Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2b2df1e4-2c38-4582-8528-510ee2aba172/936c2233c9c7b06f5287fe7596c34084123bf8c7.roa
File:                     936c2233c9c7b06f5287fe7596c34084123bf8c7.roa (raw, json)
Hash identifier:          geZOcENKkpIezW/dzq5lbY+YJL2Hjq4aNJbfjttPTao=
Subject key identifier:   8A:F6:F7:68:C8:76:12:8A:D9:AF:ED:A8:B9:50:37:79:72:4D:FF:6E
Certificate issuer:       /CN=75106661aec2a1cccb2594df0d35b08ae18c5df3
Certificate serial:       11BD5E
Authority key identifier: 5A:78:5C:33:B5:4C:4E:6B:82:60:A7:19:4D:DF:9D:BE:8B:96:36:D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75106661aec2a1cccb2594df0d35b08ae18c5df3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2b2df1e4-2c38-4582-8528-510ee2aba172/936c2233c9c7b06f5287fe7596c34084123bf8c7.roa
Signing time:             Sat 17 Feb 2024 07:30:00 +0000
ROA not before:           Sat 17 Feb 2024 07:30:00 +0000
ROA not after:            Mon 16 Feb 2026 07:30:00 +0000
asID:                     272035
IP address blocks:        181.232.255.0/24 maxlen: 24
                          2803:d10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162590 (0x11bd5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75106661aec2a1cccb2594df0d35b08ae18c5df3
        Validity
            Not Before: Feb 17 07:30:00 2024 GMT
            Not After : Feb 16 07:30:00 2026 GMT
        Subject: CN=936c2233c9c7b06f5287fe7596c34084123bf8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ed:79:0b:35:d3:94:a8:bf:61:c9:1e:43:bb:
                    bf:33:24:24:4a:de:1c:f6:fb:31:90:e2:5d:59:6a:
                    1d:22:71:7a:ee:6a:89:a8:2c:87:a0:a4:38:0b:3b:
                    97:84:31:80:e0:c7:f9:65:6f:37:71:61:fb:50:c6:
                    ba:c2:92:2c:54:7c:82:a8:3f:b5:8a:2d:bd:de:43:
                    a0:60:3c:8f:5c:c5:2a:9b:e6:ff:22:f9:f6:a5:74:
                    85:ef:72:b7:4b:4d:6d:43:4a:b1:1e:88:95:6c:7c:
                    da:b7:a2:ab:bb:ff:f3:15:db:2a:b5:0e:55:bd:db:
                    1d:c1:be:0a:c4:8c:1c:78:d8:e9:8d:d7:52:12:39:
                    f0:3f:41:4b:f0:d9:d2:e3:a1:fa:45:d5:37:a9:08:
                    b5:5e:2e:67:85:99:01:21:72:09:7e:4c:d4:50:f4:
                    37:36:dc:ed:92:7d:4c:03:c1:ef:e2:1e:59:4a:f3:
                    32:ed:4a:d9:0f:ba:cf:5f:4a:5d:95:a7:29:c2:27:
                    07:37:34:d6:c9:f6:62:c3:24:f6:59:45:4d:f9:1e:
                    f5:f4:6b:c2:37:33:5f:2e:58:66:d6:60:62:16:33:
                    d6:a7:a8:b4:2a:11:15:ea:28:e0:9c:58:41:67:36:
                    85:d8:6e:be:36:2b:dc:0e:ea:97:23:93:23:14:4e:
                    ec:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:F6:F7:68:C8:76:12:8A:D9:AF:ED:A8:B9:50:37:79:72:4D:FF:6E
            X509v3 Authority Key Identifier:
                keyid:5A:78:5C:33:B5:4C:4E:6B:82:60:A7:19:4D:DF:9D:BE:8B:96:36:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75106661aec2a1cccb2594df0d35b08ae18c5df3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2b2df1e4-2c38-4582-8528-510ee2aba172/936c2233c9c7b06f5287fe7596c34084123bf8c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2b2df1e4-2c38-4582-8528-510ee2aba172/75106661aec2a1cccb2594df0d35b08ae18c5df3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.255.0/24
                IPv6:
                  2803:d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:37:8e:14:c8:6d:22:bc:ca:23:8e:44:4c:98:63:f8:db:54:
         e3:16:de:e2:55:59:20:cf:bb:9a:e9:e6:95:c1:48:a8:5d:50:
         79:66:6b:6e:71:75:f4:32:e4:e0:33:71:1e:37:f6:7c:2f:39:
         1b:49:70:d0:cd:b2:df:ef:df:33:32:54:37:ae:e0:3a:09:4f:
         aa:7c:7f:9b:96:76:2f:6c:5c:93:5d:16:57:48:f8:31:7a:84:
         02:02:7f:db:86:6a:8e:40:e6:e6:c4:38:38:e1:18:b8:0b:7d:
         37:15:a1:c6:73:c1:87:3c:68:c7:3b:c4:ba:bc:11:aa:55:4d:
         bb:76:f7:ee:0a:a3:10:15:98:64:73:ab:b6:18:e2:b3:ab:50:
         f7:98:a3:f8:f5:08:d0:64:a3:f7:68:c5:2d:10:df:5f:0c:3a:
         e7:a7:68:ae:3a:79:e4:07:8e:94:0d:1b:95:82:28:9f:2d:1f:
         83:69:18:43:08:e9:aa:23:99:3c:fc:2b:ea:39:f4:88:88:d4:
         5a:bb:92:fb:71:af:9b:80:9b:14:37:1f:18:54:b2:46:f7:68:
         40:b1:34:ed:4f:ac:0e:f7:56:55:d1:f9:03:f3:f8:2f:ff:31:
         1c:76:c9:e8:1a:6d:10:5c:76:e3:a3:a3:af:66:31:86:97:3d:
         ca:4b:76:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----