Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3bb3b1ff-df95-45e5-8cef-feaa1d6e1b4f/3264fad6ca6363b414ae7c2fe37f6d50f3b831ba.roa
File:                     3264fad6ca6363b414ae7c2fe37f6d50f3b831ba.roa (raw, json)
Hash identifier:          6yD7VgwKdBePSpAh7K8QFixBRkVYWvQqXUwczawUuXU=
Subject key identifier:   5F:BF:08:2E:3E:CB:58:D0:B1:07:B5:D7:7D:B4:F8:47:9C:F9:FC:0E
Certificate issuer:       /CN=97b679fb84e38d597494d2fc441d6c502ac03bb0
Certificate serial:       04A5
Authority key identifier: A7:23:A7:B9:DC:D0:26:17:28:A1:34:F4:34:DF:AF:87:86:61:B2:5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/97b679fb84e38d597494d2fc441d6c502ac03bb0.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3bb3b1ff-df95-45e5-8cef-feaa1d6e1b4f/3264fad6ca6363b414ae7c2fe37f6d50f3b831ba.roa
Signing time:             Mon 26 Dec 2022 20:28:04 +0000
ROA not before:           Sun 25 Dec 2022 20:26:56 +0000
ROA not after:            Thu 26 Dec 2024 20:26:56 +0000
asID:                     271782
IP address blocks:        201.222.41.0/24 maxlen: 24
                          2803:1fe0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189 (0x4a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97b679fb84e38d597494d2fc441d6c502ac03bb0
        Validity
            Not Before: Dec 25 20:26:56 2022 GMT
            Not After : Dec 26 20:26:56 2024 GMT
        Subject: CN=3264fad6ca6363b414ae7c2fe37f6d50f3b831ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:0d:e6:a9:35:46:8f:d2:ea:25:f2:bf:63:f8:
                    50:1b:82:51:55:1f:6c:50:23:c6:00:d1:d6:c6:4b:
                    55:ea:42:b4:f7:11:7f:37:3d:e3:ed:d8:34:bd:66:
                    93:8b:ad:5f:92:2d:7c:f6:ff:fb:92:5e:45:b5:6c:
                    73:75:98:bb:ca:91:49:46:e5:79:5b:49:55:3c:b6:
                    59:d5:e2:11:ee:e7:65:25:69:93:2a:0e:71:12:0a:
                    6c:d7:a9:43:ff:12:1f:38:e9:d4:98:69:b3:dd:83:
                    38:1f:e1:c9:67:47:a9:ac:1b:81:13:41:e8:9d:1b:
                    25:41:93:f9:81:41:ae:64:10:af:85:d4:10:b8:4d:
                    86:72:98:73:01:49:2c:44:0d:9f:bf:3d:ae:e9:d6:
                    52:2b:cc:e9:45:9c:02:bc:08:3f:8b:c1:7a:d3:43:
                    e8:6d:49:3a:ad:24:04:f4:b9:8b:c1:e4:2e:5c:cf:
                    b0:b4:f8:84:de:d2:90:38:e4:50:1c:dc:f0:04:c4:
                    85:2e:a1:41:60:1a:8d:aa:e4:7a:3f:dc:ad:70:d3:
                    25:39:f8:d4:fb:5f:37:ec:af:ee:69:d5:6e:49:b6:
                    83:6d:e5:10:da:94:b4:46:2c:cc:ea:56:90:8f:0d:
                    a5:8c:20:26:03:62:72:f8:ab:eb:d3:90:3e:4f:2a:
                    c1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:BF:08:2E:3E:CB:58:D0:B1:07:B5:D7:7D:B4:F8:47:9C:F9:FC:0E
            X509v3 Authority Key Identifier:
                keyid:A7:23:A7:B9:DC:D0:26:17:28:A1:34:F4:34:DF:AF:87:86:61:B2:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/97b679fb84e38d597494d2fc441d6c502ac03bb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3bb3b1ff-df95-45e5-8cef-feaa1d6e1b4f/3264fad6ca6363b414ae7c2fe37f6d50f3b831ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3bb3b1ff-df95-45e5-8cef-feaa1d6e1b4f/97b679fb84e38d597494d2fc441d6c502ac03bb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.41.0/24
                IPv6:
                  2803:1fe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:4b:05:a7:7d:63:16:70:bc:a5:8b:b0:3a:75:f7:0e:4c:50:
         f8:7d:06:88:46:31:44:c2:a1:d7:2c:e1:be:10:ee:0a:be:2e:
         82:d1:61:42:d5:72:3d:a9:46:10:55:0b:4e:b1:d1:ea:8f:f8:
         d6:a7:48:b2:d5:bf:73:9e:27:b7:7c:34:4c:59:e9:a6:96:11:
         ae:7a:06:57:62:6d:a7:47:98:74:9f:58:dc:56:b9:12:73:69:
         ac:92:7f:fb:0b:c8:64:24:ed:8f:09:02:56:3e:5b:dc:48:1c:
         33:fb:5f:5d:36:f6:b4:6e:3e:70:fd:35:cf:c5:32:72:76:a6:
         72:75:6a:1b:e9:f6:83:a1:35:d1:83:27:33:f4:85:d2:ad:74:
         50:d3:b9:db:19:01:f7:8c:30:aa:26:a4:7b:d8:fd:a6:a1:e6:
         f9:e0:8d:11:6c:e2:a2:7b:ae:19:24:6c:e6:39:5b:94:91:3b:
         a1:26:0e:59:67:e4:d0:52:f6:3a:7c:54:ff:97:56:3d:08:bd:
         b1:a4:a4:dc:fd:bd:d0:c6:ac:5f:a3:09:69:53:86:4c:80:20:
         e0:e4:9c:70:f7:37:c6:ed:13:19:81:b4:c2:f4:77:1c:02:66:
         f5:28:2d:6a:75:ce:59:b3:33:df:9d:0d:f5:c6:ec:58:94:e1:
         f2:c9:73:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----