Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/95768f2d-c858-4ead-b85c-580ee3c53caf/90c57dddc26beed304a129e9ec9e9a903ad13ebd.roa
File:                     90c57dddc26beed304a129e9ec9e9a903ad13ebd.roa (raw, json)
Hash identifier:          8EP9SjeboIqG0U6V+i5OST1iB+CyXJcvjPdtLKkeMt0=
Subject key identifier:   A0:9F:B9:ED:6E:80:C7:36:98:1E:AF:28:7D:63:6A:A3:9D:01:1D:47
Certificate issuer:       /CN=637d8fdc4535b0e4099c644d47106ef014aaaeea
Certificate serial:       2458E4
Authority key identifier: 48:34:2B:6E:D3:2F:1C:9A:0E:26:05:34:12:EA:A7:7F:83:5F:25:F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/637d8fdc4535b0e4099c644d47106ef014aaaeea.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/95768f2d-c858-4ead-b85c-580ee3c53caf/90c57dddc26beed304a129e9ec9e9a903ad13ebd.roa
Signing time:             Tue 24 Oct 2023 15:36:43 +0000
ROA not before:           Tue 24 Oct 2023 15:36:43 +0000
ROA not after:            Fri 24 Oct 2025 15:36:43 +0000
asID:                     27792
IP address blocks:        181.189.192.0/19 maxlen: 24
                          200.2.120.0/21 maxlen: 24
                          143.202.24.0/22 maxlen: 24
                          190.6.96.0/20 maxlen: 24
                          190.6.112.0/21 maxlen: 24
                          170.84.212.0/22 maxlen: 24
                          2800:5a0::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2382052 (0x2458e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=637d8fdc4535b0e4099c644d47106ef014aaaeea
        Validity
            Not Before: Oct 24 15:36:43 2023 GMT
            Not After : Oct 24 15:36:43 2025 GMT
        Subject: CN=90c57dddc26beed304a129e9ec9e9a903ad13ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4c:e8:5c:aa:3c:bd:2c:81:b1:55:41:d9:de:
                    78:51:2b:aa:1d:09:42:db:6e:99:8a:38:93:5c:58:
                    76:d1:52:34:df:d3:8b:1e:17:91:74:08:d6:3f:d9:
                    70:a1:05:f3:c8:b3:19:6a:27:b3:61:a2:9a:81:3b:
                    d0:75:c4:97:8e:c4:d2:7f:23:08:8b:d2:0c:51:4d:
                    83:55:45:e3:a1:a9:c5:e2:cc:6e:56:8f:1d:93:8a:
                    3d:20:68:fa:33:ae:ef:c0:d0:9f:09:26:90:6e:4c:
                    2a:d7:8e:19:f9:fb:4a:ff:04:41:5f:5a:0d:a1:1e:
                    21:39:23:a4:e5:07:12:11:31:af:ca:4f:62:a5:6b:
                    37:45:c6:96:d5:19:86:d2:94:59:78:4e:e1:74:2a:
                    50:eb:41:12:d0:41:a5:0d:04:e4:bb:46:ca:3b:66:
                    c6:82:2b:76:c1:4a:36:31:8f:05:5f:28:90:7e:8c:
                    fa:a0:5a:86:d5:bd:74:d9:db:85:0e:c4:20:b9:dc:
                    6b:7f:06:c9:19:54:2c:c2:55:a3:52:30:32:bb:bf:
                    34:1e:1c:44:22:17:91:ef:90:31:af:39:c3:86:85:
                    fd:18:70:4b:8e:af:a6:84:6e:01:6d:57:f5:95:dd:
                    cd:e2:a6:54:25:38:c3:a0:56:13:97:c9:32:81:f5:
                    1f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9F:B9:ED:6E:80:C7:36:98:1E:AF:28:7D:63:6A:A3:9D:01:1D:47
            X509v3 Authority Key Identifier:
                keyid:48:34:2B:6E:D3:2F:1C:9A:0E:26:05:34:12:EA:A7:7F:83:5F:25:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/637d8fdc4535b0e4099c644d47106ef014aaaeea.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/95768f2d-c858-4ead-b85c-580ee3c53caf/90c57dddc26beed304a129e9ec9e9a903ad13ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/95768f2d-c858-4ead-b85c-580ee3c53caf/637d8fdc4535b0e4099c644d47106ef014aaaeea.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.24.0/22
                  170.84.212.0/22
                  181.189.192.0/19
                  190.6.96.0-190.6.119.255
                  200.2.120.0/21
                IPv6:
                  2800:5a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:03:cf:87:68:2d:95:84:63:4b:df:15:73:16:df:c6:d3:c5:
         dc:88:de:44:b4:1b:bd:99:0f:84:56:b1:9b:7b:c2:fa:d4:4b:
         3d:c4:66:9f:3f:7b:c3:de:c2:00:dd:5f:ac:c5:b9:04:19:56:
         fd:90:55:29:66:b8:77:1d:14:e6:ce:41:4a:f6:cf:0e:81:63:
         eb:60:ac:da:4e:05:4e:f6:3d:a0:16:d5:07:31:c9:a0:55:37:
         2f:cb:2e:90:74:81:18:a8:12:72:01:6c:f7:12:4f:88:8c:3d:
         6d:2e:68:43:93:ec:96:23:dc:92:4e:0c:dc:6f:41:17:f9:ff:
         a7:41:a2:7b:53:3b:42:99:d0:38:7f:aa:8a:95:81:30:87:03:
         6d:30:ce:6b:5e:94:3d:35:55:e7:32:d5:a1:7c:c3:66:b3:00:
         0d:45:f1:43:c8:63:34:df:40:b2:14:da:2f:e3:ed:f3:30:66:
         72:33:5a:31:e3:ca:1b:5a:b3:b4:c1:9a:cd:af:89:76:fc:01:
         60:8e:1c:3c:cd:80:50:dc:73:6e:97:b5:4b:b8:1d:6f:d1:6c:
         f4:32:81:7c:c5:d6:d2:bd:9f:16:d3:00:fc:6b:97:5d:ef:f7:
         46:36:51:6c:3d:96:03:a0:a2:85:38:fc:e8:e5:05:c6:d1:b8:
         e5:34:57:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----