Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c49a4617-06a7-4c83-a240-ed5a01c8e891/6ff6928fb8691c39bf8fb6586c99d6c9c6e17a7c.roa
File:                     6ff6928fb8691c39bf8fb6586c99d6c9c6e17a7c.roa (raw, json)
Hash identifier:          AiQwTxiq+Jivl63HBnvQHr6sJuWrV9un1JD6OulVsdc=
Subject key identifier:   F7:6F:1C:9F:17:8D:4F:78:92:9B:10:0F:D6:C5:DA:47:F4:43:BA:92
Certificate issuer:       /CN=0a09add37433cdf8660c503b56a4d3204465670a
Certificate serial:       215A1B
Authority key identifier: B3:5E:6E:90:CA:36:FF:B8:9D:D2:34:71:ED:F0:C7:77:1D:21:D2:06
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a09add37433cdf8660c503b56a4d3204465670a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c49a4617-06a7-4c83-a240-ed5a01c8e891/6ff6928fb8691c39bf8fb6586c99d6c9c6e17a7c.roa
Signing time:             Wed 28 Jun 2023 13:25:22 +0000
ROA not before:           Tue 27 Jun 2023 13:25:22 +0000
ROA not after:            Sat 28 Jun 2025 13:25:22 +0000
asID:                     262192
IP address blocks:        190.13.208.0/21 maxlen: 24
                          181.174.192.0/20 maxlen: 24
                          2803:a480::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185755 (0x215a1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a09add37433cdf8660c503b56a4d3204465670a
        Validity
            Not Before: Jun 27 13:25:22 2023 GMT
            Not After : Jun 28 13:25:22 2025 GMT
        Subject: CN=6ff6928fb8691c39bf8fb6586c99d6c9c6e17a7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:5e:13:2a:9b:1f:48:07:61:98:7b:46:d2:
                    28:71:a1:67:b2:13:4b:47:0a:9b:33:41:39:6d:f3:
                    ea:31:5f:b4:69:1d:db:4d:86:69:77:ea:f1:d5:d1:
                    0b:cd:2f:e6:96:57:82:59:c1:eb:ed:66:d8:05:53:
                    22:9b:0c:06:bd:6a:f0:64:66:d4:d5:f5:d0:ee:ef:
                    d2:01:f2:45:c1:dc:19:5c:2d:45:fc:a1:ba:74:76:
                    87:de:4e:36:1c:37:a9:dc:33:d1:39:27:c9:5d:1b:
                    e1:96:7d:f8:3c:7a:6b:9e:92:08:3d:5a:40:05:89:
                    27:2c:c1:97:fd:cc:7e:fc:44:ce:c4:6e:86:f1:86:
                    07:b2:11:38:83:1b:cd:17:22:9f:b8:73:c5:18:57:
                    fa:55:e2:c5:dc:a8:21:00:ec:d6:b3:d7:cb:0e:86:
                    2f:64:38:04:e0:40:b6:8a:6a:05:6c:e3:06:e5:b5:
                    93:86:e2:a8:4d:e9:66:6d:79:6c:45:4c:bd:2a:0c:
                    16:a8:1b:6f:3f:e2:41:2c:16:70:ae:f2:9b:43:ca:
                    af:40:ba:36:f4:81:0e:62:08:21:63:3a:71:17:1e:
                    a1:71:1c:d4:42:d7:8a:91:b6:d4:02:a9:01:9a:41:
                    94:ce:bd:ec:a3:a7:6d:6f:3b:a8:7f:b5:92:86:05:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6F:1C:9F:17:8D:4F:78:92:9B:10:0F:D6:C5:DA:47:F4:43:BA:92
            X509v3 Authority Key Identifier:
                keyid:B3:5E:6E:90:CA:36:FF:B8:9D:D2:34:71:ED:F0:C7:77:1D:21:D2:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a09add37433cdf8660c503b56a4d3204465670a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c49a4617-06a7-4c83-a240-ed5a01c8e891/6ff6928fb8691c39bf8fb6586c99d6c9c6e17a7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c49a4617-06a7-4c83-a240-ed5a01c8e891/0a09add37433cdf8660c503b56a4d3204465670a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.192.0/20
                  190.13.208.0/21
                IPv6:
                  2803:a480::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:75:ca:9f:62:44:36:b7:c1:5a:9f:48:aa:0c:55:f7:25:
         c4:f4:5f:b6:81:59:2c:1b:a5:4f:18:e7:81:97:a8:43:30:d7:
         3f:c1:88:a6:4b:f4:1a:d5:e4:27:e5:b9:2b:ad:d2:45:9e:5e:
         e6:e2:93:8c:3f:6a:ea:7d:21:13:43:b0:e5:14:eb:e2:6e:28:
         82:d4:56:3b:ef:d9:59:1b:60:d7:10:1e:52:7d:4c:af:a0:5e:
         9f:b4:87:ca:06:5b:2d:b9:32:61:26:1d:39:0e:ff:6f:46:3c:
         85:cc:af:f1:9d:ae:58:d1:f3:fc:82:c9:4e:fe:9e:c1:99:2c:
         81:f6:c2:8f:98:26:c5:98:cf:20:71:8d:d1:86:e0:f3:5e:2d:
         72:82:3a:3c:d0:97:42:3d:93:b9:1b:14:71:cc:c3:98:4e:4b:
         79:76:43:59:30:cd:a4:f6:84:ea:5c:bd:c1:66:48:71:76:db:
         e6:e9:cc:38:56:6f:10:ca:04:4d:86:73:a2:e1:1a:8a:09:9a:
         7d:ce:49:bb:d3:ac:db:29:24:15:93:a8:a0:d9:16:ae:fb:ac:
         fd:1b:18:c4:f5:a3:87:86:aa:4f:e9:91:6d:ef:0a:1f:d9:43:
         96:7e:9e:8d:8c:a0:b8:e9:8d:79:37:f3:e4:aa:e5:16:b7:8e:
         2a:51:18:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----