Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/6f5de24553fd64b72d4ad63aecac12693d490a56.roa
File:                     6f5de24553fd64b72d4ad63aecac12693d490a56.roa (raw, json)
Hash identifier:          riLxWZ4IxYAlWYA+KYj3GhT61vp8hzvAyomxOAVrxbQ=
Subject key identifier:   49:BA:9E:DA:45:ED:64:A6:8D:D5:67:0C:3C:C1:07:2B:35:69:88:81
Certificate issuer:       /CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
Certificate serial:       2B7285
Authority key identifier: C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/6f5de24553fd64b72d4ad63aecac12693d490a56.roa
Signing time:             Tue 12 Sep 2023 21:18:37 +0000
ROA not before:           Mon 11 Sep 2023 21:18:37 +0000
ROA not after:            Fri 12 Sep 2025 21:18:37 +0000
asID:                     27895
IP address blocks:        181.94.208.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2847365 (0x2b7285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a444d061fc4d914dc56d8031a9c4574ca57ad
        Validity
            Not Before: Sep 11 21:18:37 2023 GMT
            Not After : Sep 12 21:18:37 2025 GMT
        Subject: CN=6f5de24553fd64b72d4ad63aecac12693d490a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:00:f4:30:ca:5f:b5:06:ea:07:9f:49:ad:df:
                    d8:db:2c:b1:d0:68:a4:2d:ae:99:c1:28:6c:e7:81:
                    12:8d:42:a9:96:0b:d6:b7:42:87:51:a0:39:7b:3b:
                    2a:d6:74:57:75:31:fb:6b:58:07:8c:ae:af:27:98:
                    47:6f:00:d6:b2:c8:a8:ab:9c:51:be:3c:87:7f:16:
                    e9:83:fa:09:cc:c6:c0:62:cf:90:b2:ac:2d:17:07:
                    c3:47:ef:55:23:d4:1f:82:01:4c:3c:0a:0c:ae:17:
                    cc:ed:f7:2d:be:e5:df:63:82:7b:f0:9d:df:f3:67:
                    17:95:fc:21:2f:b3:67:1f:25:3d:52:5c:9b:ea:15:
                    58:d1:ac:30:94:bc:b4:a4:b9:cb:a5:31:39:26:cf:
                    44:07:5f:49:49:e2:3f:8a:b0:5b:d0:b2:44:92:a8:
                    8e:c7:0a:8b:b8:51:08:08:72:7d:a5:fc:50:30:50:
                    0d:c4:90:8f:b5:56:b9:de:05:d4:30:7d:fc:2b:69:
                    41:53:e4:34:82:79:92:94:f1:17:c4:8d:69:52:25:
                    b3:66:3e:18:2c:85:f0:e9:70:3e:a2:85:00:8c:a2:
                    00:6f:42:86:dd:a7:48:bb:bc:02:6a:11:f2:67:92:
                    ba:fe:35:95:f1:ed:3a:8e:2e:5b:53:75:05:99:b8:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:BA:9E:DA:45:ED:64:A6:8D:D5:67:0C:3C:C1:07:2B:35:69:88:81
            X509v3 Authority Key Identifier:
                keyid:C9:9C:8C:AA:C7:FF:7B:F4:E1:7A:CA:F0:8F:DD:D6:E5:6E:FC:CD:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d93a444d061fc4d914dc56d8031a9c4574ca57ad.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/6f5de24553fd64b72d4ad63aecac12693d490a56.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/d93a444d061fc4d914dc56d8031a9c4574ca57ad.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.94.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:82:ad:60:71:60:c5:8b:13:8d:05:2c:30:7f:1f:16:b2:f4:
         60:e0:90:25:f8:cd:a3:b5:50:c5:81:1d:43:94:23:18:5d:68:
         0c:84:35:14:74:38:69:ad:21:27:25:c1:2c:64:1e:29:e6:67:
         41:bb:ef:37:2f:a3:dd:e1:6c:4f:5a:2b:83:02:71:73:d7:35:
         f5:d2:0f:2d:9a:34:73:6e:33:21:b3:40:ee:c6:ad:83:f9:f8:
         59:c8:72:06:bc:61:ab:2d:d0:17:d3:57:d9:28:86:77:b3:1f:
         c5:d0:d9:85:9e:30:dc:19:4f:93:2a:52:91:99:08:4e:7f:c8:
         a4:9d:64:40:5e:bf:dc:f2:ff:b7:30:03:fc:c6:54:0a:af:59:
         87:ef:2d:73:ea:6f:f1:3b:71:e7:a4:56:91:4f:ac:c3:60:3f:
         bf:a1:32:b9:89:83:5b:a6:52:e7:7c:2d:37:aa:0b:2d:29:05:
         4c:84:f8:3c:02:4a:21:b4:2d:2f:9d:d9:7f:4d:c3:53:87:d5:
         aa:4d:9c:bd:32:fe:8f:67:60:01:9c:e0:64:6c:f9:aa:6b:be:
         e3:64:78:98:23:7f:14:26:54:8b:3c:23:01:8c:8d:4c:bd:ed:
         d4:37:b1:9b:f9:79:fc:07:b8:5c:d4:20:e1:67:a5:91:95:03:
         94:5b:ab:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----