Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/4f4a364045f074433f2dc5b356c25f765fd2029c.roa
File:                     4f4a364045f074433f2dc5b356c25f765fd2029c.roa (raw, json)
Hash identifier:          pPH4Luv+W6Xm1+te8e24TdHuQKMTVqtfqi3f5Nd0CMk=
Subject key identifier:   0C:F5:DD:67:10:96:CC:18:A5:48:01:9E:57:58:8E:4B:37:5D:B9:DB
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       259BB9
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/4f4a364045f074433f2dc5b356c25f765fd2029c.roa
Signing time:             Mon 18 Sep 2023 11:04:12 +0000
ROA not before:           Sun 17 Sep 2023 11:04:11 +0000
ROA not after:            Thu 18 Sep 2025 11:04:11 +0000
asID:                     262182
IP address blocks:        190.98.168.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2464697 (0x259bb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Sep 17 11:04:11 2023 GMT
            Not After : Sep 18 11:04:11 2025 GMT
        Subject: CN=4f4a364045f074433f2dc5b356c25f765fd2029c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:2b:bb:ad:a3:04:cd:b3:86:dc:14:74:45:
                    36:3e:ce:6e:4b:b8:c6:c2:59:d4:c2:c6:3f:3c:9c:
                    65:49:39:3a:c4:cf:02:31:eb:d8:23:da:5c:45:41:
                    3e:5b:05:a8:f5:cd:9d:de:9a:e3:91:d4:c8:8d:89:
                    a4:b2:8b:2d:ad:b0:34:88:34:ac:fd:24:b2:b2:de:
                    71:91:35:7e:b4:9b:73:bd:b6:ca:8d:68:9b:44:fa:
                    73:d0:57:c1:49:09:98:86:42:74:7f:7b:c9:d1:a8:
                    4c:e7:14:c1:f4:ab:1d:5a:34:9d:bd:9f:b6:a2:8c:
                    72:5c:b7:5a:e2:93:5c:ad:f4:ec:55:1e:5a:9e:67:
                    cb:15:88:a7:03:6f:83:8a:e4:50:1c:2e:4f:eb:42:
                    27:0f:12:69:95:f8:77:56:0b:c3:3a:90:53:68:0e:
                    d0:68:2b:30:ed:ec:5b:64:de:81:1b:b7:c0:4a:31:
                    3e:fb:2e:34:42:63:4c:56:e4:1c:43:f3:d0:fa:06:
                    7e:f2:a2:dc:3a:a1:58:8b:ef:6a:23:9b:b9:80:b4:
                    47:02:05:7a:f0:06:18:fd:7c:c5:8c:1a:79:5e:09:
                    ef:4b:8d:e2:44:37:4a:4f:80:01:d6:45:d7:9d:12:
                    d8:9a:f5:8a:7a:9b:32:ae:8f:be:96:ba:8d:36:0c:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F5:DD:67:10:96:CC:18:A5:48:01:9E:57:58:8E:4B:37:5D:B9:DB
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/4f4a364045f074433f2dc5b356c25f765fd2029c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:c3:7a:db:b5:81:b9:55:c0:86:8b:a5:da:c7:14:df:35:8f:
         49:cc:01:d3:7a:da:de:57:72:b7:f1:9f:6c:ab:ea:9c:b9:2f:
         bc:af:1f:68:26:84:c3:52:88:c9:51:ac:d9:17:8b:33:e7:4e:
         b6:46:bd:28:89:0e:4a:54:f3:af:de:6e:76:e6:8e:a3:05:88:
         bf:ca:e5:e7:b3:f8:f6:83:ea:98:21:38:bf:af:4c:b4:b2:a4:
         eb:2c:d6:22:bb:a2:1e:dc:24:0a:ab:e2:5e:d3:85:c0:84:ff:
         75:11:24:27:d5:9a:8b:e4:67:fd:6d:11:72:9f:36:02:db:83:
         80:8e:39:97:73:1f:50:e2:41:4a:5f:92:bf:84:9e:87:3b:dc:
         27:33:02:01:1f:bd:01:26:ed:5e:fa:3a:b7:0b:1a:0b:74:02:
         1c:62:61:57:fc:d4:f5:aa:a5:8b:3d:c1:5f:53:d8:0c:c8:f5:
         18:b0:73:a0:c0:b1:c7:29:49:0c:9b:da:21:8e:8e:8e:8c:5b:
         ee:8b:b1:ef:17:3f:2d:ca:2b:a8:7d:cf:84:39:73:40:45:e4:
         ea:4e:86:12:b2:b7:7c:7c:0e:00:db:3d:a6:be:20:1d:d3:dd:
         82:59:b8:8d:60:a7:47:b9:9d:95:6e:a8:16:ad:53:e1:14:23:
         43:9a:29:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----