Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/21e566f01c647265837ffd45dc52f1d5b346661b.roa
File:                     21e566f01c647265837ffd45dc52f1d5b346661b.roa (raw, json)
Hash identifier:          JiQQTgjeH75ruXAjrP4fvTnv3tdMMIKkeXixf5muFhA=
Subject key identifier:   EF:5E:D6:8D:D5:22:FD:B1:C2:8C:16:90:2F:D5:11:4C:9D:89:C0:B2
Certificate issuer:       /CN=600a05248a907def76410027882b2f4a8085c07a
Certificate serial:       2174F5
Authority key identifier: BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/21e566f01c647265837ffd45dc52f1d5b346661b.roa
Signing time:             Thu 13 Jul 2023 11:57:17 +0000
ROA not before:           Wed 12 Jul 2023 11:57:17 +0000
ROA not after:            Sun 13 Jul 2025 11:57:17 +0000
asID:                     27805
IP address blocks:        191.94.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2192629 (0x2174f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600a05248a907def76410027882b2f4a8085c07a
        Validity
            Not Before: Jul 12 11:57:17 2023 GMT
            Not After : Jul 13 11:57:17 2025 GMT
        Subject: CN=21e566f01c647265837ffd45dc52f1d5b346661b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5f:eb:d6:00:3a:fd:5f:16:e0:27:89:4f:4a:
                    8e:38:b3:b0:f2:ad:30:4a:93:92:dc:16:a1:32:ba:
                    0d:4c:5e:14:54:20:5b:38:0c:81:90:7f:0e:86:f9:
                    1d:01:c8:95:33:83:6b:d6:22:62:0a:78:02:e1:92:
                    b4:f7:27:8e:9b:d4:78:2a:63:27:62:a2:81:ca:09:
                    91:6c:e3:53:0d:d6:b8:77:45:18:0a:dd:9d:98:16:
                    9b:28:17:12:6d:f0:cb:2d:a7:6c:75:97:a6:e6:36:
                    e1:d2:9f:24:e5:1c:e5:5b:ad:97:2a:b7:8c:92:3e:
                    b7:d3:a8:24:32:80:fd:a2:25:f1:91:90:3c:5f:a1:
                    82:a1:4b:0f:66:97:15:86:fa:cf:cb:8b:d7:a5:8d:
                    0c:07:bc:c1:85:8e:2d:61:44:cf:e2:6c:15:44:80:
                    fc:3d:40:19:f9:75:0e:20:00:f0:e7:f8:6a:40:90:
                    6e:d1:e3:7b:d4:4a:dd:83:d3:ca:e6:be:2e:b8:8c:
                    77:28:94:2b:36:67:ec:01:2d:45:50:74:67:f6:89:
                    d6:a2:99:12:9c:8b:32:cd:5d:18:9c:2a:ab:d6:c6:
                    f4:ad:46:5d:c6:6e:64:e6:2b:af:01:e5:2b:29:50:
                    71:ca:59:e7:88:b2:b2:8f:c4:87:83:ba:b7:90:01:
                    d6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5E:D6:8D:D5:22:FD:B1:C2:8C:16:90:2F:D5:11:4C:9D:89:C0:B2
            X509v3 Authority Key Identifier:
                keyid:BC:3B:FF:4B:5D:A8:0B:F5:44:27:AE:25:A5:40:BB:0C:11:7C:D2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/600a05248a907def76410027882b2f4a8085c07a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/21e566f01c647265837ffd45dc52f1d5b346661b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9bea6cad-29d6-4385-a4f9-cbe4ba3d121f/600a05248a907def76410027882b2f4a8085c07a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.94.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         22:d1:d6:82:56:90:4a:da:41:68:10:0f:f7:99:71:f3:e5:ef:
         ad:c1:31:02:b1:08:25:c0:f7:4a:b8:61:fd:03:de:0a:36:3c:
         e2:18:e8:f9:a5:e8:e2:2e:60:28:8c:e4:29:c4:1f:0e:05:07:
         91:a2:4f:39:79:1b:9c:7c:b5:f6:a5:35:6c:42:9d:56:d5:24:
         a2:3c:04:09:44:9f:8f:14:9a:65:ad:b6:21:cc:12:ae:88:8f:
         13:11:99:59:98:96:28:ff:76:ba:c4:6e:19:08:fd:b4:30:72:
         44:a6:ab:d7:e6:10:13:f4:38:7e:c3:cb:52:62:4a:a9:9f:43:
         a3:59:8a:4d:88:ec:a5:e8:d4:19:c8:55:00:57:21:97:0e:2d:
         5b:6e:5d:ac:4d:a5:e2:2f:d1:e0:ac:dc:8f:54:ea:dd:ec:de:
         63:2b:b4:b9:38:2b:7e:66:38:ab:2a:a8:bd:91:77:da:99:78:
         54:53:69:cc:1b:0a:14:9c:e9:af:79:c6:9c:96:41:68:65:db:
         3b:8e:0f:01:ed:af:c1:c0:fa:f9:a1:81:c0:7b:d8:b2:26:7b:
         dc:e0:fc:29:db:9b:04:9e:52:46:91:41:b2:04:57:6d:e9:43:
         b5:18:47:7b:40:5a:79:82:5c:01:2b:2b:04:9c:4c:43:22:90:
         bb:9f:27:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----