Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/514e1b74-b78e-4425-be27-a3cc2e13660b/bc11e662f40d29175252e36f5dbd23c900198d59.roa
File:                     bc11e662f40d29175252e36f5dbd23c900198d59.roa (raw, json)
Hash identifier:          T3v6rbnUp90yyhGXVI8iR0rIzpr99HND1mxGNhtw2q8=
Subject key identifier:   43:8B:25:D7:07:EB:F5:E9:73:39:35:7B:B5:20:F0:42:26:08:DB:DD
Certificate issuer:       /CN=2a2f398f08732dba8b24bf45f6d48d5cac0c8f99
Certificate serial:       0CAD38
Authority key identifier: A9:12:A8:EF:9D:3C:43:D0:99:9E:23:97:75:38:E5:8E:F9:61:BC:8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a2f398f08732dba8b24bf45f6d48d5cac0c8f99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/514e1b74-b78e-4425-be27-a3cc2e13660b/bc11e662f40d29175252e36f5dbd23c900198d59.roa
Signing time:             Mon 31 Jul 2023 16:26:16 +0000
ROA not before:           Sun 30 Jul 2023 16:26:16 +0000
ROA not after:            Thu 31 Jul 2025 16:26:16 +0000
asID:                     272081
IP address blocks:        181.189.56.0/22 maxlen: 28
                          2803:1b10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 830776 (0xcad38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a2f398f08732dba8b24bf45f6d48d5cac0c8f99
        Validity
            Not Before: Jul 30 16:26:16 2023 GMT
            Not After : Jul 31 16:26:16 2025 GMT
        Subject: CN=bc11e662f40d29175252e36f5dbd23c900198d59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e8:70:5f:aa:b1:06:d7:13:5b:5a:1d:23:a7:
                    d9:24:37:65:fb:3b:eb:7e:91:ef:d6:9c:32:0e:51:
                    6e:f4:19:ce:ea:d8:aa:15:e3:4c:45:b2:94:fe:03:
                    aa:80:ef:76:a9:ca:77:22:05:1d:1a:63:b3:aa:01:
                    cd:8e:2e:f1:ae:fe:0a:f6:15:99:86:14:61:ab:ec:
                    6f:d1:00:5b:56:ea:cf:3a:b5:2b:c1:3e:63:c3:19:
                    9d:34:39:ce:0f:c7:88:8c:9f:17:a6:58:e5:32:ba:
                    e9:ce:8b:8b:7c:0c:5b:1e:84:6c:ff:8f:6b:e8:49:
                    b7:62:1d:78:de:7f:16:fc:dd:ea:b2:f7:0f:b7:72:
                    27:82:fc:fb:12:14:49:54:98:60:30:da:54:3c:c9:
                    0d:96:86:68:16:52:8e:4c:3c:7c:8b:5e:e9:6c:bd:
                    5a:ac:cf:49:d7:60:2b:7f:39:fc:4f:2c:fa:fb:ac:
                    79:94:2a:7c:0a:5c:b4:76:a7:07:23:50:12:14:99:
                    99:97:e3:44:c6:87:95:44:29:da:f5:f4:9a:9d:40:
                    71:2f:f3:ae:66:2b:9e:4f:95:1d:e2:55:65:c4:90:
                    a5:6e:3b:ec:72:9b:84:10:65:7a:0c:98:5e:b4:4a:
                    dc:48:1f:6b:42:5b:99:6f:eb:7a:aa:23:0e:9b:94:
                    75:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8B:25:D7:07:EB:F5:E9:73:39:35:7B:B5:20:F0:42:26:08:DB:DD
            X509v3 Authority Key Identifier:
                keyid:A9:12:A8:EF:9D:3C:43:D0:99:9E:23:97:75:38:E5:8E:F9:61:BC:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a2f398f08732dba8b24bf45f6d48d5cac0c8f99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/514e1b74-b78e-4425-be27-a3cc2e13660b/bc11e662f40d29175252e36f5dbd23c900198d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/514e1b74-b78e-4425-be27-a3cc2e13660b/2a2f398f08732dba8b24bf45f6d48d5cac0c8f99.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.56.0/22
                IPv6:
                  2803:1b10::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:5b:e1:87:63:f5:97:df:0a:80:83:b7:ad:99:15:96:46:f9:
         37:f8:cc:bf:b4:2d:96:5f:cc:bd:90:0b:18:3e:d3:5e:f4:0e:
         dd:ef:19:d5:6d:aa:6e:bc:35:20:b6:68:3a:75:f8:62:d3:6e:
         e1:6e:b0:b8:cc:5c:1e:f1:14:eb:e8:0c:35:fa:78:82:66:b7:
         56:8c:de:0c:2f:35:b7:16:ac:3d:0c:67:0a:5c:55:77:d1:2c:
         28:bc:74:ce:6d:ae:0b:74:65:03:86:b4:8d:42:a8:06:f5:1d:
         6e:06:a9:20:6b:bd:c7:c8:da:92:52:c4:ce:de:70:3e:3b:ec:
         06:0a:b2:fd:1a:32:95:62:b0:ba:04:d5:f7:c9:98:73:37:75:
         0d:07:27:e8:bf:ce:7f:88:bc:e7:b0:f0:eb:59:48:c8:6d:28:
         29:22:a3:1d:8d:bf:a4:69:77:f2:c4:8c:ca:0c:0e:9a:9f:e1:
         85:0b:27:de:7e:65:ca:4d:2e:04:27:cd:87:43:e3:c3:38:96:
         97:b3:d9:f1:b9:5b:e6:c3:52:7d:12:bd:77:1f:15:a5:16:b1:
         86:dc:fb:72:42:64:af:ba:21:72:20:55:1a:30:60:77:30:dc:
         c8:52:a9:ff:db:cb:92:38:79:f4:4c:cf:47:eb:e4:3f:ec:1b:
         46:8f:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----