Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/eb683931690f0a110a60a1187283a83bb68a6c80.roa
File:                     eb683931690f0a110a60a1187283a83bb68a6c80.roa (raw, json)
Hash identifier:          HDuVUX9QY+VrfPL4V6r+tjg/GYlBhXnlxJ9YQ/hcHb0=
Subject key identifier:   23:51:0E:35:C2:A2:56:06:40:18:82:60:8A:FB:67:CD:68:EC:AF:A7
Certificate issuer:       /CN=14544d678d65a7bfc793373410f1c5964d13b336
Certificate serial:       20AADF
Authority key identifier: 4B:16:E4:2F:F1:48:2A:05:9C:C2:6D:DB:CC:6F:FF:48:DA:6A:3D:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14544d678d65a7bfc793373410f1c5964d13b336.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/eb683931690f0a110a60a1187283a83bb68a6c80.roa
Signing time:             Mon 22 May 2023 18:44:57 +0000
ROA not before:           Sun 21 May 2023 18:44:57 +0000
ROA not after:            Thu 22 May 2025 18:44:57 +0000
asID:                     262196
IP address blocks:        190.4.112.0/20 maxlen: 25
                          181.118.208.0/20 maxlen: 25
                          190.184.240.0/20 maxlen: 30
                          168.121.208.0/22 maxlen: 25
                          2800:ab0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140895 (0x20aadf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14544d678d65a7bfc793373410f1c5964d13b336
        Validity
            Not Before: May 21 18:44:57 2023 GMT
            Not After : May 22 18:44:57 2025 GMT
        Subject: CN=eb683931690f0a110a60a1187283a83bb68a6c80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:bf:2c:45:97:01:6f:1d:b3:13:11:19:93:
                    4f:35:d9:b3:78:eb:64:be:f8:81:36:b7:1e:9e:52:
                    57:f4:9b:f6:7f:03:01:e4:42:9f:48:ab:4c:14:40:
                    1f:b1:f0:7a:c7:db:8a:35:a8:32:91:ca:2c:0b:dc:
                    f6:c4:aa:53:cb:77:51:22:24:21:16:34:2d:27:c8:
                    c3:14:3b:37:ec:a5:ff:26:fe:2a:23:c0:fd:30:42:
                    ad:23:d8:62:92:15:7f:2e:5b:7e:ad:c3:27:2b:2a:
                    67:4e:ad:76:c8:0d:f1:ad:ed:26:70:8d:81:8d:b7:
                    6c:41:5a:35:53:cc:2a:c5:24:14:48:74:2a:87:80:
                    51:42:88:28:aa:45:10:41:00:cb:96:e7:17:5a:64:
                    ba:a7:79:b5:00:1d:9c:b3:42:c4:4f:86:28:ce:53:
                    60:fe:67:46:1c:16:b9:57:3a:95:ce:ad:9a:50:14:
                    fd:bd:63:08:4f:c2:92:72:b5:c2:43:e8:ef:04:47:
                    93:45:0a:40:10:50:f6:77:48:00:42:95:c8:32:c5:
                    52:33:14:55:81:ca:8f:1d:47:ea:46:1c:7d:d3:61:
                    43:b4:8c:e7:b2:34:51:3b:9a:e9:31:8e:c8:33:f9:
                    0b:60:93:c9:f3:bd:dc:92:43:50:78:c9:e5:12:b2:
                    1d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:51:0E:35:C2:A2:56:06:40:18:82:60:8A:FB:67:CD:68:EC:AF:A7
            X509v3 Authority Key Identifier:
                keyid:4B:16:E4:2F:F1:48:2A:05:9C:C2:6D:DB:CC:6F:FF:48:DA:6A:3D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14544d678d65a7bfc793373410f1c5964d13b336.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/eb683931690f0a110a60a1187283a83bb68a6c80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ecbe054b-9dcd-4904-9881-b5c7153eb9a0/14544d678d65a7bfc793373410f1c5964d13b336.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.121.208.0/22
                  181.118.208.0/20
                  190.4.112.0/20
                  190.184.240.0/20
                IPv6:
                  2800:ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:76:d5:1b:5d:36:16:e1:9d:c3:30:6e:39:3b:75:83:45:2c:
         68:41:cd:28:30:dd:d4:86:6c:07:88:62:eb:13:2b:bf:8a:c5:
         b2:69:44:01:c0:52:45:41:da:02:a0:d7:05:ce:98:16:45:82:
         0c:10:81:05:54:ae:b6:40:69:78:41:fc:54:8f:4b:07:62:0f:
         ef:21:00:48:f8:12:4f:df:65:72:4c:e9:09:c1:83:12:48:63:
         64:a8:a2:41:0b:a6:e6:67:8c:98:e8:2f:38:a4:09:14:1b:86:
         7f:54:6f:12:f9:e4:e0:95:37:ba:25:f9:5f:05:64:ff:a1:67:
         37:2a:dc:33:87:c0:7d:01:23:3e:9f:ca:98:fa:6d:9f:d6:cc:
         4d:f9:73:52:83:e1:05:57:33:24:bb:d9:c4:d9:f2:f1:02:f2:
         f3:73:22:8c:a5:20:e1:b7:39:6a:9e:6d:92:b5:22:5a:f5:3b:
         e7:81:8c:8f:3c:87:a6:89:0b:d2:a6:5f:13:2f:7a:19:9e:b4:
         35:37:93:bc:9e:82:03:7f:0d:a5:ff:d0:fc:20:71:ef:37:d4:
         9a:91:f6:49:58:4b:67:7a:a2:b5:d9:67:7a:f0:c1:53:0e:3c:
         c9:46:7a:53:5a:1b:47:18:ec:16:3f:38:b5:73:6f:18:5d:af:
         fd:39:30:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----