Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/d502b60780c5fc7cf157e4e1d1002daf9b8d787c.roa
File:                     d502b60780c5fc7cf157e4e1d1002daf9b8d787c.roa (raw, json)
Hash identifier:          jdD2q6NfKPn2CEemXVmDURj1ALa8Ej5hMWcT6jHVNr8=
Subject key identifier:   C4:5F:44:62:7A:0C:EA:5F:C6:7C:50:D5:DE:4E:A3:A8:96:7A:08:BC
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       25A899
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/d502b60780c5fc7cf157e4e1d1002daf9b8d787c.roa
Signing time:             Mon 18 Sep 2023 11:04:16 +0000
ROA not before:           Sun 17 Sep 2023 11:04:11 +0000
ROA not after:            Thu 18 Sep 2025 11:04:11 +0000
asID:                     19047
IP address blocks:        190.98.158.64/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2467993 (0x25a899)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Sep 17 11:04:11 2023 GMT
            Not After : Sep 18 11:04:11 2025 GMT
        Subject: CN=d502b60780c5fc7cf157e4e1d1002daf9b8d787c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:04:70:c9:3c:23:e9:f9:ee:df:fb:26:5a:0d:
                    71:09:4d:60:f8:f0:46:21:e9:95:c6:83:a5:df:c3:
                    7f:d9:ba:2b:3f:34:de:4e:cb:99:de:6f:0c:08:37:
                    09:40:47:db:de:82:aa:4c:3d:3e:98:d9:dc:d1:8d:
                    10:1e:71:99:04:50:60:9a:35:50:84:ac:ea:a7:f3:
                    2d:19:cb:f8:5f:dd:33:6d:c8:8f:ad:b7:64:7f:67:
                    aa:a4:3c:c1:b5:a8:da:32:fc:0d:9b:0b:53:97:ab:
                    df:b0:3b:cb:1f:56:c2:05:c9:f4:e1:f2:f4:2b:c6:
                    e0:b3:eb:32:86:85:2a:23:61:2c:4a:44:a4:0e:96:
                    ea:28:64:34:0b:1e:8c:46:86:35:2f:2f:22:43:dc:
                    99:2a:4f:b5:15:80:1a:60:26:67:26:ad:07:46:af:
                    1a:a5:f8:cc:a2:c8:64:8f:67:6e:0d:e7:af:2b:cf:
                    ac:be:3e:07:2a:cb:57:f9:12:58:66:89:da:65:60:
                    df:66:b5:bf:06:67:e8:15:ce:c4:5a:22:b6:e5:6a:
                    9d:a6:4a:2d:6b:89:95:94:de:cb:57:81:17:36:b7:
                    bb:71:e0:d5:73:5f:59:34:0b:33:8b:17:a4:90:3f:
                    d9:4d:3a:bb:f9:0e:fa:c0:08:bc:72:a8:a2:c4:24:
                    b7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5F:44:62:7A:0C:EA:5F:C6:7C:50:D5:DE:4E:A3:A8:96:7A:08:BC
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/d502b60780c5fc7cf157e4e1d1002daf9b8d787c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.158.64/26

    Signature Algorithm: sha256WithRSAEncryption
         40:15:0f:f0:59:81:c3:22:6c:92:b9:9a:eb:90:72:17:8c:fb:
         54:5a:4b:56:49:2d:d4:ee:6a:c1:6b:55:69:d1:6b:e4:d3:cb:
         03:74:59:f4:41:fe:72:db:8f:91:47:f2:ce:23:de:a4:37:00:
         c1:5e:e1:80:c6:44:04:b0:10:2d:11:4a:4c:d5:d5:63:65:f0:
         09:66:30:79:c1:61:67:43:ad:d1:bb:c2:38:f9:fc:d9:1c:c2:
         09:b3:d2:b0:d9:36:b2:41:fa:72:2c:fe:93:b0:95:5a:7c:b1:
         78:6e:19:81:7c:fc:4f:71:b9:93:a8:13:4e:df:74:28:28:bb:
         a2:dd:30:68:13:19:6e:64:48:15:2e:5c:d8:66:19:3b:43:7c:
         1e:d4:64:2c:f1:fd:c8:79:14:a5:78:ba:bf:e6:c7:8a:2a:c8:
         c5:ea:56:32:c8:59:47:2f:d0:ad:6c:d7:37:2c:22:a7:c4:09:
         6d:9c:39:33:f0:69:13:6f:c9:73:80:3b:85:81:b3:c8:9d:4a:
         00:8a:9f:fa:a8:df:05:f7:8b:29:74:2f:1f:e4:69:6f:b8:c6:
         0a:28:98:a4:5b:91:87:2e:2f:04:b1:31:c4:03:ec:41:e9:4a:
         cd:41:72:9d:02:59:c8:e4:51:1f:20:70:96:ce:fc:d9:aa:a5:
         15:52:76:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----