Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2af7cee6-f2a7-4137-8cf1-f51c58e4d7d6/542d34f5cd21061f2bd683bea9079a86a474dfb1.roa
File:                     542d34f5cd21061f2bd683bea9079a86a474dfb1.roa (raw, json)
Hash identifier:          PW57KY6UycysjPqHg9EKDMUX/TE4FgjWv504trSUrbE=
Subject key identifier:   0A:22:76:DF:DE:32:4B:D4:75:20:47:77:61:5C:AF:84:4B:E6:2B:29
Certificate issuer:       /CN=0d3fd40f1570dd6e7ef4b855d45ec68703ec8cb2
Certificate serial:       1445FB
Authority key identifier: 23:0C:88:03:8A:F4:DE:38:2C:6C:59:D6:5B:FE:FF:E0:74:3D:73:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d3fd40f1570dd6e7ef4b855d45ec68703ec8cb2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2af7cee6-f2a7-4137-8cf1-f51c58e4d7d6/542d34f5cd21061f2bd683bea9079a86a474dfb1.roa
Signing time:             Tue 03 Oct 2023 08:30:01 +0000
ROA not before:           Mon 02 Oct 2023 08:30:01 +0000
ROA not after:            Wed 01 Oct 2025 08:30:01 +0000
asID:                     263735
IP address blocks:        181.177.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1328635 (0x1445fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3fd40f1570dd6e7ef4b855d45ec68703ec8cb2
        Validity
            Not Before: Oct  2 08:30:01 2023 GMT
            Not After : Oct  1 08:30:01 2025 GMT
        Subject: CN=542d34f5cd21061f2bd683bea9079a86a474dfb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:11:7c:74:00:94:f1:0c:ff:9b:01:46:99:
                    8d:40:f2:20:70:e5:e1:a9:ef:5a:a8:40:8e:7c:9b:
                    b9:5a:67:9a:6d:41:cf:3f:4c:55:86:ed:a8:d6:df:
                    33:29:9a:7a:90:12:e0:4d:18:8c:d7:ea:db:6e:ae:
                    dc:e9:73:5f:4e:28:e4:69:0d:be:f6:dc:4d:d9:09:
                    d0:65:cf:51:77:d7:a0:f1:23:ba:18:60:7e:35:e1:
                    07:93:b9:24:d7:a7:0a:2a:bb:52:c5:24:bb:c4:95:
                    5c:01:be:d6:b1:e9:d8:4e:4c:6d:69:0e:0a:e2:71:
                    ad:03:75:6e:c7:a4:f2:87:10:71:c6:2d:30:10:85:
                    28:7e:37:35:59:d0:32:29:bc:5e:6b:27:9b:a1:e5:
                    3e:ad:8c:76:eb:bb:95:df:27:f3:bb:7e:11:33:0d:
                    b3:24:66:4a:02:38:cf:99:2e:c2:4e:1d:85:87:99:
                    76:87:5f:6e:21:73:88:c8:bf:18:59:43:db:dc:c6:
                    5a:32:c8:27:e6:d1:c3:6f:ab:40:b6:5b:f9:8f:c0:
                    23:7a:9f:1e:0c:b2:ae:f9:55:37:32:e0:a6:23:3a:
                    14:e2:17:7b:2c:40:33:ff:d6:a0:3f:f0:5b:6e:7a:
                    61:7b:1b:70:37:0a:9a:dd:02:94:df:0d:bf:79:40:
                    7b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:22:76:DF:DE:32:4B:D4:75:20:47:77:61:5C:AF:84:4B:E6:2B:29
            X509v3 Authority Key Identifier:
                keyid:23:0C:88:03:8A:F4:DE:38:2C:6C:59:D6:5B:FE:FF:E0:74:3D:73:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d3fd40f1570dd6e7ef4b855d45ec68703ec8cb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2af7cee6-f2a7-4137-8cf1-f51c58e4d7d6/542d34f5cd21061f2bd683bea9079a86a474dfb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2af7cee6-f2a7-4137-8cf1-f51c58e4d7d6/0d3fd40f1570dd6e7ef4b855d45ec68703ec8cb2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.177.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         37:a8:97:b8:61:e8:1f:95:96:f1:b9:f9:f2:75:5f:02:5c:22:
         75:ec:cd:22:44:4d:8d:32:6e:aa:07:e0:19:e9:f3:73:a3:60:
         32:50:24:6d:c2:09:44:3a:9b:66:11:d7:4e:81:eb:a4:12:3d:
         bb:0e:c9:97:b2:13:63:95:04:00:27:0b:16:0e:60:17:a3:2a:
         bb:fa:db:eb:6b:db:c3:2b:b7:30:eb:8c:96:76:17:aa:63:f7:
         63:49:1e:32:68:5a:3c:8b:49:0c:0e:45:4c:0c:40:83:ab:77:
         76:a7:35:d9:b1:0b:20:61:f3:59:f9:2b:7b:3e:f6:7e:9c:d7:
         67:ff:ce:ed:9a:d3:d6:ff:23:a6:5a:69:be:4c:46:25:9d:d3:
         85:0b:0b:b0:f8:05:6c:56:6c:e8:5f:2d:31:23:a1:60:50:a2:
         6f:ea:5c:c6:c2:f5:9e:34:5c:e2:90:7c:73:c9:be:9b:78:f7:
         e8:12:19:fe:ee:94:57:06:8f:7a:43:30:fc:3f:f8:a1:df:cf:
         6c:dd:f2:92:7e:75:09:2d:8a:e9:15:e5:0f:8e:b4:02:f8:ff:
         ff:c5:fe:93:f9:b3:1f:90:ab:19:0c:b8:4f:b3:3e:14:f1:5d:
         e5:78:5e:32:aa:ef:db:2a:19:2f:46:e7:83:3c:9c:41:47:cd:
         66:14:4d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----