Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8505b2e-d551-4bb4-ac38-d73190ddd042/66c46d29a5c3e1cde7ed830044c294ab62e946b0.roa
File:                     66c46d29a5c3e1cde7ed830044c294ab62e946b0.roa (raw, json)
Hash identifier:          qoGxKDwDBS2fZF1fcN89SFoQu/Gfp6ULzprjfmo8moU=
Subject key identifier:   83:66:3C:BF:BC:6F:B1:0A:5A:88:75:D4:FC:D1:37:25:7F:ED:DE:64
Certificate issuer:       /CN=fc0902c352b2ee3261e7d4fe14bf2bbc99cf7a7a
Certificate serial:       126AA0
Authority key identifier: FF:54:7C:01:25:C8:B7:3D:B3:7D:4C:DF:B2:F0:4B:5A:21:40:AD:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc0902c352b2ee3261e7d4fe14bf2bbc99cf7a7a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e8505b2e-d551-4bb4-ac38-d73190ddd042/66c46d29a5c3e1cde7ed830044c294ab62e946b0.roa
Signing time:             Fri 28 Jul 2023 08:30:00 +0000
ROA not before:           Thu 27 Jul 2023 08:30:00 +0000
ROA not after:            Sat 26 Jul 2025 08:30:00 +0000
asID:                     271883
IP address blocks:        190.113.36.0/22 maxlen: 24
                          2803:bc10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206944 (0x126aa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc0902c352b2ee3261e7d4fe14bf2bbc99cf7a7a
        Validity
            Not Before: Jul 27 08:30:00 2023 GMT
            Not After : Jul 26 08:30:00 2025 GMT
        Subject: CN=66c46d29a5c3e1cde7ed830044c294ab62e946b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:87:d5:47:a1:fc:bb:5a:b0:dc:35:ee:10:f6:
                    95:6d:48:65:fa:fd:ea:39:47:dd:23:e0:8e:6d:43:
                    d1:9d:ad:a7:fd:34:79:9e:5e:03:06:20:73:2f:93:
                    d6:df:d5:d9:ab:9f:6b:c8:9c:84:23:8e:72:dd:82:
                    1e:61:14:fe:43:c2:93:e3:2c:ec:f9:65:d6:d8:20:
                    80:24:0d:00:25:38:b5:35:51:19:88:5c:fe:80:7b:
                    31:06:77:0e:5a:62:7b:88:85:de:f6:86:6a:f4:69:
                    41:d7:e5:bf:51:12:1c:15:53:f2:b3:ef:c6:4b:92:
                    13:d0:ef:01:4d:ac:04:07:fb:59:76:81:1a:1e:0c:
                    f8:fe:f0:76:f4:26:45:55:26:5d:ad:7f:07:eb:f1:
                    df:dc:a6:ff:2c:3d:86:1a:26:f6:59:f8:a9:32:c7:
                    3a:55:0d:31:8a:12:59:a1:74:c6:b7:01:71:be:76:
                    31:b4:7e:13:4c:e5:66:a4:d0:5e:c4:f8:a6:f1:4d:
                    c8:58:4d:f4:82:e3:31:cb:e3:ce:4e:a7:3a:d7:7d:
                    d1:05:c9:4a:2e:31:cc:50:87:cf:41:f2:ab:ff:16:
                    59:c4:58:64:b8:e8:e4:da:c9:9a:a0:72:36:dc:28:
                    9a:0a:a7:c2:cd:f2:e0:27:fe:1f:cf:be:ae:45:a3:
                    a0:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:66:3C:BF:BC:6F:B1:0A:5A:88:75:D4:FC:D1:37:25:7F:ED:DE:64
            X509v3 Authority Key Identifier:
                keyid:FF:54:7C:01:25:C8:B7:3D:B3:7D:4C:DF:B2:F0:4B:5A:21:40:AD:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc0902c352b2ee3261e7d4fe14bf2bbc99cf7a7a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8505b2e-d551-4bb4-ac38-d73190ddd042/66c46d29a5c3e1cde7ed830044c294ab62e946b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e8505b2e-d551-4bb4-ac38-d73190ddd042/fc0902c352b2ee3261e7d4fe14bf2bbc99cf7a7a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.36.0/22
                IPv6:
                  2803:bc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:06:be:b5:09:ec:1f:3c:35:a7:a8:cd:64:ef:2f:96:ae:0a:
         c6:e6:a3:58:fb:27:19:a1:7b:4b:cd:44:54:8a:c6:7c:2b:5c:
         a2:c4:ba:12:e0:f8:ad:9f:f2:c7:91:82:c1:b7:12:c4:e0:ae:
         6a:a1:89:05:6c:13:c9:dd:1b:e3:c4:c5:bc:3d:ac:a8:83:8e:
         42:54:3e:5a:94:e6:3b:25:9e:62:c6:0d:cd:be:10:73:01:f5:
         76:50:5c:de:13:61:98:78:69:b6:a5:db:7d:52:69:7c:a6:ff:
         f3:3b:62:b2:d8:b1:93:93:83:4c:cf:c7:41:62:10:cb:4b:df:
         8d:06:72:30:b1:9c:0b:67:e3:17:ad:e5:a6:2f:c1:f2:1d:67:
         f6:a0:41:11:ea:09:b9:98:25:db:40:73:cb:b8:e2:b5:ce:f1:
         f9:ee:d8:ad:f6:34:4c:68:ed:38:79:cb:e8:38:e9:d5:0b:01:
         05:7d:5f:46:61:4b:a0:76:a9:33:ac:fc:ad:95:c9:ea:49:f9:
         15:8a:e2:ca:4f:a2:a3:1f:9e:87:0e:c6:e5:91:2e:e3:d5:9e:
         93:8b:74:e2:d2:2e:01:06:61:a0:7b:e7:7e:db:c7:4b:0d:8b:
         3a:33:02:03:af:4c:5d:83:eb:97:5f:22:67:99:82:7d:2d:f3:
         ad:92:60:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----