Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/54a042f0a73e0cd86f237d7612e3dfceffcc37f5.roa
File:                     54a042f0a73e0cd86f237d7612e3dfceffcc37f5.roa (raw, json)
Hash identifier:          sE0Uov4v+T8a+nuUpkDKRq+fPUYzF1HA7CgcvFdcYx8=
Subject key identifier:   EB:0D:EA:AD:B8:33:F2:F3:EA:B1:54:DB:1B:84:1A:8E:91:60:7A:97
Certificate issuer:       /CN=1df9a14191089eaefc01526e171a2fc63b8cc044
Certificate serial:       210333
Authority key identifier: B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/54a042f0a73e0cd86f237d7612e3dfceffcc37f5.roa
Signing time:             Wed 14 Jun 2023 02:12:28 +0000
ROA not before:           Tue 13 Jun 2023 02:12:26 +0000
ROA not after:            Sat 14 Jun 2025 02:12:26 +0000
asID:                     19180
IP address blocks:        200.31.96.0/19 maxlen: 24
                          190.8.128.0/19 maxlen: 24
                          190.187.0.0/16 maxlen: 24
                          148.102.0.0/17 maxlen: 24
                          2001:1380::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2163507 (0x210333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1df9a14191089eaefc01526e171a2fc63b8cc044
        Validity
            Not Before: Jun 13 02:12:26 2023 GMT
            Not After : Jun 14 02:12:26 2025 GMT
        Subject: CN=54a042f0a73e0cd86f237d7612e3dfceffcc37f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6f:5b:1b:5a:4d:b5:cb:57:71:25:66:82:8b:
                    e2:c7:a2:0c:13:a6:18:75:a1:20:a6:72:34:e7:cd:
                    ce:c9:49:be:8b:5f:20:96:fb:e1:04:c9:ca:0f:b9:
                    28:23:3e:10:4a:b1:ba:ef:4e:6b:69:ff:f3:60:ee:
                    74:b4:94:73:24:6d:54:ef:e0:65:e1:bb:8d:5c:65:
                    8e:cc:59:1b:8e:8c:fa:d7:7d:b9:90:e6:c9:15:4f:
                    f3:e5:a0:31:e0:37:8e:3d:ff:2f:63:86:1f:ec:b8:
                    1d:35:7f:ca:13:e6:8a:2b:84:3e:4b:bb:4a:40:c6:
                    52:57:ae:8a:60:fc:3a:07:87:77:65:be:6a:6f:56:
                    c4:e3:ef:d3:1f:0e:26:76:5c:60:5a:4b:98:e6:ff:
                    38:15:b1:d3:78:00:2b:ba:ef:06:c9:c9:39:f5:75:
                    1b:ff:a4:d7:43:ee:5c:5f:1d:e6:58:66:5d:ee:7b:
                    98:e1:0d:78:41:e7:47:f3:f7:eb:b5:d9:74:0a:ee:
                    17:2a:26:ee:12:1e:bd:7c:31:10:e7:23:9d:d0:78:
                    fd:87:4e:39:67:ea:77:f9:34:ed:c5:01:0f:fe:e4:
                    f1:fd:32:cd:37:a0:ef:2c:02:1a:c5:6b:7c:fc:54:
                    fc:e1:e5:1a:bc:05:97:e8:ed:74:8b:52:34:d9:c8:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:0D:EA:AD:B8:33:F2:F3:EA:B1:54:DB:1B:84:1A:8E:91:60:7A:97
            X509v3 Authority Key Identifier:
                keyid:B0:8F:8A:6D:C7:00:4B:DC:A9:5D:9A:5E:E1:93:44:4C:E4:71:D1:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1df9a14191089eaefc01526e171a2fc63b8cc044.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/54a042f0a73e0cd86f237d7612e3dfceffcc37f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bcfef1f6-7cc6-495b-9d71-be57a0cd79b8/1df9a14191089eaefc01526e171a2fc63b8cc044.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.102.0.0/17
                  190.8.128.0/19
                  190.187.0.0/16
                  200.31.96.0/19
                IPv6:
                  2001:1380::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:42:5a:20:1d:7e:71:a1:19:05:e1:5a:16:5d:28:4b:01:ec:
         3d:71:b2:7a:4f:9a:6f:ae:dd:2e:e7:33:da:34:33:e1:86:64:
         a3:e5:60:26:97:cd:a4:3e:42:80:4d:c4:ad:cb:9a:bc:f1:eb:
         53:08:9f:01:4f:5a:14:a3:f1:76:3b:bf:95:03:73:2a:ce:22:
         7f:23:7a:76:c1:3b:ee:d6:2d:3f:9d:4e:3c:4c:3f:6a:3d:b7:
         de:53:b6:31:18:ee:52:62:32:ef:69:08:5d:48:ed:84:1d:24:
         38:65:f0:23:94:86:88:8f:42:63:23:3e:a2:a6:13:43:1e:bc:
         4e:26:de:8a:2a:f5:53:ce:71:c4:97:5c:1e:c5:75:bf:d4:a8:
         2a:7b:6c:f0:a2:ed:f0:bd:b2:12:89:8c:c9:39:c2:03:0c:ae:
         bf:15:1b:a6:d6:e9:69:84:ae:46:fd:90:b9:22:eb:59:dd:41:
         51:5e:21:89:2e:4a:59:07:81:0f:97:d9:01:8d:81:71:e5:7c:
         74:be:d8:8a:a9:51:a7:b5:9e:22:d2:89:be:be:95:b2:8e:5c:
         d7:8d:f5:22:ca:3b:74:a4:33:75:91:64:0f:13:d6:86:be:7a:
         36:2c:d4:db:f1:33:c6:73:b7:9f:6b:3e:88:74:9d:6c:d6:e5:
         26:da:db:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----