Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/d9d2f08be3b4fd850f22185661ce041a85b48143.roa
File:                     d9d2f08be3b4fd850f22185661ce041a85b48143.roa (raw, json)
Hash identifier:          uqQC5uKFPU9ReDkmKfGxDNQFFkXdeTQv10wWaLBEWMw=
Subject key identifier:   22:43:A2:0B:04:6A:FE:6A:DE:B6:A3:E7:DC:AD:9C:B7:F1:71:C5:09
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       19B1C1
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/d9d2f08be3b4fd850f22185661ce041a85b48143.roa
Signing time:             Wed 08 Jun 2022 16:16:16 +0000
ROA not before:           Wed 08 Jun 2022 03:00:00 +0000
ROA not after:            Wed 31 Dec 2025 03:00:00 +0000
asID:                     19047
IP address blocks:        190.98.158.64/26 maxlen: 26

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683905 (0x19b1c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Jun  8 03:00:00 2022 GMT
            Not After : Dec 31 03:00:00 2025 GMT
        Subject: CN=d9d2f08be3b4fd850f22185661ce041a85b48143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:33:bb:5b:77:d8:92:7e:dd:16:55:dc:62:d1:
                    ab:26:43:56:74:bc:57:6d:c2:4e:70:80:da:79:1e:
                    2d:6f:25:59:11:ab:f9:55:cd:c8:1a:63:e3:5c:fa:
                    a3:5c:8e:e0:f4:e7:96:39:b1:0b:ce:02:f5:e1:ef:
                    2a:67:7a:8f:c8:9a:8c:27:f7:8b:f9:b3:7d:bf:e2:
                    22:7a:b7:cf:02:a3:73:17:f4:ce:cb:b0:4f:fe:7e:
                    9a:fd:16:06:76:6c:ef:5e:5c:82:75:a8:f4:0a:32:
                    8b:19:3d:f1:68:c9:3e:d8:8c:5d:92:81:34:16:3e:
                    ff:e3:71:7f:a3:73:59:ca:a2:5e:97:29:ff:da:12:
                    f2:27:79:ed:57:e5:2b:92:6c:77:ef:5f:e8:84:ab:
                    85:de:62:9e:02:ce:86:72:68:de:ca:8c:79:e5:e4:
                    30:52:06:ed:cf:4f:d2:05:d5:b4:87:f9:2f:3d:ce:
                    38:97:04:11:8d:b3:3f:1c:b9:66:35:a0:eb:da:3a:
                    ee:9a:ce:10:11:08:26:cb:79:4d:e0:bc:b6:65:36:
                    bd:91:84:8f:b7:ee:95:91:90:6c:6d:53:a1:b8:5f:
                    a7:1b:9a:1a:34:fc:80:ac:48:63:ce:5e:1e:74:4b:
                    b4:96:24:62:12:8f:0c:54:ce:de:fd:6c:a4:1c:f4:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:43:A2:0B:04:6A:FE:6A:DE:B6:A3:E7:DC:AD:9C:B7:F1:71:C5:09
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/d9d2f08be3b4fd850f22185661ce041a85b48143.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.98.158.64/26

    Signature Algorithm: sha256WithRSAEncryption
         00:e4:79:f1:43:3a:75:91:fc:a7:3d:be:47:98:06:f3:42:9a:
         2d:bf:71:6d:b2:f6:78:da:8e:d0:23:83:14:f8:bb:91:0b:05:
         b0:40:93:33:35:3c:05:38:46:61:c2:94:7b:88:e1:a7:fc:4d:
         d0:63:40:63:54:b0:4e:0f:a1:af:52:f0:53:db:62:b2:b6:fc:
         23:18:d1:7c:68:00:4f:9f:dd:b0:a8:e3:a3:f5:c5:01:45:1e:
         c4:74:4f:8b:d0:74:bf:05:13:e4:b0:bf:35:13:96:9b:60:4a:
         7d:a2:88:3e:db:61:7b:11:75:22:e1:9d:a4:e8:9e:44:54:ce:
         3d:46:d5:09:31:d5:2b:14:e2:9d:ae:9f:d3:ff:3b:41:2a:d2:
         87:19:00:70:5e:3f:0a:97:57:f1:f7:74:20:a3:31:8e:d6:28:
         cf:4a:37:2b:09:c7:83:e3:71:4b:20:08:4f:fc:25:f6:b4:5a:
         3e:95:f0:97:ca:60:72:21:5f:97:4a:b5:da:4d:77:03:31:78:
         ba:8d:f3:31:5a:ae:e6:50:4d:ba:a7:06:ee:bf:86:c6:c4:02:
         90:a4:db:f0:4b:f7:42:e1:ab:3b:13:aa:ad:a2:9c:3d:7d:e7:
         d0:a5:45:c7:44:ec:d2:63:18:e0:de:61:53:3e:cb:3b:ae:99:
         17:5b:35:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----