Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/72ed73b753173b2b26a1b50c7a22804d650a0641.roa
File:                     72ed73b753173b2b26a1b50c7a22804d650a0641.roa (raw, json)
Hash identifier:          1JD28F8t07mcR2gCOlEd9VYCxBuDbhqM3OfGWDYxeLE=
Subject key identifier:   10:EB:E4:63:79:C3:24:C8:0B:04:B5:98:52:56:BC:4D:5B:F4:0F:16
Certificate issuer:       /CN=85d428ed766701b593558a22e1fc08c17acc6e27
Certificate serial:       02727E
Authority key identifier: 95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/72ed73b753173b2b26a1b50c7a22804d650a0641.roa
Signing time:             Tue 11 Jul 2023 17:41:15 +0000
ROA not before:           Mon 10 Jul 2023 17:41:15 +0000
ROA not after:            Fri 11 Jul 2025 17:41:15 +0000
asID:                     16629
IP address blocks:        190.82.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160382 (0x2727e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Validity
            Not Before: Jul 10 17:41:15 2023 GMT
            Not After : Jul 11 17:41:15 2025 GMT
        Subject: CN=72ed73b753173b2b26a1b50c7a22804d650a0641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:8a:63:79:fb:7e:f7:f3:cd:61:3d:71:1f:
                    ff:e5:25:97:9c:95:b9:51:da:f4:96:90:54:68:ed:
                    3c:3c:5c:9b:cc:84:a1:6e:98:5a:9a:cb:83:59:82:
                    90:1c:2c:20:ce:56:d3:2e:bb:21:d9:82:e1:7a:04:
                    d2:8d:61:ef:cc:0b:5b:e0:17:75:50:5f:fd:5c:c5:
                    e4:ee:e4:60:24:a9:33:9e:6a:b5:53:10:17:4f:4b:
                    b1:80:36:58:a7:fc:95:23:04:1d:9d:d6:3a:d6:73:
                    59:56:56:fc:37:3d:1d:87:ca:7a:89:75:e9:b9:3f:
                    80:5b:ea:b8:df:18:2b:d0:4b:d1:44:fe:20:a2:e3:
                    1d:2f:b6:8d:33:7e:ca:24:4d:e6:89:38:32:72:31:
                    68:31:9b:df:21:c1:15:40:66:b9:c2:0e:cc:99:24:
                    d5:78:f4:37:71:01:98:c1:bf:29:4b:36:2a:73:8b:
                    82:1e:f8:8b:86:9b:46:c2:66:14:87:04:34:49:62:
                    4c:cc:c8:b2:b4:87:19:49:55:cf:5b:4f:47:df:e3:
                    9d:e1:a1:ce:ec:9d:f1:f4:60:2b:8e:05:00:bc:45:
                    56:d6:99:40:9b:9a:f9:1e:f8:98:53:11:28:6e:95:
                    44:ac:bb:01:39:11:b1:8c:a5:7d:d4:a0:d5:a7:4d:
                    5a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:EB:E4:63:79:C3:24:C8:0B:04:B5:98:52:56:BC:4D:5B:F4:0F:16
            X509v3 Authority Key Identifier:
                keyid:95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/72ed73b753173b2b26a1b50c7a22804d650a0641.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.82.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         01:a3:60:a1:bc:48:ef:7f:ed:a5:fb:02:5b:b4:da:41:32:ad:
         ab:67:cf:f1:5c:e3:12:8f:8e:ad:ce:d6:48:8d:0b:43:f8:c5:
         aa:8a:37:23:cd:30:97:be:8b:93:fe:ee:ec:53:35:0c:ff:7f:
         0f:ec:2c:49:07:f4:72:e7:f8:b4:8e:33:0d:c7:e1:3d:dd:49:
         e7:29:81:39:86:a3:79:13:c4:ae:60:2e:b7:2a:de:e3:db:89:
         25:d8:10:45:1f:27:5b:df:65:06:4a:78:cf:bc:a4:e1:9b:74:
         74:e8:22:56:ae:42:b0:a0:ef:c6:0b:41:06:fe:78:27:b8:ad:
         38:c4:83:10:e9:66:fc:ec:b7:e3:e7:30:2f:2b:9a:af:e6:83:
         3f:e3:71:e5:72:be:2f:00:d6:ce:81:47:a4:a3:7a:6e:8f:ce:
         5b:de:d8:85:5a:70:48:09:b6:80:d3:49:10:c3:66:33:85:1c:
         d4:cb:ec:e3:be:8e:4c:b0:c9:37:fe:d6:67:83:1c:36:8c:59:
         1f:54:f6:47:ee:df:a5:4d:f0:6d:6b:73:4a:f1:8c:f6:2d:cc:
         c5:69:7a:55:10:bd:ef:b0:b1:02:0e:75:a2:48:f8:c5:e1:f5:
         59:ed:c0:63:a7:e6:a0:ed:8a:da:3b:5e:74:8e:dd:c1:a2:fa:
         19:d9:12:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----