Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/a68e31dec81bb84e694657f7854ee2074fd053ff.roa
File:                     a68e31dec81bb84e694657f7854ee2074fd053ff.roa (raw, json)
Hash identifier:          se/UxJQerhT4WTJBTJOQbN9JPmMIsQRSfb5G5GGV8RQ=
Subject key identifier:   59:51:E8:7F:0A:D7:06:CD:23:9B:73:A9:4F:CC:9C:BA:47:3E:40:2F
Certificate issuer:       /CN=4d943c86c06bd73da9f8d91bfbf531a137485900
Certificate serial:       1F54B0
Authority key identifier: A9:7B:B6:5D:77:0E:09:E9:53:2E:81:FD:31:58:A2:0B:1C:02:98:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d943c86c06bd73da9f8d91bfbf531a137485900.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/a68e31dec81bb84e694657f7854ee2074fd053ff.roa
Signing time:             Fri 24 Mar 2023 08:31:23 +0000
ROA not before:           Thu 23 Mar 2023 08:31:23 +0000
ROA not after:            Sat 22 Mar 2025 08:31:23 +0000
asID:                     263245
IP address blocks:        190.107.232.0/24 maxlen: 24
                          190.107.233.0/24 maxlen: 24
                          190.107.234.0/24 maxlen: 24
                          190.107.235.0/24 maxlen: 24
                          190.107.236.0/24 maxlen: 24
                          190.107.237.0/24 maxlen: 24
                          190.107.238.0/24 maxlen: 24
                          2803:d180::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2053296 (0x1f54b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d943c86c06bd73da9f8d91bfbf531a137485900
        Validity
            Not Before: Mar 23 08:31:23 2023 GMT
            Not After : Mar 22 08:31:23 2025 GMT
        Subject: CN=a68e31dec81bb84e694657f7854ee2074fd053ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:99:50:92:03:2c:a0:71:24:47:2a:f0:be:
                    c4:36:7e:41:32:a7:cd:4a:06:76:0a:22:66:65:dc:
                    9c:b8:e3:74:87:31:12:88:90:3d:e8:1a:76:61:1a:
                    62:ed:57:ba:f0:59:1b:a0:27:36:48:27:a8:3b:3b:
                    ab:e8:27:84:f7:05:5e:20:33:22:7e:63:5f:5f:16:
                    01:9b:ad:0c:36:e1:0c:60:81:a0:3a:2e:48:e2:9d:
                    b6:dc:cf:8b:80:02:57:4a:30:10:b3:f9:20:27:d5:
                    16:9b:a0:00:af:59:02:b3:d2:f8:71:62:d7:3c:38:
                    7d:c3:fd:da:f9:73:28:5f:a0:47:e0:04:0b:e2:90:
                    d4:f6:dc:5d:58:e6:93:ef:4a:31:46:f6:62:36:87:
                    db:00:20:98:cd:9d:1d:37:c3:5e:20:42:28:0d:60:
                    20:f6:c5:77:c1:57:56:c2:17:f1:8e:4b:9a:e5:47:
                    e8:2b:28:52:49:99:9e:fc:87:8c:de:b6:7e:eb:40:
                    9a:fa:81:c6:3a:77:48:82:c3:ba:6e:7f:68:91:56:
                    6e:4c:d3:cf:c3:64:c8:26:06:56:07:8b:68:ca:8a:
                    c6:29:a4:93:03:23:a0:b3:3f:08:a9:c1:fd:8b:6a:
                    82:23:42:15:aa:3c:5b:b8:c6:56:ad:26:a5:bd:4f:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:51:E8:7F:0A:D7:06:CD:23:9B:73:A9:4F:CC:9C:BA:47:3E:40:2F
            X509v3 Authority Key Identifier:
                keyid:A9:7B:B6:5D:77:0E:09:E9:53:2E:81:FD:31:58:A2:0B:1C:02:98:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d943c86c06bd73da9f8d91bfbf531a137485900.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/a68e31dec81bb84e694657f7854ee2074fd053ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cf65b593-2cd9-4000-b340-da05ada22033/4d943c86c06bd73da9f8d91bfbf531a137485900.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.107.232.0-190.107.238.255
                IPv6:
                  2803:d180::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:64:32:b3:10:da:ce:53:8e:bf:39:c3:56:c4:3b:96:da:0c:
         58:8e:d9:a6:82:ec:43:5f:1e:1d:4a:00:29:ce:90:09:f8:15:
         84:de:e3:1d:4b:33:98:dc:09:40:e8:dc:d4:96:d1:dd:a8:91:
         37:a2:3a:f1:1d:17:51:8b:b3:bd:0c:16:9c:13:bf:5d:44:f6:
         60:82:53:93:ff:e5:9c:37:c0:fe:ac:3d:cb:84:2a:59:e9:28:
         bf:f4:fb:5f:0e:71:82:ce:2e:9e:d9:54:2c:7f:6e:f7:26:fd:
         bf:d9:54:9e:15:29:6c:bd:51:04:63:80:c4:39:09:5b:3a:a1:
         75:48:51:3d:68:c3:e6:31:3d:4f:f5:bd:f7:cf:15:c1:09:3b:
         50:2f:ba:4b:d4:46:22:1f:a1:8d:6b:78:58:3e:2d:cc:91:2b:
         a0:85:b4:a8:0a:d0:0c:fe:29:36:eb:d0:cc:5e:5b:d1:e4:60:
         12:89:6b:03:85:b7:66:a8:d2:49:cc:13:01:d0:eb:63:61:af:
         fd:46:30:43:18:9e:ea:46:58:b9:46:31:43:39:25:8a:cb:95:
         38:c6:72:69:b2:f2:00:c3:2f:62:bd:8c:19:92:f8:be:8c:9f:
         10:8b:8e:32:14:e9:15:2c:e4:3e:86:6a:f4:b7:c7:9a:58:38:
         16:a5:8c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----