Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/c044690f26908217a0189c08e49cd6d298ce7cbd.roa
File:                     c044690f26908217a0189c08e49cd6d298ce7cbd.roa (raw, json)
Hash identifier:          EcG+BcWYMKEIiAWBHJKTpBPRVSbW7ujyeohAbCFeWLY=
Subject key identifier:   FD:1C:23:A2:0E:51:A4:16:B3:4B:C7:31:AB:33:20:F4:05:86:63:1E
Certificate issuer:       /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial:       23BC29
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/c044690f26908217a0189c08e49cd6d298ce7cbd.roa
Signing time:             Mon 28 Aug 2023 20:21:13 +0000
ROA not before:           Sun 27 Aug 2023 20:21:13 +0000
ROA not after:            Thu 28 Aug 2025 20:21:13 +0000
asID:                     270035
IP address blocks:        190.14.227.0/24 maxlen: 24
                          2800:490:8103::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341929 (0x23bc29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
        Validity
            Not Before: Aug 27 20:21:13 2023 GMT
            Not After : Aug 28 20:21:13 2025 GMT
        Subject: CN=c044690f26908217a0189c08e49cd6d298ce7cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:71:56:e4:d6:71:92:51:9a:98:32:ce:74:04:
                    93:38:82:03:e4:72:93:34:1f:9e:00:4b:ff:c3:d0:
                    09:a4:34:12:62:45:4b:cf:d3:cb:7d:61:7b:96:2e:
                    6e:33:bc:37:f4:3c:00:48:36:7d:69:bb:12:87:76:
                    c8:75:18:b0:e7:97:7d:07:04:96:30:38:ad:68:54:
                    59:5b:e8:e3:4a:59:7f:73:b7:6d:e9:68:0d:c1:f6:
                    e2:aa:90:93:f4:a9:c4:e7:4a:c0:4a:d0:62:70:19:
                    e3:d5:26:4d:ee:d7:de:d2:d1:cb:a2:a0:22:d9:a2:
                    ee:d9:90:88:7e:4f:92:99:13:81:79:e5:de:26:56:
                    6f:64:9d:55:59:e6:62:64:a7:f3:55:21:86:6a:f7:
                    67:d9:98:63:6b:0d:a3:3f:5e:2d:6b:65:19:a2:0c:
                    bb:a1:1a:7f:76:70:47:06:c4:59:e7:13:73:0a:40:
                    cd:81:36:fd:94:19:e5:60:47:34:ac:81:87:d3:49:
                    bf:fd:15:25:74:9c:7d:d6:91:47:74:fa:03:a9:ac:
                    62:68:78:df:7e:48:39:1a:98:42:5d:5f:b8:ec:ee:
                    e8:53:2f:02:4a:b2:05:8b:7f:84:cd:77:f8:1d:59:
                    8f:88:df:a3:82:b1:46:6c:5e:04:4e:0b:70:fd:09:
                    a0:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:1C:23:A2:0E:51:A4:16:B3:4B:C7:31:AB:33:20:F4:05:86:63:1E
            X509v3 Authority Key Identifier:
                keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/c044690f26908217a0189c08e49cd6d298ce7cbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.14.227.0/24
                IPv6:
                  2800:490:8103::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:a4:76:51:81:f2:d3:4a:f9:f9:41:dd:6d:0d:d2:4f:2d:02:
         6d:bf:20:eb:58:11:55:ef:6d:22:f7:e0:08:ab:62:25:46:ec:
         c4:9b:c3:26:b0:dc:78:e4:09:e3:72:8d:ae:8d:1b:29:78:6f:
         9e:9c:39:ed:f2:76:57:a5:0f:1c:55:d4:e5:98:d6:4b:9b:22:
         bd:f8:d5:9a:64:b3:62:c8:e1:62:33:54:c5:7c:82:2b:91:15:
         f8:76:b9:2a:e7:0c:e9:d5:59:24:30:8c:19:3d:55:51:44:5f:
         bf:e6:9d:8c:4f:14:26:d6:58:a4:b9:b8:9f:5e:9a:99:55:34:
         6b:e4:60:cf:63:14:64:c7:73:3c:fc:8c:ed:21:a9:9a:d8:f1:
         ef:44:68:b2:58:38:2e:7b:43:a4:6a:1a:a2:0b:39:79:30:f7:
         2a:41:ac:fa:d2:e5:3d:be:b7:b0:1d:e5:1a:f8:d3:0c:ad:41:
         58:b7:78:95:82:1b:d6:7b:9b:bd:70:2c:01:6f:89:29:34:d3:
         41:c1:23:0a:a7:e9:7a:65:fe:40:5d:53:4c:6d:00:dc:29:05:
         c1:8c:ad:b6:0e:dd:55:38:18:ab:05:9f:bf:21:64:d3:49:a7:
         66:d5:70:59:37:02:ed:e0:2d:af:85:9e:90:a4:fd:22:3a:7e:
         e8:73:48:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----