Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f4a35926-d1d7-4419-9690-2e430865b915/04319ba5219762ce05fa271a57adf76bbea16266.roa
File:                     04319ba5219762ce05fa271a57adf76bbea16266.roa (raw, json)
Hash identifier:          EOgYzWqSE3CVtyvs4roq9pI/dfFmcRk+eGhhgPRRU3M=
Subject key identifier:   78:C0:8A:09:D3:91:A7:C0:D5:B6:55:87:EA:B6:DA:54:B4:D2:A9:05
Certificate issuer:       /CN=c02996cfafbf597cdf1662fcee796dc71c21e621
Certificate serial:       157BBA
Authority key identifier: 74:4E:42:36:4C:23:AC:73:B4:91:B0:BE:E5:6B:FC:77:4F:42:4D:85
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02996cfafbf597cdf1662fcee796dc71c21e621.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f4a35926-d1d7-4419-9690-2e430865b915/04319ba5219762ce05fa271a57adf76bbea16266.roa
Signing time:             Tue 09 May 2023 14:11:29 +0000
ROA not before:           Mon 08 May 2023 14:11:29 +0000
ROA not after:            Fri 09 May 2025 14:11:29 +0000
asID:                     263689
IP address blocks:        190.103.180.0/22 maxlen: 24
                          2800:c90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407930 (0x157bba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c02996cfafbf597cdf1662fcee796dc71c21e621
        Validity
            Not Before: May  8 14:11:29 2023 GMT
            Not After : May  9 14:11:29 2025 GMT
        Subject: CN=04319ba5219762ce05fa271a57adf76bbea16266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:55:b4:c6:ac:5e:4f:6f:b6:48:8e:4b:4b:ee:
                    28:e5:56:34:ab:1e:fd:62:cb:ee:ed:88:4b:57:0c:
                    5f:6c:99:6a:bb:b7:76:66:37:18:fa:d2:1a:c1:3b:
                    ae:95:fd:80:2f:d8:61:71:42:68:8f:31:f0:0d:0f:
                    df:55:c1:e4:7b:fe:76:4a:34:b5:5b:ab:ad:39:d5:
                    1c:6d:c4:c1:e0:50:5e:88:05:36:0f:75:a6:04:da:
                    f7:21:ff:c5:38:3c:4f:f9:45:95:9e:e8:63:73:cd:
                    fa:1a:b8:82:2d:1f:8a:5e:91:49:f7:f1:1b:72:b9:
                    84:d8:2f:dd:85:e8:fd:1c:45:b3:3d:07:f7:c8:98:
                    4f:5e:68:72:ff:7b:26:20:b5:68:d6:38:aa:97:f6:
                    6d:33:60:1d:dd:99:bb:a9:26:3b:86:ee:73:d1:cf:
                    25:b4:91:0e:d0:c7:52:c3:8b:c8:0c:b1:1c:a0:96:
                    8b:6c:03:5f:c9:58:48:72:fe:9c:c3:c2:79:78:e2:
                    59:ef:20:73:0d:b6:c5:7c:b2:35:3b:29:e1:70:b7:
                    96:c8:f6:05:91:25:5b:4f:bd:08:ae:db:24:e2:b4:
                    71:53:33:16:fb:65:83:96:2c:ac:12:40:6f:8d:fd:
                    ad:4a:dc:bc:b2:51:c8:35:0a:a6:c5:26:c2:64:60:
                    4c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C0:8A:09:D3:91:A7:C0:D5:B6:55:87:EA:B6:DA:54:B4:D2:A9:05
            X509v3 Authority Key Identifier:
                keyid:74:4E:42:36:4C:23:AC:73:B4:91:B0:BE:E5:6B:FC:77:4F:42:4D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c02996cfafbf597cdf1662fcee796dc71c21e621.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f4a35926-d1d7-4419-9690-2e430865b915/04319ba5219762ce05fa271a57adf76bbea16266.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f4a35926-d1d7-4419-9690-2e430865b915/c02996cfafbf597cdf1662fcee796dc71c21e621.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.180.0/22
                IPv6:
                  2800:c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:c6:dd:d2:5c:13:fc:7d:e4:60:bb:a4:e8:0f:d6:f4:00:f9:
         0c:93:65:e3:3f:31:bc:4d:8c:97:b0:f2:95:c6:c6:59:56:2d:
         5e:53:82:a5:a0:dd:e4:7c:24:5c:ea:25:ac:05:dd:bd:ae:fa:
         0a:00:d9:9d:fe:a4:61:d6:95:53:37:b5:98:91:82:ca:12:b5:
         cd:64:bc:06:89:08:bf:2b:cb:4d:59:de:1d:27:92:1c:b5:a9:
         df:87:b5:3c:8c:f5:fc:04:33:55:8d:f6:c3:c4:86:97:3b:d4:
         59:1b:19:89:37:35:e7:30:60:9d:f5:78:43:69:0b:d2:54:0e:
         d7:0d:1e:5d:e8:ed:61:cd:9b:60:d5:59:a4:3b:7a:de:66:77:
         de:e2:ae:cb:9f:d0:5e:2c:47:db:36:c9:26:3a:3b:a1:2f:18:
         8a:15:68:8a:41:dc:30:39:85:20:62:20:a0:94:92:5a:eb:9c:
         c0:95:54:cd:2d:c9:df:d6:d2:25:9b:41:ba:fb:65:64:04:4c:
         c3:25:67:6a:ce:29:21:45:49:36:a3:d8:e0:50:37:62:58:d1:
         19:25:bf:cf:00:ff:72:7c:05:fd:d8:e4:c8:3a:ad:7a:59:4f:
         d1:9a:30:4b:56:88:32:1c:98:f7:90:95:11:ec:a8:d2:bf:4d:
         12:fb:91:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----