Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54ae1231-b48d-4081-b5c1-57da5f5034aa/78907ede51e9fb99c828d1c8883c6dc2523f958c.roa
File:                     78907ede51e9fb99c828d1c8883c6dc2523f958c.roa (raw, json)
Hash identifier:          J5W/pqzhIjmm2dFoON40gvty/foh29z7oH9PtXoQpE8=
Subject key identifier:   C0:DF:FE:4C:C6:6B:2D:9B:56:6D:0F:6B:17:45:DD:08:AF:A8:1C:AE
Certificate issuer:       /CN=e57f4a5c31ef43865da0ca860f9a05f89cde6f9b
Certificate serial:       063503
Authority key identifier: A2:E9:D7:53:95:AE:4E:41:89:A8:73:C0:C3:B0:BB:31:41:A5:3B:21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e57f4a5c31ef43865da0ca860f9a05f89cde6f9b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54ae1231-b48d-4081-b5c1-57da5f5034aa/78907ede51e9fb99c828d1c8883c6dc2523f958c.roa
Signing time:             Sat 02 Sep 2023 15:20:12 +0000
ROA not before:           Fri 01 Sep 2023 15:20:12 +0000
ROA not after:            Tue 02 Sep 2025 15:20:12 +0000
asID:                     272051
IP address blocks:        181.233.154.0/23 maxlen: 24
                          2803:1d10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 406787 (0x63503)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e57f4a5c31ef43865da0ca860f9a05f89cde6f9b
        Validity
            Not Before: Sep  1 15:20:12 2023 GMT
            Not After : Sep  2 15:20:12 2025 GMT
        Subject: CN=78907ede51e9fb99c828d1c8883c6dc2523f958c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:44:7d:e3:ae:01:6b:91:e3:ee:2a:3b:66:1a:
                    53:98:15:e4:96:9c:c4:4d:8b:0e:83:47:38:bf:6e:
                    a5:e1:3e:e8:45:87:65:a1:57:af:6f:ce:f9:00:8b:
                    a9:70:9f:26:7c:69:0a:10:01:7e:0e:64:79:0f:de:
                    91:36:78:9a:1b:4d:4a:a9:28:6f:41:6a:29:7d:d5:
                    78:62:c9:0b:93:e4:f9:8a:0c:9a:60:99:4a:67:74:
                    72:95:79:4e:af:57:b1:9b:60:f7:13:e3:aa:96:d6:
                    3b:7a:cb:a1:e9:4d:0d:33:76:81:ec:40:5e:30:64:
                    41:84:54:b9:47:7c:5c:f6:8b:4a:b6:0a:9c:12:d0:
                    13:60:da:ee:2e:37:43:20:cb:83:1d:62:8d:c4:6d:
                    57:69:87:2b:33:48:ad:ce:0a:bd:06:38:1b:bd:28:
                    6e:66:42:84:6a:c1:d1:a5:96:d6:e8:e4:55:fe:07:
                    ba:91:2d:0a:7b:ba:07:31:4a:a6:f9:f9:38:e2:32:
                    a6:37:67:90:57:9c:17:51:12:89:63:1c:ad:0d:39:
                    7d:3e:a7:0d:da:cc:80:94:80:f4:ad:3f:e8:c5:c9:
                    2a:63:65:dd:01:8a:b2:fd:9b:91:d2:ca:bb:6b:9a:
                    c4:ab:f6:bf:06:b7:fa:d8:cc:1d:9e:75:ba:c8:19:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DF:FE:4C:C6:6B:2D:9B:56:6D:0F:6B:17:45:DD:08:AF:A8:1C:AE
            X509v3 Authority Key Identifier:
                keyid:A2:E9:D7:53:95:AE:4E:41:89:A8:73:C0:C3:B0:BB:31:41:A5:3B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e57f4a5c31ef43865da0ca860f9a05f89cde6f9b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54ae1231-b48d-4081-b5c1-57da5f5034aa/78907ede51e9fb99c828d1c8883c6dc2523f958c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54ae1231-b48d-4081-b5c1-57da5f5034aa/e57f4a5c31ef43865da0ca860f9a05f89cde6f9b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.154.0/23
                IPv6:
                  2803:1d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:c7:35:e5:69:22:50:90:d0:93:37:69:7f:99:74:51:56:65:
         df:fc:45:3a:fc:76:de:de:4e:e4:67:df:33:65:bb:f4:e3:47:
         a6:26:5c:4d:ad:3a:1a:f3:bd:0b:35:43:78:e0:d3:75:7a:f5:
         2b:e7:d2:fb:7e:2a:d4:45:db:fc:59:7f:88:78:71:26:63:a4:
         c6:45:bb:07:1f:ea:b0:6d:82:73:99:3a:fc:5f:44:6e:b8:b8:
         dd:58:1e:e8:ec:7c:60:d1:8f:18:34:c0:83:07:b3:cf:bf:05:
         fe:72:ec:6d:05:44:d8:5c:cc:30:0d:82:7f:a8:ad:19:3b:0c:
         70:ae:c8:9e:e2:6f:5f:8b:75:5c:3a:8e:84:c4:2c:71:a8:f5:
         19:1e:a8:6b:ff:65:f8:5e:92:88:2b:7b:a4:c0:74:1a:df:10:
         dd:80:11:8f:4a:be:da:b6:9a:20:1c:fa:8a:43:b8:66:11:89:
         17:a8:d0:69:d9:76:9a:a0:7b:20:31:ee:6f:9e:05:fe:51:01:
         fe:ba:5f:a1:c9:ed:d3:4f:7e:b7:26:1d:b5:e0:25:9e:1a:72:
         bf:89:a8:e3:f2:ba:fd:c0:09:22:63:01:a5:8d:f6:ae:8d:0d:
         8b:2a:33:6c:78:a6:dd:b4:5a:34:8c:60:93:26:d0:93:36:01:
         78:42:82:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----