Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/20eecfbe47f28af4b9573ac91e5ac93dcb3f7e51.roa
File:                     20eecfbe47f28af4b9573ac91e5ac93dcb3f7e51.roa (raw, json)
Hash identifier:          GUXH3ykmTYvUOOOXJRUWCwhD84JjowblTZZb3UuEEE4=
Subject key identifier:   8B:D1:BD:14:63:18:50:7C:DF:34:4C:F4:4B:7F:C1:23:D3:80:18:99
Certificate issuer:       /CN=419e23f1fa27160195e5e3ab407b2d1b2f418f98
Certificate serial:       248BBD
Authority key identifier: 2E:4A:34:D5:A8:74:62:61:36:DB:18:55:57:9C:12:AE:4F:1B:9C:1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/419e23f1fa27160195e5e3ab407b2d1b2f418f98.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/20eecfbe47f28af4b9573ac91e5ac93dcb3f7e51.roa
Signing time:             Thu 02 Nov 2023 11:48:00 +0000
ROA not before:           Thu 02 Nov 2023 11:47:58 +0000
ROA not after:            Sun 02 Nov 2025 11:47:58 +0000
asID:                     267801
IP address blocks:        190.122.86.24/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2395069 (0x248bbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=419e23f1fa27160195e5e3ab407b2d1b2f418f98
        Validity
            Not Before: Nov  2 11:47:58 2023 GMT
            Not After : Nov  2 11:47:58 2025 GMT
        Subject: CN=20eecfbe47f28af4b9573ac91e5ac93dcb3f7e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:23:9e:ec:2c:4c:f6:55:85:91:9c:f6:75:
                    e9:f5:d3:8c:44:63:30:0b:25:57:41:c6:7e:6d:7f:
                    98:bb:6f:95:b7:eb:4d:e0:bc:4b:93:34:8c:60:97:
                    09:1d:41:12:2e:59:bc:6a:12:b2:e2:53:eb:32:cf:
                    f4:d3:b2:60:cc:57:97:dc:80:88:77:fc:82:c4:de:
                    de:60:6d:0b:f3:1e:d8:b8:f9:c6:41:00:74:c6:dd:
                    82:4a:a9:fe:9d:28:9a:fb:61:11:a9:72:0e:ec:7d:
                    04:07:60:a4:e4:5a:e1:60:da:b4:91:29:32:d2:2c:
                    39:61:18:d6:27:36:a1:a7:dd:fb:58:a6:2d:3e:49:
                    48:19:6e:a7:66:9c:f0:70:51:3e:94:ab:0e:16:03:
                    3d:aa:a9:7b:c7:f2:3e:0f:71:89:18:49:ce:de:29:
                    f9:aa:77:dd:52:ac:d7:cc:a2:30:c5:02:8d:6f:5d:
                    25:a8:dd:1e:94:ac:bc:17:bc:27:fb:2c:03:86:9f:
                    61:fd:ad:18:fe:0e:c1:15:c5:fe:81:00:79:3d:82:
                    96:17:26:06:98:72:30:83:c7:f6:e6:3d:5d:b3:ba:
                    7a:e5:b1:16:a4:bb:44:14:6c:87:65:f2:49:49:4a:
                    5a:aa:3e:f4:0d:9f:f9:f2:ca:e3:b9:c0:1e:6b:fc:
                    b2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D1:BD:14:63:18:50:7C:DF:34:4C:F4:4B:7F:C1:23:D3:80:18:99
            X509v3 Authority Key Identifier:
                keyid:2E:4A:34:D5:A8:74:62:61:36:DB:18:55:57:9C:12:AE:4F:1B:9C:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/419e23f1fa27160195e5e3ab407b2d1b2f418f98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/20eecfbe47f28af4b9573ac91e5ac93dcb3f7e51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/419e23f1fa27160195e5e3ab407b2d1b2f418f98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.86.24/29

    Signature Algorithm: sha256WithRSAEncryption
         27:98:63:ce:26:9a:bf:14:cb:00:fc:04:51:66:f1:30:07:3f:
         b9:65:9c:3e:18:dd:be:09:53:98:7e:c7:87:d1:4d:cb:aa:86:
         0c:d5:1d:d8:67:62:0b:fd:7c:c4:99:13:a7:0a:a3:33:e3:c5:
         0f:0a:5c:4d:c7:7b:eb:04:16:0d:d5:07:c7:26:9d:99:50:d4:
         c2:00:2d:e5:30:22:37:9d:51:f8:c3:49:a4:8a:8d:ca:5c:1d:
         61:a6:56:89:2f:de:50:9f:ff:10:93:7f:13:e0:7c:8f:52:8d:
         08:0a:11:8b:c1:79:8f:1c:6e:6e:72:55:53:96:af:a7:7e:01:
         64:ad:44:7b:27:7a:67:75:e5:84:a6:4d:83:90:74:c6:cf:7b:
         c6:52:c8:9d:4c:72:73:4f:1d:3b:dd:b6:64:ac:58:70:6f:55:
         54:52:0d:81:72:75:7b:d3:08:a8:c9:a5:40:f8:51:25:b4:97:
         8c:e6:51:de:0b:60:47:1d:fb:6a:54:e2:19:a3:50:8b:fd:96:
         d3:36:9a:5d:b7:0b:57:fa:71:ad:e5:52:05:a0:38:0a:9a:9a:
         9a:8c:bc:a5:48:a7:32:73:8b:22:dd:21:3f:c9:3c:ab:df:d0:
         4c:c9:7a:cf:c6:04:db:38:1f:20:94:25:4d:2b:b8:b8:97:21:
         ab:b0:d2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----