Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/a8fc7f392a43f59eb5875bece7cfa66c3ea1c0b8.roa
File:                     a8fc7f392a43f59eb5875bece7cfa66c3ea1c0b8.roa (raw, json)
Hash identifier:          zWqF4SZhGITQWtaEJ73YdUoL3pmqMLr8KaGmVSGv+1k=
Subject key identifier:   95:40:E7:90:71:8A:2F:31:21:38:2B:60:98:B5:0C:DD:C2:1D:47:79
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       22167B
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/a8fc7f392a43f59eb5875bece7cfa66c3ea1c0b8.roa
Signing time:             Thu 06 Apr 2023 15:19:46 +0000
ROA not before:           Wed 21 Dec 2022 16:26:20 +0000
ROA not after:            Sat 28 Dec 2024 16:26:20 +0000
asID:                     28006
IP address blocks:        190.214.5.0/24 maxlen: 24
                          190.214.253.0/24 maxlen: 24
                          181.113.192.0/24 maxlen: 24
                          181.196.82.0/24 maxlen: 24
                          181.112.12.0/24 maxlen: 24
                          2800:370:2a::/48 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2233979 (0x22167b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Dec 21 16:26:20 2022 GMT
            Not After : Dec 28 16:26:20 2024 GMT
        Subject: CN=a8fc7f392a43f59eb5875bece7cfa66c3ea1c0b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1a:80:dc:0b:ed:32:de:04:e3:1f:9c:47:5b:
                    6c:d7:d1:ac:09:24:79:f7:7c:c1:f9:9c:17:b1:4a:
                    e5:2f:f4:8a:ee:3f:eb:4c:8f:3c:17:b8:e5:ce:0c:
                    2c:46:44:26:7c:7b:03:90:23:36:4d:6d:8f:93:dc:
                    59:22:66:c8:1c:c1:cf:68:c1:e0:fe:8a:77:d4:8e:
                    cc:86:20:94:b3:17:2c:61:71:2d:ed:27:1c:e3:04:
                    a2:c1:81:53:42:de:e0:47:64:a6:4e:67:55:ef:9f:
                    6f:e1:f2:06:1b:0c:1f:57:23:ee:e1:bd:b7:3a:8c:
                    f1:e6:69:34:31:41:78:5d:db:09:68:15:d2:db:42:
                    20:ee:61:ef:ae:dc:25:d1:62:f2:b3:79:60:11:89:
                    69:75:e2:db:19:ec:a5:85:9c:36:50:ee:82:5f:18:
                    7c:06:51:b5:da:24:d4:4a:aa:ae:de:a9:75:9e:5b:
                    21:c5:db:18:2b:61:2f:1b:73:0e:19:51:78:ea:33:
                    dd:82:19:5e:22:f2:af:0f:71:25:ee:a7:40:4c:14:
                    ac:f7:aa:82:9b:c2:65:40:d1:c3:3a:f5:b7:9d:97:
                    0c:e1:a0:13:c6:e0:29:b6:45:58:9a:f3:64:55:1f:
                    06:a7:7e:18:8f:74:5b:d9:32:69:85:f7:af:8b:55:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:40:E7:90:71:8A:2F:31:21:38:2B:60:98:B5:0C:DD:C2:1D:47:79
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/a8fc7f392a43f59eb5875bece7cfa66c3ea1c0b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.112.12.0/24
                  181.113.192.0/24
                  181.196.82.0/24
                  190.214.5.0/24
                  190.214.253.0/24
                IPv6:
                  2800:370:2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:44:8d:86:2d:b7:60:82:5a:d1:58:f6:33:d5:85:ae:a9:6b:
         6f:49:2f:44:c9:11:7a:ba:a6:9b:23:2e:fd:8a:dd:f2:f3:3d:
         6c:97:43:e3:b1:de:e9:3f:9c:fc:67:39:a7:3c:0c:76:b9:48:
         52:96:99:1c:60:8e:3d:9d:ea:da:ca:81:18:28:a8:5d:c7:30:
         e6:f1:b9:29:6f:f6:e6:51:19:b9:4a:9e:51:14:0c:fb:e9:82:
         fa:de:77:5f:53:1e:52:aa:95:a4:ac:76:b1:32:3e:4e:25:e1:
         51:f4:b7:70:2a:1b:ae:4a:00:1c:63:a1:72:2b:c0:1c:2e:3c:
         b7:3c:73:30:67:8d:15:e1:fe:f9:e2:9c:39:dc:36:63:09:ca:
         2b:fb:41:0b:28:ef:e5:96:db:f8:9c:74:dc:28:09:3e:c7:ff:
         ef:98:57:fa:bb:a4:4b:4a:6e:40:09:06:88:96:42:9c:b2:d7:
         35:40:90:26:f3:85:0a:fa:85:3a:be:58:8e:81:d2:15:50:f5:
         9a:4c:22:e0:7c:26:75:3f:e9:c1:bf:d6:d1:a6:91:df:27:15:
         0a:87:8c:b8:10:77:15:6b:b2:0b:6c:85:d4:10:e5:8a:e5:0a:
         42:53:45:c9:3d:8e:41:fa:14:f7:98:fb:94:a8:b0:ed:14:8d:
         8b:b0:55:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----