Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/b9f0905dfa8e43a81062b5d6664c83717d05afeb.roa
File:                     b9f0905dfa8e43a81062b5d6664c83717d05afeb.roa (raw, json)
Hash identifier:          PWgBORT5W+gb0ED3Nv0jVQDCkMnb50vcvFgfsCmssk4=
Subject key identifier:   BD:7D:0A:54:E0:30:15:09:AD:D0:46:D6:EC:FA:B5:5C:B8:D4:79:CF
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       259C38
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/b9f0905dfa8e43a81062b5d6664c83717d05afeb.roa
Signing time:             Mon 18 Sep 2023 11:04:13 +0000
ROA not before:           Sun 17 Sep 2023 11:04:11 +0000
ROA not after:            Thu 18 Sep 2025 11:04:11 +0000
asID:                     28036
IP address blocks:        190.98.136.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2464824 (0x259c38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Sep 17 11:04:11 2023 GMT
            Not After : Sep 18 11:04:11 2025 GMT
        Subject: CN=b9f0905dfa8e43a81062b5d6664c83717d05afeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:54:8a:43:a5:59:17:b4:a3:98:54:b0:b7:48:
                    12:cb:ec:64:46:f0:52:5a:0f:63:b0:4f:0d:6d:28:
                    7d:93:1a:dd:b7:c7:03:9f:bf:4a:73:76:49:2c:e2:
                    75:0e:58:43:18:9c:aa:e1:50:a2:f9:4e:ff:60:af:
                    94:77:e8:87:c0:a8:2e:4c:32:56:cc:26:4c:ee:e8:
                    25:ff:b9:14:af:d2:80:e9:58:3f:ab:7a:e9:e4:47:
                    32:c1:62:98:59:41:77:1d:e0:e6:d6:c6:d2:f7:b7:
                    c8:83:fc:ae:b4:09:a9:b8:f2:02:47:cd:bd:af:03:
                    8e:db:3d:4e:2a:a0:34:e6:18:5e:22:f4:6a:a0:fc:
                    da:33:37:2a:47:7a:52:50:b9:de:bc:d2:83:5f:c6:
                    90:69:16:cc:cc:a6:0b:2e:d6:12:84:e9:04:35:9f:
                    25:b7:be:91:43:c5:de:77:dc:49:9e:10:28:6b:56:
                    8b:da:36:5e:f1:2e:2e:77:82:0b:ea:b8:01:44:dc:
                    3a:0d:00:ce:15:6c:40:21:32:cb:64:16:79:eb:1c:
                    47:2c:c0:a4:39:e1:19:fb:16:b9:7d:f6:18:00:86:
                    c5:ed:52:d8:1e:3e:5d:23:0f:04:d3:8c:1f:2c:06:
                    01:d1:8e:7b:42:9c:c6:9f:6c:71:bb:dc:6e:a9:a0:
                    18:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:7D:0A:54:E0:30:15:09:AD:D0:46:D6:EC:FA:B5:5C:B8:D4:79:CF
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/b9f0905dfa8e43a81062b5d6664c83717d05afeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:32:ca:fd:83:be:db:ed:53:39:ec:a9:29:d6:03:f1:db:f9:
         3c:fe:b5:96:f4:e5:1c:ee:cb:f2:6c:50:3b:03:df:51:d4:d5:
         55:99:3c:7b:6e:1b:eb:1c:10:50:07:28:ed:bb:85:16:2b:be:
         72:4f:8b:e1:1a:7b:fe:ce:cd:44:b8:a1:96:3b:24:6b:31:b4:
         65:2d:a0:a2:7a:78:85:22:32:8b:60:c0:5d:d3:35:71:1a:ed:
         fa:4f:88:e9:c5:51:cc:94:e7:d9:f4:2f:60:03:b4:33:80:a0:
         43:34:c9:0a:1c:f0:45:9f:b5:18:c1:ba:d8:fb:8f:dd:6b:47:
         4c:12:f4:63:2d:5b:33:bb:31:46:95:1e:2a:99:44:70:a3:49:
         1e:c8:af:28:a0:2a:bf:be:8f:78:9e:91:68:38:35:27:07:6c:
         3f:4f:c5:a1:fd:5e:0f:27:03:bb:2e:05:c5:73:1d:06:19:c6:
         ec:15:3d:62:c4:05:85:46:25:72:5b:fa:9a:7e:6f:8b:98:22:
         4e:a2:7b:82:3e:59:6f:4e:fa:3a:0b:97:a0:ab:84:36:70:24:
         bd:b5:14:5e:fc:ac:b7:90:a0:d6:45:48:90:56:92:75:2b:6d:
         02:5b:ab:bc:a0:2f:3e:fd:de:88:0e:65:dd:e1:7f:95:96:68:
         13:04:42:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----