Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/abadce506743630716481b55a0f1657f292455bf.roa
File:                     abadce506743630716481b55a0f1657f292455bf.roa (raw, json)
Hash identifier:          rczy3byd4FkxktlNIJjPqAUTphqVdyydaTGrVo6B1mk=
Subject key identifier:   FD:6B:09:49:79:9D:6E:64:5F:49:BC:A6:E0:21:43:D0:3D:A6:50:BD
Certificate issuer:       /CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
Certificate serial:       21FAB0
Authority key identifier: BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/abadce506743630716481b55a0f1657f292455bf.roa
Signing time:             Fri 02 Jun 2023 18:38:16 +0000
ROA not before:           Thu 01 Jun 2023 18:38:16 +0000
ROA not after:            Mon 02 Jun 2025 18:38:16 +0000
asID:                     13682
IP address blocks:        190.143.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2226864 (0x21fab0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0945c72ff878d76abd9c449f2d3e64afb61ba1
        Validity
            Not Before: Jun  1 18:38:16 2023 GMT
            Not After : Jun  2 18:38:16 2025 GMT
        Subject: CN=abadce506743630716481b55a0f1657f292455bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ff:2e:65:29:c0:55:d6:af:2a:8e:7e:9c:f3:
                    b6:e6:60:fe:04:8a:4b:98:47:99:ff:d4:c3:c6:19:
                    16:bc:81:81:5a:ea:ec:85:12:78:44:65:0b:ba:4a:
                    9d:c6:4f:bb:6e:17:63:87:1d:4d:48:ba:f3:61:20:
                    da:d3:bb:a3:12:cd:55:64:26:78:84:63:d3:5f:68:
                    54:17:98:79:35:0e:d1:c3:fa:ef:9d:60:ba:4d:36:
                    3b:88:76:cc:32:7c:2f:05:71:41:d8:d2:ae:2b:75:
                    5d:b2:9b:fc:b5:6d:4e:77:c2:b4:d6:3e:e5:00:17:
                    a5:a1:3c:14:0f:33:96:06:67:7e:a6:e6:f6:f6:11:
                    69:e9:15:88:30:76:94:f2:1e:de:2c:5d:a3:bd:4f:
                    19:1f:c2:f1:b3:e4:39:55:b9:d6:82:f0:ab:ea:54:
                    d3:c8:69:77:e0:9b:3c:3d:f2:dd:1c:76:23:ff:9a:
                    9c:8f:79:19:f8:e6:38:ec:a4:93:0c:8e:88:d2:6a:
                    ad:ca:d5:be:2d:80:c0:b5:b3:5f:ac:21:6b:e5:26:
                    9e:fa:ae:01:fa:98:68:b6:ca:62:00:bc:e1:5a:38:
                    27:ff:34:e3:3f:27:75:17:8c:7e:0d:ed:e0:ef:e5:
                    ae:72:1c:ed:cd:83:85:5b:0b:d6:5a:f3:2d:2a:5f:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6B:09:49:79:9D:6E:64:5F:49:BC:A6:E0:21:43:D0:3D:A6:50:BD
            X509v3 Authority Key Identifier:
                keyid:BA:F4:C5:18:0C:1F:B9:B3:86:C0:F6:59:C4:AB:77:58:B5:3D:52:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/abadce506743630716481b55a0f1657f292455bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/5a0945c72ff878d76abd9c449f2d3e64afb61ba1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4f:a2:28:7f:27:86:54:de:cd:c4:39:4d:52:ab:79:65:16:96:
         9c:9e:d1:ec:13:58:d7:26:21:37:34:0a:30:09:4a:60:ca:7d:
         0c:43:31:40:fa:c9:ed:82:99:46:48:b4:d1:94:5a:02:37:b5:
         1c:bc:37:a2:a7:c5:91:df:a3:e1:09:a0:69:92:19:17:3c:93:
         db:13:d5:01:a4:d9:fc:56:db:4c:25:6f:6b:b0:e0:28:d3:fb:
         4c:2c:bb:76:2a:aa:a0:95:05:39:41:e8:22:4c:d5:b2:1c:a9:
         0b:85:c7:ea:05:4e:76:51:0e:37:ab:4c:c2:ab:ee:56:7e:23:
         ae:ce:7d:43:c1:26:50:c3:a4:e3:30:51:b4:2b:36:c6:a4:52:
         9f:b8:4d:76:47:1c:80:e1:a3:8e:bd:67:77:ac:9b:cf:ca:be:
         86:4d:55:7a:a0:0c:82:1a:4e:f9:45:03:b4:73:31:af:d2:69:
         61:61:33:13:b6:8d:f2:09:c5:9f:6e:7f:c4:42:da:46:15:0e:
         2d:03:ce:40:dc:60:23:7a:ec:e4:87:8a:d7:68:ee:7c:5b:41:
         f8:e6:59:fc:9a:a7:b4:04:64:14:6b:2e:07:aa:e4:3b:73:96:
         ed:7d:5c:e1:25:2f:2b:29:bf:9f:b6:6c:ad:d9:3b:5d:a7:92:
         08:72:2e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----