Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b41f74d4-8d9f-4f3b-b3a6-4302dcd1b8b7/fd277d61aba43528f0152aced23c1142561653d7.roa
File:                     fd277d61aba43528f0152aced23c1142561653d7.roa (raw, json)
Hash identifier:          atn3w7R0LXuqZL5HeYNtYgZXZgpEbKpKcXseTGUUt5w=
Subject key identifier:   75:78:D8:44:2A:01:8D:44:3B:AD:3D:8A:18:21:51:C1:AA:B4:8C:2D
Certificate issuer:       /CN=3d0c81ffcb2c33196530a7adeea74bd988502b6c
Certificate serial:       11F777
Authority key identifier: F6:71:79:4E:D7:DC:03:D4:43:3A:D6:DE:32:8B:5E:A9:DB:77:E6:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d0c81ffcb2c33196530a7adeea74bd988502b6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b41f74d4-8d9f-4f3b-b3a6-4302dcd1b8b7/fd277d61aba43528f0152aced23c1142561653d7.roa
Signing time:             Fri 08 Sep 2023 08:30:00 +0000
ROA not before:           Thu 07 Sep 2023 08:30:00 +0000
ROA not after:            Sat 06 Sep 2025 08:30:00 +0000
asID:                     398712
IP address blocks:        190.111.160.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177463 (0x11f777)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d0c81ffcb2c33196530a7adeea74bd988502b6c
        Validity
            Not Before: Sep  7 08:30:00 2023 GMT
            Not After : Sep  6 08:30:00 2025 GMT
        Subject: CN=fd277d61aba43528f0152aced23c1142561653d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:e9:8c:da:fc:99:0e:fa:40:fd:3f:58:aa:
                    b4:d4:53:64:42:21:f7:00:bb:68:72:3b:14:2f:c5:
                    b8:7e:5e:08:d8:1f:f5:82:53:f1:08:2a:0a:36:d8:
                    bf:e2:7d:1c:c0:ba:a1:6f:13:dd:e2:1c:6a:a5:ec:
                    58:b0:c8:9f:6b:9d:f7:21:43:ec:fd:94:2b:f9:63:
                    e8:1b:f9:2d:26:a7:c1:f1:61:eb:a9:ec:1b:89:b5:
                    56:57:34:5d:e3:70:31:43:88:3d:ce:fa:7f:28:5f:
                    ac:5b:dc:ee:7b:ee:37:5a:fb:22:5a:cf:bb:22:cc:
                    9f:48:38:1e:0e:33:f2:e6:16:d1:ee:d3:b0:d7:71:
                    0a:0e:a5:80:2d:14:47:f7:0c:d9:75:92:6f:56:58:
                    b8:d1:a6:64:54:88:3b:02:cb:50:5a:a7:dd:76:28:
                    e3:db:21:04:fe:9a:0a:88:5f:61:2b:8d:a4:85:19:
                    4c:11:7f:72:00:71:48:ff:46:f5:e4:9e:76:64:1e:
                    17:1f:01:d3:0c:cd:bb:16:2a:85:36:5b:b0:bf:19:
                    9e:5d:5f:be:d6:fc:75:63:f9:42:da:38:05:7e:39:
                    cf:0f:05:ed:e5:41:71:b0:2b:b6:33:31:02:f5:ab:
                    18:45:ca:83:86:07:bc:8f:7f:5a:7d:51:32:b4:fb:
                    05:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:78:D8:44:2A:01:8D:44:3B:AD:3D:8A:18:21:51:C1:AA:B4:8C:2D
            X509v3 Authority Key Identifier:
                keyid:F6:71:79:4E:D7:DC:03:D4:43:3A:D6:DE:32:8B:5E:A9:DB:77:E6:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d0c81ffcb2c33196530a7adeea74bd988502b6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b41f74d4-8d9f-4f3b-b3a6-4302dcd1b8b7/fd277d61aba43528f0152aced23c1142561653d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b41f74d4-8d9f-4f3b-b3a6-4302dcd1b8b7/3d0c81ffcb2c33196530a7adeea74bd988502b6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5f:3f:46:e6:d5:64:a2:72:0e:8d:49:bf:fa:13:38:22:5f:ca:
         f5:38:07:23:1e:40:a7:29:9d:58:e2:5b:c0:a9:d5:f4:74:9b:
         c0:75:ab:2a:0e:cc:63:3c:04:21:8a:ba:8c:0f:f3:d4:f2:4b:
         b2:8f:86:dd:4d:f4:08:f5:6e:b0:f3:91:ea:14:44:5d:50:43:
         74:a5:fa:c0:4e:42:2c:47:7b:f6:9e:9e:50:59:6a:5c:3e:8a:
         38:d8:2a:70:4c:ac:a9:06:2a:b1:0b:c6:08:dd:d7:d0:1f:66:
         c9:69:e8:58:47:f0:f4:85:18:6e:5e:8a:8a:4a:30:94:45:b3:
         12:e5:7c:3b:b9:a5:dc:bc:c4:56:f3:35:4c:39:69:e3:85:43:
         fc:7a:03:6c:9c:fd:e1:fb:09:c2:03:5a:49:63:68:29:3c:6b:
         f5:c8:e2:90:a8:9b:e7:e1:3e:26:23:76:6b:e3:7f:83:f0:21:
         7e:a8:fa:89:07:2d:ef:29:8a:97:5b:96:c0:5b:e8:64:a2:b8:
         c2:b3:21:e0:ba:45:53:36:81:7f:44:c7:3a:56:87:60:0f:84:
         62:d2:ba:f9:9e:c4:a6:a3:3c:e9:d6:cb:54:57:b6:ce:96:d3:
         2f:a9:46:e4:65:99:b5:98:81:a7:ea:b0:0d:6a:5f:55:42:4d:
         ea:c2:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----