Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2dd9cd66-f5ae-4d7f-a4b6-68cfa9111840/567f519b1fb864a7c15284327d9bd72e2558a9f8.roa
File:                     567f519b1fb864a7c15284327d9bd72e2558a9f8.roa (raw, json)
Hash identifier:          kd2SMTf5C+yVf8dVEEGt5L9dvf3pCf+UE8crF8FV9yE=
Subject key identifier:   44:1E:10:14:AB:33:79:5A:A2:F5:65:4B:8E:D6:E0:6B:BA:7E:4F:81
Certificate issuer:       /CN=b4e2545f234d59b5f6dd2e834c9c9e52ce704173
Certificate serial:       11961B
Authority key identifier: E5:80:3B:4F:AF:A4:29:01:B5:A7:26:E0:51:CA:65:6C:D6:7F:FD:76
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e2545f234d59b5f6dd2e834c9c9e52ce704173.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2dd9cd66-f5ae-4d7f-a4b6-68cfa9111840/567f519b1fb864a7c15284327d9bd72e2558a9f8.roa
Signing time:             Mon 17 Apr 2023 18:00:07 +0000
ROA not before:           Sun 16 Apr 2023 18:00:07 +0000
ROA not after:            Thu 17 Apr 2025 18:00:07 +0000
asID:                     271907
IP address blocks:        181.233.88.0/22 maxlen: 24
                          2803:e210::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1152539 (0x11961b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e2545f234d59b5f6dd2e834c9c9e52ce704173
        Validity
            Not Before: Apr 16 18:00:07 2023 GMT
            Not After : Apr 17 18:00:07 2025 GMT
        Subject: CN=567f519b1fb864a7c15284327d9bd72e2558a9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:c8:22:c4:6c:1b:b6:6f:60:2f:a4:20:77:
                    1b:b9:6c:33:7b:78:03:71:5f:99:e7:bc:6a:4c:eb:
                    40:08:88:0b:1b:6b:0a:95:90:db:59:5b:cd:a9:cb:
                    56:c9:ce:88:a7:77:e4:53:da:9b:4a:fa:b2:43:03:
                    83:72:3a:35:2c:76:fe:f9:b5:6d:45:7a:8e:45:8c:
                    21:2a:03:df:b0:e7:33:e5:5c:e1:93:c8:02:a4:07:
                    f4:f6:96:a5:74:a6:8a:07:53:61:e1:9b:81:9a:84:
                    9b:ef:4e:a2:39:08:f0:54:af:d7:0b:a1:5c:36:28:
                    11:a4:bd:71:c4:0a:fa:e8:bb:2e:48:6d:d1:7c:ad:
                    2c:be:b4:b9:dc:1e:c5:ed:c3:a6:c2:5b:51:16:da:
                    18:3e:c4:13:84:a4:02:9f:ed:e8:89:ce:55:f2:a8:
                    d7:bb:da:6b:f3:cc:76:e0:2d:34:74:d3:88:09:e4:
                    d0:24:7b:fc:d9:df:7a:d4:68:f3:12:df:41:38:32:
                    bf:bc:28:92:f0:82:f0:04:d4:31:e2:d0:ab:67:3e:
                    1a:18:da:17:25:17:11:66:88:ba:2f:65:1f:62:52:
                    c7:30:da:55:01:f0:de:67:51:97:c6:ce:cd:e0:da:
                    be:73:f2:ac:a5:0e:11:cf:4e:2a:33:81:5a:26:50:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1E:10:14:AB:33:79:5A:A2:F5:65:4B:8E:D6:E0:6B:BA:7E:4F:81
            X509v3 Authority Key Identifier:
                keyid:E5:80:3B:4F:AF:A4:29:01:B5:A7:26:E0:51:CA:65:6C:D6:7F:FD:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4e2545f234d59b5f6dd2e834c9c9e52ce704173.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2dd9cd66-f5ae-4d7f-a4b6-68cfa9111840/567f519b1fb864a7c15284327d9bd72e2558a9f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2dd9cd66-f5ae-4d7f-a4b6-68cfa9111840/b4e2545f234d59b5f6dd2e834c9c9e52ce704173.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.88.0/22
                IPv6:
                  2803:e210::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:00:8f:f4:63:80:d5:20:bc:91:b3:e1:27:b6:e4:72:e9:87:
         4f:27:4d:17:db:72:29:25:bf:5e:09:fb:d5:92:28:c1:64:18:
         84:5d:43:88:bd:15:7b:10:56:2e:5b:da:13:59:fb:68:65:4a:
         9f:9b:80:9b:50:14:7c:4d:60:72:84:09:eb:63:f5:d8:02:fc:
         4f:d6:bd:f1:a5:61:5d:e5:41:9b:f7:8a:05:7e:82:b6:99:ed:
         90:27:76:8a:1e:ec:96:69:ee:3b:36:11:2e:71:96:96:25:2d:
         06:e7:49:b7:15:1d:a8:a7:3a:e6:fd:20:07:54:8f:63:44:a6:
         29:e1:74:32:fc:bd:85:d9:1d:44:1c:d3:a4:4b:33:fd:a2:d0:
         10:ab:d5:c5:c2:74:77:80:8f:4c:69:42:24:54:08:4c:89:2e:
         42:7e:fb:aa:d3:46:87:7c:8a:a3:39:16:8d:5b:79:74:8e:96:
         37:c8:47:4b:f3:7f:c9:ce:16:5e:b6:a0:8c:aa:e0:56:6e:98:
         e7:3a:e0:0f:3a:2f:69:74:ab:5c:77:e2:dc:4c:ba:8e:f0:9c:
         a0:9a:bd:53:d8:be:e2:3e:ee:97:de:12:89:b3:ba:0e:0c:89:
         8e:21:7d:12:95:80:90:57:44:6a:10:2c:ab:f2:53:b5:ba:7a:
         28:2e:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----