Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/182b4888264efe94c59ff7cdc0676da4ec709148.roa
File:                     182b4888264efe94c59ff7cdc0676da4ec709148.roa (raw, json)
Hash identifier:          wSBFFGCJbujl3DZzPPHEIegS0+BURXOzal44WLT6J/o=
Subject key identifier:   F8:93:97:E8:4A:FC:54:0C:EC:34:67:EF:2D:44:B3:D7:3E:91:B6:36
Certificate issuer:       /CN=e5d85378526621fbd4956efa10478f912f0807db
Certificate serial:       286A04
Authority key identifier: 18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/182b4888264efe94c59ff7cdc0676da4ec709148.roa
Signing time:             Wed 20 Dec 2023 17:34:57 +0000
ROA not before:           Wed 20 Dec 2023 17:34:57 +0000
ROA not after:            Sat 20 Dec 2025 17:34:57 +0000
asID:                     21859
IP address blocks:        190.93.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2648580 (0x286a04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5d85378526621fbd4956efa10478f912f0807db
        Validity
            Not Before: Dec 20 17:34:57 2023 GMT
            Not After : Dec 20 17:34:57 2025 GMT
        Subject: CN=182b4888264efe94c59ff7cdc0676da4ec709148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e5:b1:63:52:bd:76:87:25:3f:67:11:9d:33:
                    67:2c:58:39:48:a9:05:45:0b:62:e0:63:34:c1:25:
                    35:14:14:18:81:42:dc:59:fb:5f:44:8a:d1:2e:e4:
                    8d:3f:e2:9d:7c:25:a9:e4:e2:1e:11:b3:ed:55:43:
                    7a:0e:5b:f2:94:22:ae:af:8e:82:01:e4:bd:d3:80:
                    b3:0c:2d:c8:2c:48:9a:53:a7:62:93:43:cb:99:23:
                    78:f8:3c:be:fe:e9:76:9b:43:d4:14:0e:02:45:cc:
                    bd:cf:5a:84:4d:a2:58:09:c4:4a:bd:ff:5e:26:35:
                    15:c7:fc:ab:d7:7e:c1:95:94:df:13:a5:2b:36:48:
                    02:96:95:00:a1:13:65:5a:7e:20:0f:51:1e:7b:46:
                    fa:04:78:7f:ea:96:ef:9c:d8:09:27:b6:93:b3:1e:
                    af:0d:9d:e0:51:12:5b:f5:c2:8c:8e:60:af:e2:f2:
                    a8:08:67:5e:27:16:fb:04:96:30:fb:d5:43:c0:27:
                    cf:30:49:a9:b4:de:4f:3e:96:b5:0f:61:6b:bd:23:
                    e2:34:e1:7a:cd:0d:66:ff:86:f2:5f:20:5d:f7:5b:
                    07:9f:e0:f7:0a:f4:ab:b3:26:5a:40:fb:66:68:4c:
                    19:27:ae:e6:84:db:04:55:b3:5a:62:49:7e:ae:74:
                    d7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:93:97:E8:4A:FC:54:0C:EC:34:67:EF:2D:44:B3:D7:3E:91:B6:36
            X509v3 Authority Key Identifier:
                keyid:18:F2:5A:EC:F7:B0:C8:67:FE:6C:5F:A1:61:E5:EB:AC:A6:39:AB:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5d85378526621fbd4956efa10478f912f0807db.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/182b4888264efe94c59ff7cdc0676da4ec709148.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c70da51a-c1c4-4648-8887-38da4f17bf86/e5d85378526621fbd4956efa10478f912f0807db.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.93.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:28:87:e6:ae:1c:39:38:7c:da:d0:a8:f8:f2:d1:28:8d:4d:
         24:93:89:ea:f8:46:ce:76:5e:5e:3e:ef:ab:62:bb:36:25:ad:
         55:b1:1a:39:c9:d2:8f:72:9e:fa:51:e3:95:8f:f1:38:f4:b1:
         30:5d:ef:93:7c:a9:73:f6:de:6b:60:bb:53:ba:79:0f:d7:db:
         82:0d:ef:ff:a6:f0:fe:4b:87:f6:2a:69:e1:8a:97:0b:9d:81:
         88:35:3e:90:be:66:7a:b7:b4:a8:fd:32:e0:91:31:d6:99:76:
         d5:e3:d1:6c:97:59:64:4c:7a:01:05:b4:fb:87:64:d7:dc:e3:
         e0:50:55:ab:38:c1:7a:7f:92:74:d3:40:bb:7e:58:20:6a:3a:
         12:2f:78:bb:a8:f0:f6:79:98:c4:d1:92:48:a2:89:79:e7:d0:
         3f:36:a0:bf:88:28:d3:07:c7:20:55:4a:de:b9:36:57:5a:fa:
         35:34:cc:31:a6:12:43:fd:8a:4f:fa:17:18:50:c5:ab:73:d1:
         b8:a2:09:3b:4c:1a:65:d2:c3:fb:66:07:ee:90:bc:77:6a:b0:
         36:9f:ca:03:b6:85:cc:cb:9b:47:d4:cb:bb:7c:f5:4e:66:ad:
         c0:bd:9d:fe:2b:0e:88:ca:b4:8d:da:b3:e0:20:60:00:6f:e0:
         dd:9a:c3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----