Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/fefccafb227c16dc1712df3f125a3f89ab526317.roa
File:                     fefccafb227c16dc1712df3f125a3f89ab526317.roa (raw, json)
Hash identifier:          hOt/A+cxqbcVrmKvs72Ii5LGse7EJe3uv+ousPbxBgo=
Subject key identifier:   B7:D9:04:49:91:B0:6B:C7:70:05:BF:8A:49:17:98:C1:19:64:9C:45
Certificate issuer:       /CN=a23199cb189fb1502d1df2754deb1df76afcb5ba
Certificate serial:       2495EE
Authority key identifier: 44:AB:5C:70:33:1F:8E:21:11:28:C2:50:CE:04:FC:95:27:BC:E2:CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a23199cb189fb1502d1df2754deb1df76afcb5ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/fefccafb227c16dc1712df3f125a3f89ab526317.roa
Signing time:             Wed 18 Oct 2023 00:27:09 +0000
ROA not before:           Tue 17 Oct 2023 00:27:09 +0000
ROA not after:            Sat 18 Oct 2025 00:27:09 +0000
asID:                     52238
IP address blocks:        190.99.72.0/21 maxlen: 24
                          2803:7260::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2397678 (0x2495ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a23199cb189fb1502d1df2754deb1df76afcb5ba
        Validity
            Not Before: Oct 17 00:27:09 2023 GMT
            Not After : Oct 18 00:27:09 2025 GMT
        Subject: CN=fefccafb227c16dc1712df3f125a3f89ab526317
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2b:5c:5f:c5:b8:9a:d4:71:d4:31:e2:5a:41:
                    b3:4e:b0:a2:b4:5f:ef:8b:33:d7:06:34:46:90:7f:
                    19:08:fd:f3:83:ab:93:53:4c:46:9a:5d:16:38:d9:
                    6f:77:53:e6:1a:8b:54:00:a9:2d:09:d5:71:e7:33:
                    2f:41:0f:54:d0:54:96:e0:9f:bb:76:59:33:2e:b9:
                    75:1e:2b:72:cf:1c:3f:3b:fb:4a:5d:66:19:93:ab:
                    89:29:c3:ae:de:36:c3:81:b5:c8:12:03:98:14:56:
                    09:b6:fe:e0:7e:bf:73:f5:69:fe:fd:11:3c:80:9a:
                    a0:e1:a7:7f:a4:6d:02:53:17:58:d5:61:86:68:41:
                    29:12:ec:97:07:8a:3e:f1:75:99:cc:6d:f0:ef:ea:
                    bd:bb:e2:94:b4:60:96:70:14:df:31:82:ac:1d:f2:
                    d2:1b:fc:5e:f2:e8:a4:5d:b4:6d:52:fc:29:eb:0e:
                    fa:30:fc:0e:fa:af:65:5a:af:80:0c:41:82:77:f5:
                    5f:3b:e7:27:95:5f:0e:30:b3:98:6d:fd:ab:ec:62:
                    da:59:17:16:f6:56:71:09:a0:cf:86:92:fd:02:85:
                    74:c5:c9:67:c4:c6:8f:d9:80:57:4c:f9:27:75:50:
                    bc:8a:b1:93:f8:3d:4e:6d:e4:79:20:ef:f1:90:6f:
                    47:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D9:04:49:91:B0:6B:C7:70:05:BF:8A:49:17:98:C1:19:64:9C:45
            X509v3 Authority Key Identifier:
                keyid:44:AB:5C:70:33:1F:8E:21:11:28:C2:50:CE:04:FC:95:27:BC:E2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a23199cb189fb1502d1df2754deb1df76afcb5ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/fefccafb227c16dc1712df3f125a3f89ab526317.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9f9ff393-8341-4382-a156-011a6be47de7/a23199cb189fb1502d1df2754deb1df76afcb5ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.72.0/21
                IPv6:
                  2803:7260::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:74:08:bb:4d:30:83:74:8a:7a:41:6b:34:fc:93:4a:f0:dd:
         45:20:05:c5:ca:8b:3e:ba:89:1d:21:79:c6:5f:cb:c6:4a:ce:
         3a:75:c9:9f:bd:17:96:ee:fe:d0:91:1e:14:87:40:c0:50:99:
         43:5c:ab:ef:2a:a9:86:3f:93:d5:3c:80:14:6c:d5:60:dc:ef:
         85:a3:6c:d0:17:61:be:65:90:18:86:87:70:c6:56:e3:ce:d4:
         72:a4:73:30:41:af:94:51:47:33:2d:e6:bc:d7:c3:e6:b4:cf:
         cc:e9:65:79:fb:ac:4c:33:6d:56:05:88:19:dc:c9:04:8f:df:
         04:4e:ec:95:87:fc:56:ce:b6:7c:ca:14:9a:f3:41:51:69:03:
         4f:d5:7d:60:aa:6a:e5:0c:6c:14:e2:87:53:90:18:04:52:e4:
         19:86:2a:69:ca:5f:ca:4e:31:54:1f:c2:89:61:19:2d:57:aa:
         f3:26:70:1a:a6:b2:68:52:2c:1e:08:c0:74:4c:11:23:a0:67:
         97:00:89:f0:6a:85:89:f6:b6:5e:66:6f:9a:ac:90:1e:bc:37:
         72:cf:b5:7b:fd:88:e3:ca:fe:3b:38:94:62:1d:b7:ea:19:03:
         a2:70:d6:31:9d:f0:ca:cf:59:2e:71:7d:0b:2b:03:bc:cf:89:
         39:20:99:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----