d2:62:b9:1a:a2:
                    73:db:54:55:ac:a2:89:6d:78:77:35:79:fd:56:90:
                    31:f9:f8:2f:85:16:2f:a1:1f:ec:d0:14:bf:06:36:
                    ea:c8:08:b5:e8:80:10:f2:dd:8f:70:29:65:69:68:
                    1f:a1:39:27:af:70:7d:94:e9:cc:08:e8:d8:57:68:
                    4c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F3:7D:BD:19:D9:3E:D6:CB:FD:50:B3:1D:E6:A3:68:25:BF:AE:9F
            X509v3 Authority Key Identifier:
                keyid:50:94:73:16:DF:A0:9C:B8:94:55:B0:7C:B3:27:47:D3:0A:A2:38:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c33cd24270cada6da31a888012312771b5c5073.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93324fdd-d684-4ba2-9561-fc1c18f8d8ea/fdabebb5868bdf0898ba5c7d73ca797fccacd381.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93324fdd-d684-4ba2-9561-fc1c18f8d8ea/1c33cd24270cada6da31a888012312771b5c5073.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:db:53:78:ed:8a:3d:aa:59:0d:65:5a:3b:49:93:4b:d8:84:
         e8:5f:3e:b5:76:e3:75:f0:81:b8:6e:a6:a2:9a:06:ed:39:10:
         6a:20:bf:7c:17:11:8f:a6:f2:78:59:0b:8c:b0:76:c2:64:ea:
         1b:50:4f:bc:cc:9e:8d:78:bf:e2:0d:46:0b:7f:50:15:be:83:
         bd:c8:67:29:65:15:68:25:8a:6a:a9:1f:2d:ae:69:bd:21:7b:
         89:67:c3:43:9a:7d:55:2f:be:06:7a:48:6a:a3:e1:12:9f:94:
         45:8c:24:fe:b1:f2:8c:34:54:e6:dd:45:b9:e5:dc:e4:ad:61:
         8f:2f:43:ed:e4:aa:4b:00:d3:5c:54:97:96:80:64:1b:df:da:
         52:02:b0:9a:08:e7:3b:63:f2:dc:b2:15:8c:22:d6:1a:3f:4a:
         e5:91:9a:27:d7:e5:73:a8:03:eb:78:0a:9c:40:f0:28:f1:22:
         71:d3:cc:bc:f2:e4:9d:14:1a:68:dc:04:6a:02:80:de:1a:e4:
         be:21:ed:1d:aa:09:ee:7e:22:26:99:e9:34:05:e9:5a:b8:9d:
         5f:91:8d:63:6a:2f:9c:ab:76:7c:87:85:d8:8a:4f:e7:52:cd:
         a6:35:0a:47:95:20:c1:e0:db:ee:36:8f:ec:17:dd:86:40:03:
         b1:b6:ec:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----