Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/89df6d2aba3d2aab35ca420598b905295e59871a.roa
File:                     89df6d2aba3d2aab35ca420598b905295e59871a.roa (raw, json)
Hash identifier:          Y5nRqoYnem6wyogp1V3tILeKSrq2Z7cKgrZt6MBohZY=
Subject key identifier:   F3:26:C7:64:BB:9A:E3:B7:3F:6F:3B:82:F2:C9:D0:36:5C:E1:5A:9D
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       25A297
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/89df6d2aba3d2aab35ca420598b905295e59871a.roa
Signing time:             Mon 18 Sep 2023 11:04:14 +0000
ROA not before:           Sun 17 Sep 2023 11:04:11 +0000
ROA not after:            Thu 18 Sep 2025 11:04:11 +0000
asID:                     60725
IP address blocks:        190.98.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2466455 (0x25a297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Sep 17 11:04:11 2023 GMT
            Not After : Sep 18 11:04:11 2025 GMT
        Subject: CN=89df6d2aba3d2aab35ca420598b905295e59871a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:94:a0:fd:e5:4a:83:37:35:45:83:dc:23:
                    b6:98:11:ea:e5:f2:6a:0c:90:fb:0a:58:71:94:5a:
                    d2:5a:3f:f1:e9:e0:e2:13:fc:32:7c:a3:0c:c1:c6:
                    d1:6d:2d:07:ae:ac:d1:cd:11:dd:f8:0b:e9:82:4c:
                    2f:89:7d:3d:9f:38:d7:b1:da:5b:94:27:e4:f2:73:
                    47:7d:9d:06:44:c0:cd:05:31:df:8f:c5:d0:ca:8d:
                    14:4c:46:e9:f4:74:d4:56:38:78:d3:eb:11:07:53:
                    49:ae:5e:f1:85:b5:19:57:2b:8e:01:a5:bc:e0:18:
                    6e:15:3a:f9:c0:43:20:da:e1:d3:a2:b8:40:74:0a:
                    b2:a2:51:f7:49:a1:bc:74:8d:4e:26:5b:d2:c6:89:
                    88:75:9f:e9:8d:33:99:fd:72:45:a2:4b:2f:6d:c4:
                    6a:a7:a5:23:0d:52:97:5a:e0:7b:06:b8:6d:2a:80:
                    19:df:9e:32:3d:b1:15:b6:e7:38:47:63:7c:f4:73:
                    61:08:a5:57:5e:21:11:40:1c:44:72:95:ea:0a:17:
                    38:cb:8f:c4:49:b9:11:6f:f5:7c:9a:ec:8a:f7:7b:
                    4f:fb:e0:b3:e7:8f:68:af:1f:e5:3e:cd:ab:47:0f:
                    00:d0:17:bf:fd:85:56:0a:90:5d:d3:3a:6a:5c:78:
                    3a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:26:C7:64:BB:9A:E3:B7:3F:6F:3B:82:F2:C9:D0:36:5C:E1:5A:9D
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/89df6d2aba3d2aab35ca420598b905295e59871a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:b3:b8:29:5a:43:9e:53:20:09:a6:c2:2e:f1:66:4e:9d:06:
         c3:99:5c:78:be:e4:69:eb:f5:4f:7c:e9:0a:2c:b3:c6:1d:98:
         f6:b5:f3:66:00:73:a5:d9:30:8b:8a:23:4b:9e:83:27:fa:4d:
         62:5d:33:21:cc:4e:64:9d:f3:1e:54:c4:50:55:e2:ec:4d:00:
         89:e7:f6:26:37:f2:6a:4e:af:d4:d3:28:56:be:c2:24:af:05:
         7a:2f:03:d8:ed:6b:8d:88:9e:46:6e:8c:f0:bc:07:78:e4:ca:
         20:3d:24:c9:3f:fb:37:93:8d:7d:23:55:06:f9:f5:92:47:74:
         88:fe:35:2f:f3:e0:8a:b5:91:f6:83:aa:fa:94:13:43:e2:52:
         c0:58:bb:3d:4e:78:b3:ed:ce:2f:4b:3a:0c:d3:3d:ce:bf:d0:
         d8:e2:69:71:35:ae:11:ea:d1:c7:f0:37:a6:66:a1:06:32:c9:
         31:b1:38:71:42:59:3a:a9:6a:a1:c0:e9:2d:a0:84:21:a4:31:
         3b:fc:87:fa:35:15:16:7c:6c:a4:65:e8:82:aa:2e:68:1f:02:
         ff:83:ae:14:91:d5:11:3b:f0:cc:b6:2a:e4:62:3b:08:5a:51:
         e2:05:70:35:16:2a:76:f3:8d:8e:bd:55:96:58:52:69:83:e3:
         31:8a:a3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----