Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/07f75c78201a9092b12aed04b471c0eda7d67389.roa
File:                     07f75c78201a9092b12aed04b471c0eda7d67389.roa (raw, json)
Hash identifier:          BcAwtQ/Wrs9RUwRegZV7lffEApvwSBLfeDCinrtsfLo=
Subject key identifier:   6A:9F:93:75:56:43:4F:4B:B7:A3:2B:09:C3:97:20:59:B0:E3:2F:13
Certificate issuer:       /CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
Certificate serial:       2A9C92
Authority key identifier: FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/07f75c78201a9092b12aed04b471c0eda7d67389.roa
Signing time:             Wed 14 Feb 2024 13:40:19 +0000
ROA not before:           Wed 14 Feb 2024 13:39:34 +0000
ROA not after:            Wed 14 Feb 2029 13:39:34 +0000
asID:                     262239
IP address blocks:        190.93.82.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2792594 (0x2a9c92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd
        Validity
            Not Before: Feb 14 13:39:34 2024 GMT
            Not After : Feb 14 13:39:34 2029 GMT
        Subject: CN=07f75c78201a9092b12aed04b471c0eda7d67389
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:dc:23:ff:bd:15:22:b0:38:38:b5:8d:f4:
                    b0:77:fb:f2:fe:e5:94:10:af:ba:71:b5:50:7c:93:
                    93:e6:4b:ae:d7:8d:be:33:c7:c1:be:0f:dc:d0:68:
                    69:b7:f5:35:a7:a0:9b:3d:ee:28:6d:36:21:51:a7:
                    38:e6:64:2e:1b:b1:44:65:44:45:bd:52:87:c9:ab:
                    f3:14:3f:51:fe:cf:0a:0b:ba:ca:2e:27:fb:1c:b3:
                    2f:12:12:d4:4f:6e:7f:3d:1f:2e:bc:03:bf:ab:3a:
                    6d:b5:32:95:e2:8d:00:4a:e9:f5:30:5c:b3:9a:ae:
                    b5:98:4b:9e:25:7b:61:37:03:f8:d5:d2:9a:04:7c:
                    19:d4:7a:c2:ef:91:21:46:29:1d:21:d9:f6:ee:e1:
                    6c:6d:b3:81:42:03:68:0e:aa:6c:80:2f:72:0b:03:
                    e0:c4:8c:fc:54:db:22:dd:a6:81:11:38:fb:85:67:
                    08:4c:57:5f:97:84:46:a5:dd:bf:16:4b:2f:b4:36:
                    e6:8e:be:78:21:22:14:a1:22:00:ad:05:de:38:79:
                    43:ba:3a:53:66:a7:d7:9f:1d:98:37:e5:ea:7e:b7:
                    ee:e1:9f:72:d1:45:26:1d:73:77:87:87:79:00:d5:
                    ae:73:9c:aa:0a:da:2e:76:98:1a:16:3e:50:b9:68:
                    8f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9F:93:75:56:43:4F:4B:B7:A3:2B:09:C3:97:20:59:B0:E3:2F:13
            X509v3 Authority Key Identifier:
                keyid:FB:7C:E0:4A:36:FE:05:D0:11:BB:E4:C3:5A:B6:87:E8:F0:E2:A1:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/07f75c78201a9092b12aed04b471c0eda7d67389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/a9fb5cd993d34825dca1afc4cadeaf8493dbdbdd.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:90:1f:48:78:62:37:18:33:91:34:3c:06:4a:3e:e3:78:e8:
         1e:c5:30:4c:39:1d:6a:ae:cd:2b:61:38:2e:40:b5:a0:8d:e1:
         85:98:32:22:21:d7:a4:33:26:12:77:a1:79:ed:8e:24:81:99:
         8d:3f:30:15:c1:f0:53:10:ea:6e:e2:6c:c1:30:f0:e1:ed:b3:
         06:bc:57:65:9d:80:64:2c:e2:ef:ad:fc:38:e8:a5:52:f8:ee:
         16:53:3e:d6:0a:1c:28:a6:34:fe:1b:cc:32:2d:cb:b3:6e:01:
         a5:0d:47:c1:e8:81:a8:c0:e9:fc:9c:55:fe:ae:14:bb:ad:c7:
         f3:f6:ea:c5:8a:40:67:2c:06:44:5a:7b:f7:72:bd:fa:3d:73:
         63:09:fd:26:ef:d1:70:9a:bf:9a:b9:d6:59:ed:95:9e:74:da:
         23:2d:1b:ec:c0:3b:c6:4a:c5:70:f8:52:af:53:1a:93:79:0d:
         b2:37:44:b1:76:21:4b:4c:80:8d:89:ad:19:f8:aa:1f:70:7f:
         e7:89:b9:d4:9f:d7:e4:79:12:77:74:a2:e2:ee:10:95:b4:89:
         8e:b6:43:01:84:ca:07:4d:62:88:f2:a1:47:67:af:80:fe:8a:
         d1:26:32:6c:ad:84:d6:30:7b:48:01:38:94:ca:8f:68:11:db:
         2e:9c:b1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----