Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a0dd30fd-4c3c-48a0-a0bc-d33926869297/8a4b658c020824ed0ae69dac99f7a8f99e3809bc.roa
File:                     8a4b658c020824ed0ae69dac99f7a8f99e3809bc.roa (raw, json)
Hash identifier:          fKBFh9xcnljL+JA7R6gt8atMy2Gm9+fxknFsREEw4I4=
Subject key identifier:   7F:0E:A5:DA:3F:AB:CA:6B:0B:8C:A5:69:1B:B2:6C:6C:17:BA:ED:A3
Certificate issuer:       /CN=94a8b3328633493890542c58c5e5b0246682d373
Certificate serial:       1832E3
Authority key identifier: DA:06:41:0D:CE:48:5B:64:47:71:64:66:D9:2E:38:E4:B3:BF:46:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94a8b3328633493890542c58c5e5b0246682d373.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a0dd30fd-4c3c-48a0-a0bc-d33926869297/8a4b658c020824ed0ae69dac99f7a8f99e3809bc.roa
Signing time:             Thu 12 Oct 2023 17:52:13 +0000
ROA not before:           Wed 11 Oct 2023 17:52:12 +0000
ROA not after:            Sun 12 Oct 2025 17:52:12 +0000
asID:                     271795
IP address blocks:        190.12.148.0/22 maxlen: 24
                          2803:a010::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585891 (0x1832e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94a8b3328633493890542c58c5e5b0246682d373
        Validity
            Not Before: Oct 11 17:52:12 2023 GMT
            Not After : Oct 12 17:52:12 2025 GMT
        Subject: CN=8a4b658c020824ed0ae69dac99f7a8f99e3809bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:30:47:c2:23:69:16:08:76:4a:ec:99:99:1f:
                    15:58:4d:03:e9:7e:b3:2b:d9:d4:0e:87:b9:ee:4c:
                    2d:33:10:7b:65:eb:7a:52:f8:ab:13:f0:dd:22:f1:
                    1c:20:a8:22:51:be:f7:fd:fd:92:c4:bd:4d:8b:c3:
                    6f:56:35:05:d7:bb:bb:93:e1:71:63:46:8a:59:74:
                    4d:98:a8:14:f9:dd:66:74:54:17:17:06:cd:d6:2b:
                    79:2e:6c:9b:02:34:59:c9:19:92:52:e8:88:e3:4b:
                    58:d2:1d:ff:87:24:5f:d8:1e:01:18:71:df:9c:83:
                    24:4a:d7:3d:6c:d4:5e:82:0f:2f:be:8c:76:5f:6e:
                    0b:8e:49:1b:ea:bf:c5:7e:dd:83:3b:c2:a4:98:4c:
                    a1:09:2a:aa:be:d5:ff:e7:df:80:f2:b2:42:97:1c:
                    71:d9:1a:03:56:e9:4c:7e:8e:b4:83:5c:8b:c5:e7:
                    4a:6f:7a:02:8d:aa:b8:c3:f2:f5:01:59:e1:3a:93:
                    4c:f9:91:cc:b7:f8:a1:f2:d8:7a:b8:e6:1b:82:be:
                    bf:b7:6f:17:d2:19:ae:3b:ad:ef:81:ca:31:77:29:
                    45:3a:a6:06:cf:3d:06:48:43:92:ac:b9:91:57:df:
                    e6:b2:0e:dd:c3:3f:b7:1d:fd:e9:5a:99:a3:e7:bf:
                    a3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0E:A5:DA:3F:AB:CA:6B:0B:8C:A5:69:1B:B2:6C:6C:17:BA:ED:A3
            X509v3 Authority Key Identifier:
                keyid:DA:06:41:0D:CE:48:5B:64:47:71:64:66:D9:2E:38:E4:B3:BF:46:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94a8b3328633493890542c58c5e5b0246682d373.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a0dd30fd-4c3c-48a0-a0bc-d33926869297/8a4b658c020824ed0ae69dac99f7a8f99e3809bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a0dd30fd-4c3c-48a0-a0bc-d33926869297/94a8b3328633493890542c58c5e5b0246682d373.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.148.0/22
                IPv6:
                  2803:a010::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:e6:08:62:9d:b7:fc:09:c0:67:93:c2:69:d8:e9:69:02:09:
         2d:50:70:10:f6:2e:98:15:9a:91:52:a4:cf:e5:53:02:0b:2f:
         22:44:ce:0c:6c:65:7a:55:bf:0f:7b:2e:11:34:2b:95:50:46:
         c9:46:69:f8:41:79:2f:65:8c:d8:a5:52:ec:a7:13:ae:c2:11:
         37:05:cd:f4:bb:e1:35:d2:e8:14:ad:5d:31:f4:88:7d:76:78:
         a2:b9:eb:b2:1d:3c:9c:16:d3:19:a0:00:da:c3:55:60:ba:5c:
         62:89:a5:ce:9f:1a:5e:42:dd:db:d1:67:07:a7:76:cc:a3:be:
         66:ae:c4:f0:af:96:97:8c:f0:a4:f1:e8:c1:ab:5c:b2:c9:c7:
         8e:76:c8:19:7f:48:39:1a:8e:16:48:06:d2:6a:5c:82:5b:c5:
         69:c4:60:59:fd:f7:c9:58:c2:e8:53:f7:a8:c0:b3:79:31:b6:
         27:7a:4f:e2:d3:73:02:b5:b6:1f:b4:07:f5:2b:2c:64:f0:c6:
         7c:14:6e:61:70:fa:48:f2:ec:07:c6:53:ff:4b:57:5a:89:77:
         3e:7b:65:25:52:41:45:75:38:af:79:1c:da:49:22:c5:6d:14:
         f4:77:f1:db:7c:5c:23:fa:92:d7:84:36:97:58:7d:8c:7c:41:
         51:d5:0a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----