Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/93fa0b09c50fc2ab06513b9edd52c91e4121430a.roa
File:                     93fa0b09c50fc2ab06513b9edd52c91e4121430a.roa (raw, json)
Hash identifier:          z0s/K8WZG0flYuFxkYaqP65axeQ6mSlVsjnN78VwStE=
Subject key identifier:   2F:5A:AD:C5:E8:B7:0A:84:2D:60:F6:0F:EF:A9:DE:81:EE:57:5E:A7
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       29E2CD
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/93fa0b09c50fc2ab06513b9edd52c91e4121430a.roa
Signing time:             Mon 18 Dec 2023 16:49:18 +0000
ROA not before:           Mon 18 Dec 2023 16:49:17 +0000
ROA not after:            Thu 18 Dec 2025 16:49:17 +0000
asID:                     269986
IP address blocks:        190.90.22.208/28 maxlen: 28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2745037 (0x29e2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Dec 18 16:49:17 2023 GMT
            Not After : Dec 18 16:49:17 2025 GMT
        Subject: CN=93fa0b09c50fc2ab06513b9edd52c91e4121430a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4f:2a:39:d5:48:01:dc:61:2a:90:13:d3:9e:
                    9a:6f:3b:16:91:9e:7d:61:b0:31:a5:8d:29:2c:e7:
                    51:3e:c7:33:f3:dc:bd:14:d7:0b:18:08:02:be:fb:
                    a1:ef:d9:83:c8:55:19:cc:c0:29:c8:99:76:dd:ac:
                    17:e1:bf:e7:ef:26:dd:81:80:16:b0:3e:27:a8:32:
                    3a:ef:69:ad:9d:71:33:6c:4e:8f:94:15:b9:5c:cd:
                    2b:84:c3:83:e1:a6:cd:22:86:d1:87:f3:37:da:70:
                    3f:d4:bb:1b:a4:ac:2d:19:46:0c:2f:0c:99:bc:8d:
                    7c:64:ae:3c:19:0c:cb:f6:a8:eb:bd:4b:47:48:36:
                    24:3d:c0:19:10:68:74:56:c1:df:3b:0c:24:76:91:
                    41:65:f3:e0:3a:73:a0:c9:11:2e:2c:fc:ba:b6:fe:
                    25:7e:cf:e6:8f:e1:2a:ef:e3:bd:a6:2b:c3:bf:62:
                    d5:0e:42:21:18:b9:c3:83:81:9b:24:7a:84:52:00:
                    8e:8f:4b:0c:65:e5:23:1e:1a:d3:8b:e6:f4:18:59:
                    97:aa:27:7b:ab:2d:ab:27:e0:92:a8:38:4e:1a:62:
                    c8:53:6a:43:57:79:29:8c:8f:47:0b:62:bf:49:3e:
                    ea:81:ef:88:ad:7a:e6:6b:12:61:0c:fb:44:1b:fb:
                    1b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:5A:AD:C5:E8:B7:0A:84:2D:60:F6:0F:EF:A9:DE:81:EE:57:5E:A7
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/93fa0b09c50fc2ab06513b9edd52c91e4121430a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.90.22.208/28

    Signature Algorithm: sha256WithRSAEncryption
         08:5d:6e:af:db:44:c1:12:ba:ca:e8:86:43:f7:cb:f0:38:de:
         24:a8:ae:e3:b6:59:71:4c:58:64:66:fd:9d:e0:14:2f:37:00:
         ec:71:71:4c:a2:61:cd:ea:db:7c:1e:86:5a:89:ea:dd:15:a0:
         61:17:0a:aa:4a:ec:34:b9:79:11:65:4b:e3:a3:17:34:b8:69:
         17:ae:3a:ff:9d:2a:cf:21:a3:31:3b:7b:9a:c3:b8:b9:94:c3:
         2d:2f:ef:de:83:65:50:ed:1b:11:99:03:ac:ef:66:e7:10:3a:
         23:2d:76:34:68:f1:d2:db:d3:f4:2b:8e:40:5b:17:a2:d7:9a:
         1e:b5:8e:e0:06:80:11:9b:4e:4b:8e:a8:43:99:7a:7a:0f:cd:
         e4:50:ba:ee:61:d8:d8:98:3c:c3:bd:79:e9:01:f6:84:58:6a:
         74:7a:60:65:f8:35:27:3a:ff:e4:b2:bd:59:7e:b3:1a:e4:1c:
         7e:5d:c6:ba:2c:cd:17:2d:9e:1d:c7:8d:05:98:4f:67:29:2c:
         3b:e1:16:d1:52:7f:41:4f:e9:60:60:e2:3b:c2:a9:03:74:77:
         12:c3:5a:38:9c:69:e6:9f:1f:dd:ef:e2:d5:fb:0f:71:1e:16:
         56:c9:4d:72:4d:27:8c:a6:62:94:9f:ee:61:db:86:6d:a0:37:
         20:18:8d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----