Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/06a1ef81fb9bca6ddf8e27e44c57cca44696bf40.roa
File:                     06a1ef81fb9bca6ddf8e27e44c57cca44696bf40.roa (raw, json)
Hash identifier:          0DZ9cj61kNEWYNSaHH/OEXClJp4D41c6j92VRyx9jAY=
Subject key identifier:   E8:16:B5:EA:86:9B:E0:09:65:A7:EB:04:E3:70:93:E3:60:9D:39:41
Certificate issuer:       /CN=ab812eecfcc01d38c444dbeae53234651af8c84d
Certificate serial:       1C83C1
Authority key identifier: C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/06a1ef81fb9bca6ddf8e27e44c57cca44696bf40.roa
Signing time:             Fri 14 Oct 2022 13:04:52 +0000
ROA not before:           Tue 23 Mar 2021 14:40:23 +0000
ROA not after:            Tue 24 Mar 2026 14:40:23 +0000
asID:                     52331
IP address blocks:        181.188.212.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1868737 (0x1c83c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab812eecfcc01d38c444dbeae53234651af8c84d
        Validity
            Not Before: Mar 23 14:40:23 2021 GMT
            Not After : Mar 24 14:40:23 2026 GMT
        Subject: CN=06a1ef81fb9bca6ddf8e27e44c57cca44696bf40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:b9:f6:67:fb:4d:ea:84:45:d6:1c:8a:ef:
                    e7:36:37:00:08:b1:2e:81:57:a3:c3:49:a1:8a:ed:
                    61:46:ab:e4:90:e4:cf:41:04:c0:3d:cd:57:b3:21:
                    a3:61:bb:08:7c:9f:9b:f4:5c:0b:d6:3c:a4:70:5b:
                    c3:0f:ab:63:7c:7b:82:1f:aa:5f:87:99:7c:b8:c9:
                    13:ca:86:48:f2:76:03:59:2c:08:3c:a6:ee:28:18:
                    e5:52:2c:41:05:8c:68:39:c6:ac:fa:74:56:c3:cd:
                    9b:8b:a2:84:26:14:b6:37:be:59:fa:46:b0:19:27:
                    93:b6:64:c4:b1:c3:a2:5c:61:fc:ef:cb:f9:13:a7:
                    dd:4a:f7:10:ae:c3:41:7b:95:f4:05:1a:1f:ea:d6:
                    7f:55:e5:03:28:97:37:ea:b1:13:c5:8f:c7:57:98:
                    90:95:52:8e:b2:26:d7:d0:7d:64:3d:7b:fc:86:4d:
                    f6:20:5e:d9:32:58:df:e1:89:e9:d8:8b:07:59:d6:
                    2b:d9:5a:92:09:98:47:42:dd:61:b6:ee:4a:d3:e8:
                    49:49:53:75:c7:63:e0:11:99:d3:ff:51:12:86:39:
                    19:88:b3:aa:ab:87:7f:a4:64:92:18:99:86:be:77:
                    ad:b1:9a:c1:b1:6e:71:9c:f2:6f:34:4c:8e:7b:65:
                    cb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:16:B5:EA:86:9B:E0:09:65:A7:EB:04:E3:70:93:E3:60:9D:39:41
            X509v3 Authority Key Identifier:
                keyid:C5:64:D0:0C:9D:09:04:03:67:F4:C6:CA:82:97:96:8F:E4:AE:8F:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab812eecfcc01d38c444dbeae53234651af8c84d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/06a1ef81fb9bca6ddf8e27e44c57cca44696bf40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/58a7451f-2617-4d0f-9e75-6d2ae9ccf566/ab812eecfcc01d38c444dbeae53234651af8c84d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.188.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:2b:98:a9:f7:cb:02:9e:b1:34:7a:77:a3:33:44:99:24:15:
         3e:95:e1:7c:57:77:4e:02:1b:91:ad:c3:c9:f7:5a:d6:56:67:
         6f:b3:e0:be:9e:d8:ef:29:0e:0c:d3:6e:c3:98:be:01:5c:34:
         29:1c:a6:ea:ce:d3:09:a7:b7:f8:ed:40:68:28:b4:31:87:ec:
         fc:b7:32:05:02:03:1c:6f:23:d9:16:48:97:53:23:83:95:ea:
         86:69:73:6e:8d:a2:2e:cd:78:db:03:57:da:76:70:f2:ea:5d:
         0d:b6:0b:1b:a5:69:a9:19:72:68:0c:19:88:98:96:a4:c0:32:
         bd:93:e8:06:c0:4d:e6:d9:5b:fd:49:76:60:70:91:61:46:ad:
         bf:d0:df:e4:14:a0:a4:a5:b5:76:49:22:da:ff:54:32:f6:c3:
         60:81:4a:f3:06:f4:a6:56:35:63:ba:84:48:f1:f3:45:7b:7f:
         61:10:57:a1:e2:7f:63:a4:fc:c8:1f:91:37:a8:d0:22:ad:47:
         43:df:2f:29:b5:1b:f4:85:ec:52:be:ca:58:ad:0e:ad:e6:b4:
         2b:d7:e5:9d:61:15:66:db:10:09:5d:79:49:08:0f:49:c3:41:
         e3:ac:a4:0d:d7:e1:86:32:75:8d:56:34:00:a5:df:28:b5:83:
         05:9d:5a:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----