Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/cc1464a6b6cf5852ec642d147640046553724bf4.roa
File:                     cc1464a6b6cf5852ec642d147640046553724bf4.roa (raw, json)
Hash identifier:          /JuL51F3wsNrg9VmINBCaaZNASoj5km70bKrt1Wni7E=
Subject key identifier:   5B:5D:DC:60:A4:28:E1:B5:EA:3F:77:BA:A5:B7:B1:67:AD:C4:D2:3C
Certificate issuer:       /CN=62a782cb41463cc649a6c52c762bea430cdc06b2
Certificate serial:       210F6F
Authority key identifier: B3:D6:6D:41:49:17:7C:B4:B8:98:0F:78:57:06:BB:E1:04:FD:B6:E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a782cb41463cc649a6c52c762bea430cdc06b2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/cc1464a6b6cf5852ec642d147640046553724bf4.roa
Signing time:             Fri 17 Nov 2023 07:30:00 +0000
ROA not before:           Fri 17 Nov 2023 07:30:00 +0000
ROA not after:            Sun 16 Nov 2025 07:30:00 +0000
asID:                     28036
IP address blocks:        190.143.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2166639 (0x210f6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62a782cb41463cc649a6c52c762bea430cdc06b2
        Validity
            Not Before: Nov 17 07:30:00 2023 GMT
            Not After : Nov 16 07:30:00 2025 GMT
        Subject: CN=cc1464a6b6cf5852ec642d147640046553724bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:40:2a:b0:4c:fd:00:98:fa:c2:5a:11:27:91:
                    60:5f:4f:41:74:63:5b:05:d1:fd:19:a6:ae:e0:ca:
                    3c:88:56:0e:30:4a:96:34:fb:11:ab:08:22:d9:e7:
                    47:01:2e:16:aa:21:f8:da:27:f7:ff:b9:bd:fa:f8:
                    10:df:9a:78:48:4d:fc:31:20:d7:2a:75:f1:d3:e9:
                    90:64:16:b3:56:ea:81:a9:11:4d:9f:cf:e5:a6:8b:
                    32:19:fa:89:2f:b3:fe:86:25:76:c7:81:af:67:4e:
                    b9:58:49:b2:30:a3:24:f0:94:a0:9c:cb:38:14:92:
                    bd:90:44:2d:13:5a:c7:d7:53:0f:e2:82:4f:6c:01:
                    5f:c6:fc:14:19:98:99:04:4e:0a:58:74:a4:b7:92:
                    4a:a5:d2:b7:72:a7:ad:da:bc:18:d6:69:56:9f:d5:
                    83:61:d6:05:02:d8:31:e9:b9:d3:5b:71:bd:69:2e:
                    2a:1d:66:2a:0f:81:44:b5:47:3a:6f:71:51:78:18:
                    9b:07:fe:7c:c6:d9:c8:d6:4c:22:4a:1b:d1:57:e4:
                    a4:8a:89:71:2d:1a:5f:e1:25:04:a6:cd:61:c4:7e:
                    b0:d4:c7:a5:0d:a5:56:61:2a:ba:0e:cd:10:67:f3:
                    6f:fe:32:af:3f:75:7b:b0:95:31:48:ec:bb:73:f0:
                    c8:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:5D:DC:60:A4:28:E1:B5:EA:3F:77:BA:A5:B7:B1:67:AD:C4:D2:3C
            X509v3 Authority Key Identifier:
                keyid:B3:D6:6D:41:49:17:7C:B4:B8:98:0F:78:57:06:BB:E1:04:FD:B6:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62a782cb41463cc649a6c52c762bea430cdc06b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/cc1464a6b6cf5852ec642d147640046553724bf4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b16b6b68-cc82-491c-bb7e-d14793eac3cb/62a782cb41463cc649a6c52c762bea430cdc06b2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.143.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3b:a1:dc:10:cd:bf:0e:6f:4e:c9:45:f8:33:51:1c:18:ea:9e:
         95:c4:cd:9d:35:ae:bd:55:44:bc:37:68:33:ed:3b:df:52:44:
         5f:bf:8d:63:68:14:a7:80:99:fc:6d:08:a1:da:4d:90:30:bf:
         cf:d6:3e:45:dc:38:55:4a:fd:b9:5d:b2:ef:42:ae:9f:77:49:
         f1:1d:ee:dd:37:7e:b1:94:5a:03:52:24:9a:c3:99:8e:0a:98:
         2d:f6:78:e3:8e:7e:bc:16:10:25:63:3c:75:7c:3b:ce:77:fe:
         2d:73:ef:18:8d:e7:3c:68:ba:82:7a:c1:1b:72:e6:74:8b:10:
         20:86:18:82:7e:6d:ad:34:0c:6d:8d:08:f0:ed:2c:03:57:8e:
         77:aa:64:6b:79:07:1b:38:56:7c:4c:65:05:2a:b8:aa:6c:e2:
         ce:cd:f8:34:12:a9:92:05:bd:00:12:3e:d3:c2:ce:e9:68:7a:
         af:03:32:b4:58:73:1e:bc:a9:67:fa:8f:19:e8:3e:c6:50:ab:
         ab:ee:6d:43:31:bc:f5:ec:18:db:83:89:19:d3:2f:83:8e:8d:
         87:fc:09:86:78:aa:ac:75:5c:f7:10:19:e8:9e:33:84:21:87:
         8e:d1:50:23:9a:98:24:6b:c1:fe:b0:74:81:13:21:21:66:b9:
         df:f4:ba:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----