Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b442d26c-05ba-47ef-a759-35065391db94/2927493a9f9e623f1e9ea788641319347c0a6ed2.roa
File:                     2927493a9f9e623f1e9ea788641319347c0a6ed2.roa (raw, json)
Hash identifier:          dPhgtzpCVq0EuFvLs2Q0rcJ2IXsl1JFEJBik4jjtRP4=
Subject key identifier:   F7:60:37:A1:FB:2C:74:D1:FB:4C:7A:69:87:1C:46:5D:1F:9C:24:01
Certificate issuer:       /CN=7fd57ce085f535ff9e974a7714dec8bddaba86d8
Certificate serial:       12130E
Authority key identifier: 57:0A:43:96:87:0E:81:8E:1A:87:CB:62:F2:74:98:FB:9D:5D:AB:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fd57ce085f535ff9e974a7714dec8bddaba86d8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b442d26c-05ba-47ef-a759-35065391db94/2927493a9f9e623f1e9ea788641319347c0a6ed2.roa
Signing time:             Fri 08 Sep 2023 08:30:01 +0000
ROA not before:           Thu 07 Sep 2023 08:30:01 +0000
ROA not after:            Sat 06 Sep 2025 08:30:01 +0000
asID:                     269955
IP address blocks:        190.89.44.0/22 maxlen: 24
                          2803:26e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1184526 (0x12130e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fd57ce085f535ff9e974a7714dec8bddaba86d8
        Validity
            Not Before: Sep  7 08:30:01 2023 GMT
            Not After : Sep  6 08:30:01 2025 GMT
        Subject: CN=2927493a9f9e623f1e9ea788641319347c0a6ed2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e9:dd:52:c8:41:a9:bb:73:97:38:ea:8c:db:
                    5e:82:8c:e8:cb:ce:0a:d7:d3:c4:14:81:40:19:69:
                    fa:89:74:fa:06:81:13:d1:cd:c3:fb:70:04:38:b1:
                    12:bc:35:07:6f:e1:81:6d:0c:f4:aa:2d:f4:f4:44:
                    a2:4f:d9:0f:75:55:75:a9:44:16:9b:e3:4d:c2:83:
                    0d:cb:a7:b7:bc:a1:f0:b9:9c:7e:5f:cf:f0:1b:4f:
                    f3:f6:e8:d6:ee:3c:61:20:4b:6e:e1:cf:c7:43:58:
                    74:39:02:46:32:db:b1:4f:24:80:9f:d4:5f:54:d3:
                    25:1f:b1:37:88:54:4a:4b:a2:17:11:a9:95:d1:01:
                    66:13:f8:a3:92:2a:a5:f2:2c:2a:a1:39:59:e3:8e:
                    8c:39:72:d5:ff:bb:12:7d:2f:94:53:c3:99:ed:50:
                    2b:fc:13:cf:bb:a3:1c:2a:92:20:89:e1:3e:59:e5:
                    34:a8:39:8b:29:e1:bc:5c:77:d9:0e:28:8c:1b:f8:
                    71:e9:0e:71:72:2a:9a:ca:82:63:26:7f:67:ef:db:
                    82:5e:3c:1a:21:82:5a:29:bf:81:00:fe:c7:3e:da:
                    a0:8b:8a:0e:64:c2:48:31:cc:5a:6c:ee:39:a2:1e:
                    39:d3:de:c4:d0:66:a3:d5:1b:91:b1:b4:2f:77:c2:
                    1a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:60:37:A1:FB:2C:74:D1:FB:4C:7A:69:87:1C:46:5D:1F:9C:24:01
            X509v3 Authority Key Identifier:
                keyid:57:0A:43:96:87:0E:81:8E:1A:87:CB:62:F2:74:98:FB:9D:5D:AB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7fd57ce085f535ff9e974a7714dec8bddaba86d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b442d26c-05ba-47ef-a759-35065391db94/2927493a9f9e623f1e9ea788641319347c0a6ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b442d26c-05ba-47ef-a759-35065391db94/7fd57ce085f535ff9e974a7714dec8bddaba86d8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.44.0/22
                IPv6:
                  2803:26e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bb:8f:c2:9e:69:30:c5:d5:2a:11:f5:0a:a5:39:70:b0:48:83:
         42:48:df:cc:57:cc:14:88:54:21:ed:4d:2c:ca:c1:d8:a8:ad:
         c1:11:e4:25:13:a4:db:5f:3b:fd:0a:e5:a7:b4:60:42:5c:25:
         b3:30:45:5e:2e:75:a1:88:e1:59:e3:e1:9f:b0:6c:55:eb:9b:
         0d:0d:4b:73:b5:fd:5f:8e:75:d7:c5:12:2e:df:f8:8d:e2:37:
         94:97:83:7b:8b:a7:d3:40:a6:39:38:95:a4:07:b2:67:5a:cf:
         92:0a:59:5e:5e:8f:ae:0d:39:3e:07:7f:47:ff:74:d4:7e:9f:
         ec:a8:b5:b2:a5:5f:a5:27:25:83:40:2a:6a:e8:4b:f3:27:7d:
         1a:b4:57:d4:e8:84:5a:4e:e1:ef:a0:c6:86:8d:a2:19:83:44:
         72:cd:b0:53:b3:8e:b4:22:9f:b6:4a:96:0a:06:95:06:5e:b0:
         cc:1c:b3:eb:63:9f:71:8e:2d:2a:b7:87:16:92:20:2b:14:e6:
         c7:66:0e:6f:a6:e7:16:6f:d5:47:42:a7:95:90:c6:d7:a7:6f:
         7d:6f:48:e7:40:f0:74:50:3c:77:2d:cc:d5:d3:d8:f7:ce:8b:
         61:7c:0d:e2:b5:96:68:6b:19:87:51:96:1e:e6:86:64:f3:2d:
         e1:de:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----