Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/90290db26fcdf453b3f3d6eb49eb4fd8d2602a35.roa
File:                     90290db26fcdf453b3f3d6eb49eb4fd8d2602a35.roa (raw, json)
Hash identifier:          /+eiOdArVSmZ9XVXyyperZZnkk+0qBAQ4eB3/gdlg0M=
Subject key identifier:   4B:E8:BD:1D:A0:EA:07:9D:62:35:BC:DE:D0:CD:4A:90:83:A6:90:CB
Certificate issuer:       /CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
Certificate serial:       2759DA
Authority key identifier: A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/90290db26fcdf453b3f3d6eb49eb4fd8d2602a35.roa
Signing time:             Mon 12 Feb 2024 19:50:04 +0000
ROA not before:           Mon 12 Feb 2024 19:50:04 +0000
ROA not after:            Thu 12 Feb 2026 19:50:04 +0000
asID:                     27651
IP address blocks:        181.42.0.0/17 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2578906 (0x2759da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
        Validity
            Not Before: Feb 12 19:50:04 2024 GMT
            Not After : Feb 12 19:50:04 2026 GMT
        Subject: CN=90290db26fcdf453b3f3d6eb49eb4fd8d2602a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:00:e2:49:36:18:5d:fd:ea:a9:66:a9:74:34:
                    40:0a:60:11:2e:3a:77:e0:42:b8:05:b4:9b:a1:04:
                    92:c4:51:f7:77:2c:c5:e8:d7:e9:4f:de:cd:2c:c3:
                    90:b2:02:fb:ec:9b:ba:f6:3b:67:38:0a:3e:17:81:
                    71:86:7f:e9:6b:aa:7d:49:16:7b:32:cc:81:47:1a:
                    16:a9:9a:48:90:19:13:f4:ba:82:6b:f5:62:54:0d:
                    fa:cf:f5:57:dc:cd:62:86:0e:b6:3d:2c:fd:be:22:
                    0c:cd:90:7e:0a:38:1e:19:b2:b0:7b:e8:c6:21:54:
                    c1:d1:29:db:4d:7e:4d:1d:2f:df:b7:cf:0b:e3:ca:
                    ac:6d:3c:f6:46:45:51:a5:05:50:dd:00:fc:73:3d:
                    84:6c:2e:8b:4d:46:da:28:28:92:1e:8c:c2:48:39:
                    c0:2b:25:62:ef:15:c0:be:20:fe:52:f9:13:16:5b:
                    06:7c:73:16:b3:26:db:7a:81:79:ca:ce:43:bf:e5:
                    6c:d5:03:be:9c:3f:ed:a5:cc:4f:9e:13:48:5b:0f:
                    51:f7:35:86:ec:de:b5:60:df:5b:94:46:88:eb:6a:
                    26:03:20:71:84:5e:02:8c:d8:3a:4c:0e:5e:3b:cb:
                    2c:96:2e:77:b6:04:af:2b:e4:fa:49:42:77:b2:56:
                    b9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E8:BD:1D:A0:EA:07:9D:62:35:BC:DE:D0:CD:4A:90:83:A6:90:CB
            X509v3 Authority Key Identifier:
                keyid:A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/90290db26fcdf453b3f3d6eb49eb4fd8d2602a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.42.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5b:3f:b5:da:b9:3b:56:8e:7e:f0:f3:88:40:99:ad:5a:73:49:
         56:ff:29:97:da:c5:27:ba:02:75:b8:ad:41:4d:48:1a:20:9a:
         cd:c3:c2:c4:c7:14:f7:69:15:cf:a0:d4:3d:78:48:5e:8a:5e:
         b5:93:85:48:47:c0:5d:bf:ca:0c:62:3f:a5:3d:5c:31:8b:1c:
         8b:08:71:d6:37:d0:46:a4:13:6b:d3:5b:a6:42:9b:2b:f1:54:
         69:97:9f:ba:0e:b2:e6:35:cc:8e:54:f4:c9:eb:31:8a:ff:36:
         40:9c:eb:9a:b2:64:6b:a1:1d:f7:b2:fd:4a:fb:8a:70:00:82:
         8e:af:02:31:56:8b:90:3f:2f:20:be:4e:c2:a2:8a:19:0a:13:
         8d:1f:81:8d:e4:60:2e:ef:71:4b:f6:d8:7f:33:9f:19:a2:7e:
         eb:16:e0:9e:e1:38:ca:fc:b7:1e:46:d1:c9:71:09:40:97:89:
         b2:f3:e5:f4:fa:de:9c:3e:49:12:c2:28:4a:49:56:bc:a5:61:
         a8:25:59:89:fd:5f:37:59:ca:f7:1d:0c:63:fb:66:0f:da:27:
         53:7b:2d:53:46:7c:a2:7b:37:64:74:f4:12:3a:c1:93:91:65:
         3f:0e:21:50:ef:3d:51:97:9c:ba:45:74:b2:60:87:0d:ae:e6:
         14:37:0b:68
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIDJ1naMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQy
OWFkYzcxMTdiNWZiNmM5YmUxYTdjZjRmYTMxM2UzN2VlMTg1YmYwHhcNMjQwMjEy
MTk1MDA0WhcNMjYwMjEyMTk1MDA0WjAzMTEwLwYDVQQDEyg5MDI5MGRiMjZmY2Rm
NDUzYjNmM2Q2ZWI0OWViNGZkOGQyNjAyYTM1MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAoQDiSTYYXf3qqWapdDRACmARLjp34EK4BbSboQSSxFH3dyzF
6NfpT97NLMOQsgL77Ju69jtnOAo+F4Fxhn/pa6p9SRZ7MsyBRxoWqZpIkBkT9LqC
a/ViVA36z/VX3M1ihg62PSz9viIMzZB+CjgeGbKwe+jGIVTB0SnbTX5NHS/ft88L
48qsbTz2RkVRpQVQ3QD8cz2EbC6LTUbaKCiSHozCSDnAKyVi7xXAviD+UvkTFlsG
fHMWsybbeoF5ys5Dv+Vs1QO+nD/tpcxPnhNIWw9R9zWG7N61YN9blEaI62omAyBx
hF4CjNg6TA5eO8ssli53tgSvK+T6SUJ3sla5rQIDAQABo4ICWzCCAlcwHQYDVR0O
BBYEFEvovR2g6gedYjW83tDNSpCDppDLMB8GA1UdIwQYMBaAFKDorY9rLW0fPScQ
taDa78ZWBxerMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDI5YWRj
NzExN2I1ZmI2YzliZTFhN2NmNGZhMzEzZTM3ZWUxODViZi5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvYjg2NDhhMWMtN2ViOS00NjllLWJmMjgtZTE4ODhh
ZDg5ZWZiLzkwMjkwZGIyNmZjZGY0NTNiM2YzZDZlYjQ5ZWI0ZmQ4ZDI2MDJhMzUu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9iODY0OGExYy03ZWI5LTQ2OWUtYmYyOC1lMTg4
OGFkODllZmIvNDI5YWRjNzExN2I1ZmI2YzliZTFhN2NmNGZhMzEzZTM3ZWUxODVi
Zi5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEB7UqADANBgkqhkiG9w0BAQsFAAOCAQEAWz+12rk7Vo5+8POI
QJmtWnNJVv8pl9rFJ7oCdbitQU1IGiCazcPCxMcU92kVz6DUPXhIXopetZOFSEfA
Xb/KDGI/pT1cMYsciwhx1jfQRqQTa9NbpkKbK/FUaZefug6y5jXMjlT0yesxiv82
QJzrmrJka6Ed97L9SvuKcACCjq8CMVaLkD8vIL5OwqKKGQoTjR+BjeRgLu9xS/bY
fzOfGaJ+6xbgnuE4yvy3HkbRyXEJQJeJsvPl9PrenD5JEsIoSklWvKVhqCVZif1f
N1nK9x0MY/tmD9onU3stU0Z8ons3ZHT0EjrBk5FlPw4hUO89UZecukV0smCHDa7m
FDcLaA==
-----END CERTIFICATE-----