Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/8e8c5c6e78395acd0b24f21303a3287ce92f3b01.roa
File:                     8e8c5c6e78395acd0b24f21303a3287ce92f3b01.roa (raw, json)
Hash identifier:          DFITpslCTXqZFqtGmKnb0EhyX8rLz0Oq79pcdffvIeQ=
Subject key identifier:   15:54:FE:0C:04:76:FF:39:82:C9:4C:F7:6C:2C:5A:BA:70:1C:51:7D
Certificate issuer:       /CN=0b38efd4dcf424862de151d45262c81ae7ac849b
Certificate serial:       0856
Authority key identifier: 6B:83:10:27:F6:D8:27:77:69:DA:99:5C:31:51:48:05:65:F7:A7:DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0b38efd4dcf424862de151d45262c81ae7ac849b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/8e8c5c6e78395acd0b24f21303a3287ce92f3b01.roa
Signing time:             Tue 28 Feb 2023 12:45:14 +0000
ROA not before:           Sun 26 Feb 2023 12:32:52 +0000
ROA not after:            Fri 28 Feb 2025 12:32:52 +0000
asID:                     13424
IP address blocks:        190.13.64.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2134 (0x856)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b38efd4dcf424862de151d45262c81ae7ac849b
        Validity
            Not Before: Feb 26 12:32:52 2023 GMT
            Not After : Feb 28 12:32:52 2025 GMT
        Subject: CN=8e8c5c6e78395acd0b24f21303a3287ce92f3b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:dc:b3:44:b0:b7:4f:37:a7:ba:7b:3d:93:7b:
                    5e:68:72:07:a0:03:fc:2a:3b:cd:2e:43:7e:22:bb:
                    86:eb:63:41:0f:d8:c8:ea:08:a5:86:c7:fb:70:a8:
                    c8:d2:45:b0:6e:17:53:42:88:c7:5b:cb:5d:96:ba:
                    56:11:94:c7:01:c2:0e:b2:32:61:3f:15:19:a4:81:
                    0b:6f:83:98:40:1f:37:36:fb:ac:8b:33:9d:c9:09:
                    d3:18:08:1c:8a:79:c1:01:0b:67:6b:65:a7:cf:a2:
                    ea:c2:4a:d0:87:ea:8b:5d:16:47:f9:00:8e:df:c6:
                    64:c0:b8:12:d9:43:6d:e9:fa:31:1e:9d:00:aa:98:
                    c2:fb:4c:24:02:fb:da:1a:a7:28:49:24:6e:31:98:
                    5a:90:d1:4c:81:05:86:bf:4a:45:44:2f:bf:aa:90:
                    d8:da:02:58:fd:6a:f5:2c:56:f5:99:4f:56:41:24:
                    fa:be:f9:d5:9e:08:67:37:bd:6b:86:99:c1:fa:49:
                    93:67:4f:16:2e:0b:d6:da:7a:d2:52:f2:a9:2a:28:
                    5a:77:64:2c:d7:87:31:4f:30:d3:48:3e:e2:b7:bd:
                    e0:67:a5:e0:70:5e:a3:6c:ab:03:9b:d1:73:81:41:
                    22:a9:cf:aa:00:7c:97:21:86:d6:75:56:58:53:ed:
                    fe:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:54:FE:0C:04:76:FF:39:82:C9:4C:F7:6C:2C:5A:BA:70:1C:51:7D
            X509v3 Authority Key Identifier:
                keyid:6B:83:10:27:F6:D8:27:77:69:DA:99:5C:31:51:48:05:65:F7:A7:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0b38efd4dcf424862de151d45262c81ae7ac849b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/8e8c5c6e78395acd0b24f21303a3287ce92f3b01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/0b38efd4dcf424862de151d45262c81ae7ac849b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:9f:dc:32:af:58:22:2d:b5:0d:d4:63:6e:ff:9f:70:f6:ec:
         91:6e:3c:b9:de:fd:4b:57:06:4c:5d:f6:52:4e:e6:cc:a3:3b:
         60:fc:38:fa:39:df:da:2b:ac:f7:be:e8:ec:3b:e7:0a:9e:6f:
         8c:8e:a5:bc:23:c9:07:6d:8e:3d:27:5b:4f:f2:a2:bb:78:03:
         89:7f:92:3d:a7:bf:b1:63:d9:88:38:e9:2e:d7:29:5d:57:c4:
         66:26:6f:6a:83:f2:f3:d1:ec:09:7d:78:4e:38:ca:e9:bb:21:
         4f:74:37:b2:4d:a4:b2:30:e0:cd:24:f4:c2:ff:af:9a:db:5c:
         96:b1:a9:ed:36:1c:cd:41:99:87:82:61:53:3e:60:52:20:c5:
         9e:1a:c3:89:bc:6b:17:22:df:d6:0c:74:f1:d5:05:8a:55:bc:
         bc:93:58:18:a4:ed:e0:4a:6c:68:3b:b4:cd:18:e0:10:4e:ac:
         2e:f3:35:87:6f:b4:72:23:61:ad:de:be:6c:a2:cd:b9:63:1c:
         87:8c:bf:1d:fd:3d:45:23:cc:c2:9d:23:8a:87:52:b9:fe:77:
         2f:56:c3:d0:6e:05:97:9d:f6:71:ae:fd:b5:36:b9:3a:77:91:
         fe:a0:0e:d5:54:b0:20:36:58:15:39:e0:f8:b0:47:62:e9:a7:
         b2:41:48:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----