Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/0e0ea7737d34c1b213876199d65e5d22141a6f77.roa
File:                     0e0ea7737d34c1b213876199d65e5d22141a6f77.roa (raw, json)
Hash identifier:          7czUpTkRLWBefVGwaguQEBDKIh8sdmTrJJCI7rqJL04=
Subject key identifier:   13:90:45:2B:5A:A2:54:12:A5:4D:D8:00:E0:9C:81:AF:8E:F6:71:74
Certificate issuer:       /CN=513674dcb37b91021affeddf80ef34c924423627
Certificate serial:       2012B7
Authority key identifier: 9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/0e0ea7737d34c1b213876199d65e5d22141a6f77.roa
Signing time:             Tue 16 May 2023 22:02:48 +0000
ROA not before:           Mon 15 May 2023 22:02:48 +0000
ROA not after:            Fri 16 May 2025 22:02:48 +0000
asID:                     52392
IP address blocks:        190.99.120.0/21 maxlen: 24
                          2803:b100::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101943 (0x2012b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=513674dcb37b91021affeddf80ef34c924423627
        Validity
            Not Before: May 15 22:02:48 2023 GMT
            Not After : May 16 22:02:48 2025 GMT
        Subject: CN=0e0ea7737d34c1b213876199d65e5d22141a6f77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9d:d2:11:e9:1f:ff:fd:1c:5a:3c:5b:fe:82:
                    a5:96:60:98:c2:05:0f:5c:d4:88:a9:b0:e1:b6:5b:
                    21:c9:87:15:98:3e:c4:63:99:69:fc:f9:d5:0f:8b:
                    29:a9:20:02:2c:29:e9:6b:c6:4b:91:16:9b:75:1b:
                    18:ff:32:b4:4a:df:b7:0a:87:9b:3a:e1:06:fb:37:
                    8c:cc:2f:90:76:83:6f:09:8c:66:12:71:89:3a:88:
                    0f:f4:24:8c:c9:df:0b:d0:63:e5:26:6d:2a:02:a7:
                    11:8e:03:d1:cb:b0:68:d8:5c:e2:63:fd:5d:28:b7:
                    23:eb:b3:36:b3:5f:5d:6f:a9:ad:4c:fc:6d:b9:fa:
                    65:8b:57:08:f2:34:12:87:78:4b:8c:88:66:f8:fb:
                    d1:b4:c8:5a:8c:b2:6e:4a:57:4c:2b:4f:d8:3b:21:
                    c7:db:b9:b9:61:56:3c:b6:f9:ed:06:7a:ac:3d:5a:
                    3b:7b:f1:22:6f:41:4a:af:45:07:a9:68:b7:d1:93:
                    a4:cb:d8:6b:74:a0:b3:1d:c9:94:37:cf:32:41:a1:
                    ea:3a:b9:85:40:7b:8f:bc:f5:f4:42:54:34:30:1b:
                    a4:b5:25:10:46:64:f1:05:bf:f8:17:ef:cf:78:4d:
                    a1:9b:cc:5d:36:99:1e:79:eb:9e:db:22:8b:e1:42:
                    72:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:90:45:2B:5A:A2:54:12:A5:4D:D8:00:E0:9C:81:AF:8E:F6:71:74
            X509v3 Authority Key Identifier:
                keyid:9F:E6:C0:E0:F8:DA:C2:C4:1C:8C:4B:EB:A3:50:E5:2F:18:25:70:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/513674dcb37b91021affeddf80ef34c924423627.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/0e0ea7737d34c1b213876199d65e5d22141a6f77.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f9ccdc2b-06fd-4a24-bd36-95456f80951c/513674dcb37b91021affeddf80ef34c924423627.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.120.0/21
                IPv6:
                  2803:b100::/32

    Signature Algorithm: sha256WithRSAEncryption
         01:7a:9a:38:b4:a2:4b:a8:8f:97:f8:41:87:51:cf:de:ba:da:
         b7:e1:98:be:a1:49:91:59:63:cc:1d:aa:cb:65:14:4d:49:45:
         7a:75:ae:6f:f9:f8:0a:5f:37:59:e7:c1:79:84:19:50:97:3e:
         27:09:49:af:71:30:89:66:62:ab:78:09:1b:9a:a5:b9:99:fb:
         26:3f:c4:c7:65:20:dd:8e:9a:cb:60:63:e9:02:74:c3:82:78:
         aa:99:98:f2:83:17:b2:69:cd:74:b1:c1:12:a1:0a:b4:07:6c:
         b7:ff:6d:27:6e:1a:08:0a:b8:6c:37:54:8c:87:99:c3:11:8b:
         85:cc:44:97:24:36:f0:a4:d9:4b:c7:fc:66:73:56:6c:ac:b8:
         83:c2:47:19:13:0d:ed:2f:29:8b:5c:8a:58:52:9a:f0:fb:47:
         92:19:22:89:dd:09:13:9d:b6:60:84:42:b0:77:dd:eb:70:8b:
         66:71:a5:f5:ec:e3:7f:2c:7f:b9:54:9d:a9:ff:e8:eb:02:07:
         da:2a:20:86:66:db:f0:81:1a:c1:9c:72:82:02:37:24:82:b9:
         44:ef:20:92:cf:41:e5:45:92:3a:83:50:fe:03:da:53:7c:f3:
         33:d8:03:ee:88:51:67:72:e7:6f:69:a3:28:80:64:a9:b5:cf:
         af:54:8e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----