Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3d8b528a-ef31-4eb7-af74-c2e0680bc699/3de600b75fe33740230c56245d10493582669d02.roa
File:                     3de600b75fe33740230c56245d10493582669d02.roa (raw, json)
Hash identifier:          xYrxJ06ml5cGzkpg0ieX5gG9YZQC8XHc+lbzkv5N34U=
Subject key identifier:   9B:3F:01:F7:96:3F:24:83:F0:BE:C5:B6:35:B5:71:2B:95:31:CC:4E
Certificate issuer:       /CN=0048caf7ce87bff466e17f38ea984e0608802348
Certificate serial:       0652
Authority key identifier: 97:26:67:2C:2D:05:0E:B6:44:61:1B:81:E9:A7:E9:98:1C:40:3F:71
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0048caf7ce87bff466e17f38ea984e0608802348.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3d8b528a-ef31-4eb7-af74-c2e0680bc699/3de600b75fe33740230c56245d10493582669d02.roa
Signing time:             Sat 15 Jan 2022 17:14:32 +0000
ROA not before:           Sat 15 Jan 2022 02:00:00 +0000
ROA not after:            Mon 15 Jan 2024 02:00:00 +0000
asID:                     265534
IP address blocks:        181.233.96.0/22 maxlen: 24
                          2806:3e2::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0048caf7ce87bff466e17f38ea984e0608802348
        Validity
            Not Before: Jan 15 02:00:00 2022 GMT
            Not After : Jan 15 02:00:00 2024 GMT
        Subject: CN=3de600b75fe33740230c56245d10493582669d02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:33:3a:fb:36:6b:82:ee:b6:92:3e:96:15:a1:
                    60:a8:3b:3a:6c:17:57:4d:18:d4:19:e2:10:da:09:
                    84:cb:dd:f9:bd:fb:0e:80:13:00:6c:d9:fa:8e:c4:
                    58:42:ff:35:18:ca:cf:c3:c2:50:e7:80:ff:27:0e:
                    16:ee:ad:ef:76:c7:9e:66:57:a7:88:58:65:a3:bd:
                    6b:af:af:bd:03:2c:98:1a:6f:d8:71:d3:96:f9:b5:
                    5c:29:96:f1:db:03:20:e9:3a:8c:cb:9a:ff:73:a3:
                    06:c7:c3:66:ea:cc:11:15:a5:7e:cc:6d:e3:8b:b8:
                    a6:fb:7c:af:cd:3c:56:a5:77:17:6b:e6:74:ac:69:
                    a8:fa:52:8c:12:26:e9:21:1d:ec:b2:24:7d:bb:ca:
                    c9:7a:cd:f8:f0:1e:3f:40:82:0b:aa:e4:d2:f0:7f:
                    82:74:81:af:fe:cc:56:c6:42:4d:14:94:6b:c7:97:
                    d7:37:6a:32:1a:5a:80:0a:f2:67:75:f3:ea:5a:2b:
                    c5:03:46:18:ca:ed:66:e0:03:b1:8c:43:e9:21:79:
                    24:ab:4a:ff:8f:99:f5:72:72:c6:0b:a5:e1:ca:09:
                    9e:a9:94:a9:51:2d:36:f7:c6:67:70:04:2c:60:cd:
                    11:45:18:a6:a4:2b:5a:d8:17:f1:79:e7:42:83:61:
                    f7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3F:01:F7:96:3F:24:83:F0:BE:C5:B6:35:B5:71:2B:95:31:CC:4E
            X509v3 Authority Key Identifier:
                keyid:97:26:67:2C:2D:05:0E:B6:44:61:1B:81:E9:A7:E9:98:1C:40:3F:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0048caf7ce87bff466e17f38ea984e0608802348.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3d8b528a-ef31-4eb7-af74-c2e0680bc699/3de600b75fe33740230c56245d10493582669d02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3d8b528a-ef31-4eb7-af74-c2e0680bc699/0048caf7ce87bff466e17f38ea984e0608802348.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.96.0/22
                IPv6:
                  2806:3e2::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:41:a3:69:2f:c0:94:07:73:c5:f7:fa:da:a7:ed:ac:27:43:
         6d:f3:a0:7d:f5:a4:8b:09:00:45:16:fd:a6:f2:c3:78:92:a5:
         44:e3:b5:fe:c2:7a:a6:f1:51:f4:15:d1:99:df:1b:cd:32:4f:
         64:b2:2b:ee:f0:53:e0:29:03:72:4c:14:db:4e:08:a8:29:9c:
         5d:65:ac:99:5c:bb:b1:67:81:2f:d1:e9:60:27:9d:b8:98:5e:
         07:34:40:fc:9f:3e:ea:55:24:bf:4c:4f:3d:9b:2a:67:e9:06:
         c0:44:65:42:b0:c1:73:cd:34:0d:ac:13:12:e4:51:59:a3:81:
         27:3b:64:2e:94:89:46:35:d1:fa:b4:84:ed:2b:fa:ac:8d:89:
         c7:9b:f4:97:27:c0:b1:c5:81:df:0a:ab:47:c7:6e:94:be:b3:
         22:a8:1f:63:a5:9f:ed:ab:5c:2c:36:0e:c0:15:a9:6c:ae:74:
         4a:c6:24:b6:63:c5:5c:8b:c0:16:2f:12:00:7c:45:cf:6b:35:
         e2:3e:96:c2:52:27:15:d3:1d:b6:ed:a4:37:2f:8a:6f:1e:bb:
         0a:04:96:8d:ec:fa:0a:d3:3b:d7:5f:bd:06:37:c2:2e:d7:3e:
         17:5a:f5:3f:9c:65:ba:00:10:5f:54:b7:72:65:37:8b:79:a4:
         fc:26:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----