Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/f71da6a0f245e02fdc7e89e7a07cd02cd4ddb836.roa
File:                     f71da6a0f245e02fdc7e89e7a07cd02cd4ddb836.roa (raw, json)
Hash identifier:          nYnQDhTnf7sWXLo9voaG9vk7I4uWHLhUIeGm3Sp7lFU=
Subject key identifier:   70:CC:09:EF:49:E7:CF:31:52:0D:1C:63:18:8C:8E:CE:3B:41:67:EA
Certificate issuer:       /CN=1059e1e3317704575f2c0b750ee73b166a39cd37
Certificate serial:       229129
Authority key identifier: 80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/f71da6a0f245e02fdc7e89e7a07cd02cd4ddb836.roa
Signing time:             Mon 24 Apr 2023 17:16:43 +0000
ROA not before:           Sun 23 Apr 2023 17:16:43 +0000
ROA not after:            Thu 24 Apr 2025 17:16:43 +0000
asID:                     28006
IP address blocks:        190.214.128.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265385 (0x229129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1059e1e3317704575f2c0b750ee73b166a39cd37
        Validity
            Not Before: Apr 23 17:16:43 2023 GMT
            Not After : Apr 24 17:16:43 2025 GMT
        Subject: CN=f71da6a0f245e02fdc7e89e7a07cd02cd4ddb836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:8d:9d:3a:a6:5a:7e:ad:b5:b8:c3:8c:f6:
                    0b:61:3a:ca:2e:f1:9e:91:ea:98:3b:c4:f0:21:9e:
                    e7:ec:3e:6d:10:e6:27:9b:e4:dc:d9:00:a9:5d:7e:
                    6f:d9:27:a6:a1:84:f0:61:fd:f7:30:fe:64:fd:41:
                    cf:d9:bb:32:4d:ea:db:ba:13:2c:35:d4:73:b4:f5:
                    3a:c0:e9:9a:6f:bd:6c:5a:98:15:bb:ca:8d:6c:5c:
                    34:7c:75:f1:e4:bf:eb:ba:86:5a:a7:18:63:7b:fc:
                    08:d8:e3:16:b0:85:ff:93:03:10:91:ad:17:2b:cb:
                    b1:b3:51:c1:5c:71:a2:df:f1:7c:2d:d6:b2:d3:92:
                    05:17:45:31:5f:b9:c5:40:fa:34:2c:1d:47:ae:1b:
                    c1:77:d3:88:5f:ba:03:39:40:d8:15:1a:7c:67:c2:
                    e2:f6:cb:69:1e:04:1e:f8:a9:8e:cd:3c:f9:ed:39:
                    60:43:59:fc:1f:10:85:e6:6d:e5:89:2d:49:39:9a:
                    b1:fd:03:a6:f6:5c:01:0c:5d:be:18:2e:ba:fb:77:
                    fe:e9:7d:0c:47:07:01:3c:10:3b:00:80:77:e1:8a:
                    70:b7:e7:8b:d3:39:06:67:b2:33:40:fe:30:0e:65:
                    1a:b3:78:fd:f5:7a:1b:5c:6d:6e:c2:17:39:8a:1b:
                    a6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CC:09:EF:49:E7:CF:31:52:0D:1C:63:18:8C:8E:CE:3B:41:67:EA
            X509v3 Authority Key Identifier:
                keyid:80:F0:C7:27:4F:82:24:D1:E9:76:F3:80:E6:EF:32:CF:10:F8:9D:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1059e1e3317704575f2c0b750ee73b166a39cd37.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/f71da6a0f245e02fdc7e89e7a07cd02cd4ddb836.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aca713f5-6cac-486e-a016-a3e8b31bf029/1059e1e3317704575f2c0b750ee73b166a39cd37.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.214.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:df:7b:96:e6:a2:0a:e4:c8:17:fa:15:8d:bc:4e:ee:6c:
         38:51:0f:6a:f4:92:f4:56:21:d3:32:7e:b8:90:bc:eb:9d:e8:
         6c:0e:ce:32:e3:75:ba:33:28:bf:9c:29:0d:dd:b8:80:24:1a:
         09:16:74:28:37:d5:12:36:9a:73:1d:c2:6c:04:fb:8c:63:05:
         8d:8b:a5:02:d7:94:0e:4e:55:69:f6:7e:be:9c:f6:be:0d:3b:
         63:34:f9:b0:05:84:21:1f:40:8a:c2:c1:a9:8d:20:84:e7:d2:
         82:39:fd:58:92:66:d8:fb:2e:2d:24:ca:5c:b5:06:f8:5b:d3:
         a4:63:df:68:cf:62:59:14:18:d8:14:8f:a0:cf:55:c0:5b:39:
         dc:cf:0d:5f:4d:7b:23:53:fc:03:27:b2:a0:79:a3:b4:d4:54:
         f3:a9:5e:84:36:55:53:15:2a:9e:a4:4e:40:ae:b7:a6:32:60:
         29:b4:20:60:e5:a4:86:5b:fc:3e:28:ab:fc:6c:52:69:ca:90:
         de:aa:94:9e:d1:eb:15:59:e8:00:af:22:5d:3f:9d:3c:60:5a:
         13:92:5c:2d:b0:7d:43:e5:77:f8:04:8f:26:f0:48:7d:79:a5:
         9c:f8:b9:2f:40:32:9c:7e:56:0d:6e:c1:44:96:99:c3:df:fb:
         1b:81:87:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----