Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/3512e004e9049f3c28cfc6d174d42941d2819ea9.roa
File:                     3512e004e9049f3c28cfc6d174d42941d2819ea9.roa (raw, json)
Hash identifier:          HGNrw47Q9pO6LTTxZ5sjmPv/Tz7R8jXaJ6Fsa9rmVkI=
Subject key identifier:   7A:70:92:49:A5:68:15:F1:D0:F2:19:CE:A8:25:29:92:14:C2:55:35
Certificate issuer:       /CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
Certificate serial:       25DA39
Authority key identifier: 82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/3512e004e9049f3c28cfc6d174d42941d2819ea9.roa
Signing time:             Mon 18 Sep 2023 11:36:38 +0000
ROA not before:           Sun 17 Sep 2023 11:36:31 +0000
ROA not after:            Mon 18 Sep 2028 11:36:31 +0000
asID:                     19047
IP address blocks:        190.98.158.64/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2480697 (0x25da39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d2f4d81bbf1e7d227419a51352953ce9c6aca3a
        Validity
            Not Before: Sep 17 11:36:31 2023 GMT
            Not After : Sep 18 11:36:31 2028 GMT
        Subject: CN=3512e004e9049f3c28cfc6d174d42941d2819ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1b:4f:c4:89:64:de:88:cb:7c:37:a7:2b:50:
                    99:96:ec:d6:30:60:f0:40:3c:b7:c1:4a:c4:1a:92:
                    0e:40:73:67:d1:c2:3b:6c:f3:f0:09:54:85:3f:68:
                    88:f0:ef:0e:7d:d7:10:89:c2:60:48:e4:ed:de:c3:
                    70:45:a5:91:52:42:01:7a:46:4f:01:ab:79:fb:c6:
                    91:3a:31:d4:88:4f:2c:2b:16:9a:31:e3:1e:05:c7:
                    46:70:0c:f7:52:9d:12:e7:25:ee:47:2c:10:31:8a:
                    d8:aa:7a:35:9d:34:bd:8e:19:89:be:7f:8a:e7:ee:
                    65:89:b4:c6:b0:2c:13:5c:f2:34:7b:65:7e:bc:77:
                    a1:e9:c6:3d:55:d7:92:18:e0:fa:19:d8:f3:b4:79:
                    cb:4f:5c:73:b2:26:f3:57:c0:a6:80:1c:e7:a7:a0:
                    86:57:44:cd:19:f8:57:17:83:cc:42:c5:ee:0f:ae:
                    ee:91:87:92:78:93:c8:a1:b8:ec:d8:ce:aa:82:9d:
                    58:b6:42:7f:5a:aa:04:78:4f:6a:09:a0:82:df:80:
                    26:54:dc:bb:82:6a:4b:ce:e8:77:42:5a:75:c4:08:
                    05:74:b3:13:e4:f6:15:82:3d:36:d1:24:20:94:9d:
                    a4:f1:37:e2:5a:58:5b:45:f9:7c:8e:fe:f0:3e:1a:
                    52:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:70:92:49:A5:68:15:F1:D0:F2:19:CE:A8:25:29:92:14:C2:55:35
            X509v3 Authority Key Identifier:
                keyid:82:9B:22:8F:F6:D1:CF:D0:15:B1:3E:A7:FF:72:5A:53:FD:CA:3C:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/3512e004e9049f3c28cfc6d174d42941d2819ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/8d2f4d81bbf1e7d227419a51352953ce9c6aca3a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.158.64/26

    Signature Algorithm: sha256WithRSAEncryption
         a2:1d:34:0d:3a:a4:0d:db:9e:bb:bf:f0:c3:8f:5f:8a:b6:3c:
         51:f7:56:94:16:ac:8f:f1:c4:1b:ae:e6:b0:4c:e1:94:41:fe:
         ab:5d:42:1a:98:29:98:46:b4:7c:47:d5:19:9b:10:56:89:db:
         b1:c5:f9:55:e0:3a:1a:dc:c7:df:b0:cc:8a:23:54:fb:ff:87:
         9b:e8:5c:05:b1:43:7c:d5:97:43:63:00:cb:89:61:db:d7:43:
         6f:6a:16:3b:e9:1d:31:76:3b:87:d3:70:b6:cc:8f:3c:5a:6f:
         83:b9:f5:b5:c9:cd:5f:dd:df:79:2b:76:9e:f9:7d:8e:fe:dd:
         e9:8b:82:91:e0:45:23:25:4b:81:a4:8d:2d:98:b2:8f:30:17:
         6b:5d:98:6d:c9:01:69:04:a4:be:6c:82:68:71:2f:85:49:31:
         5a:48:ca:b3:39:5c:f1:77:94:ec:93:3d:ad:b7:c3:e1:8e:16:
         3b:ad:57:6b:38:ba:23:72:32:fa:a7:a0:89:e6:56:51:58:51:
         1c:d0:a3:55:23:a1:c6:de:5b:f9:21:94:f8:c6:49:31:8f:5b:
         f0:9a:ad:a1:80:55:b0:97:e6:71:fd:18:b8:a7:bc:b2:ef:dc:
         1e:eb:e6:35:09:c0:c9:4b:29:e7:1a:bc:bd:83:0d:9c:b1:4a:
         e1:df:c8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----