Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64844d90-94b6-4a99-b137-571d9274b34a/f38107d54b02be20591dd13bae323d5c65f3eaeb.roa
File:                     f38107d54b02be20591dd13bae323d5c65f3eaeb.roa (raw, json)
Hash identifier:          fP+1LMPDOxgZlhaFu7XPmA/BtpooK2uEqfxBeh6CN04=
Subject key identifier:   D0:83:24:FC:FB:68:D4:B8:4E:73:56:5A:85:BF:6B:DF:75:42:16:78
Certificate issuer:       /CN=6463717ff42254b521639df4821621e39e0a27af
Certificate serial:       1C5D90
Authority key identifier: B5:EA:F2:8A:9B:67:30:A1:77:8F:B4:4D:15:0D:C5:03:73:E4:9E:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6463717ff42254b521639df4821621e39e0a27af.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64844d90-94b6-4a99-b137-571d9274b34a/f38107d54b02be20591dd13bae323d5c65f3eaeb.roa
Signing time:             Mon 19 Jun 2023 18:35:50 +0000
ROA not before:           Sun 18 Jun 2023 18:35:50 +0000
ROA not after:            Thu 19 Jun 2025 18:35:50 +0000
asID:                     11816
IP address blocks:        181.41.0.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1858960 (0x1c5d90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6463717ff42254b521639df4821621e39e0a27af
        Validity
            Not Before: Jun 18 18:35:50 2023 GMT
            Not After : Jun 19 18:35:50 2025 GMT
        Subject: CN=f38107d54b02be20591dd13bae323d5c65f3eaeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2c:a8:e3:b6:b6:95:b2:17:ea:ee:a1:de:ca:
                    5a:5e:e5:84:60:ba:24:23:b1:5f:9b:65:27:1f:e7:
                    bd:f8:0b:ae:77:ed:e3:06:b8:e4:e7:07:5e:2a:f6:
                    d7:61:4a:07:65:30:f2:f6:38:41:21:70:c8:f3:91:
                    e4:0f:bd:82:fb:bf:ef:55:c0:95:20:f1:be:d9:b6:
                    0a:f1:91:4e:e1:3d:e4:d0:74:d6:b2:9e:e9:ba:0d:
                    e7:23:7c:fe:88:f8:49:71:c0:7e:ec:c2:d1:c6:9c:
                    2e:35:c3:26:d4:da:5c:1f:e3:5a:f0:63:56:5d:3f:
                    17:3d:40:a0:75:d9:19:c3:e1:7a:a3:53:b7:fc:fa:
                    f0:83:12:77:d7:95:4b:0f:18:b4:96:c5:36:eb:97:
                    ca:e7:e3:b4:b1:c3:b7:fc:7e:b2:e6:dc:fe:8b:6c:
                    f7:f5:2c:47:2d:3b:4d:68:3d:e7:67:14:f6:3f:df:
                    b5:2e:a8:05:ff:d2:76:01:de:0c:db:db:1d:2e:cb:
                    cb:4a:92:01:90:18:38:88:2d:d0:0b:f1:19:34:72:
                    9a:1c:11:a1:9e:c6:4d:1c:15:41:aa:f0:9d:42:37:
                    e6:9a:56:e1:b0:b7:99:90:3a:ea:57:cb:ac:cc:9c:
                    ce:03:fd:17:be:36:04:98:57:7b:19:e1:ff:74:b5:
                    d1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:83:24:FC:FB:68:D4:B8:4E:73:56:5A:85:BF:6B:DF:75:42:16:78
            X509v3 Authority Key Identifier:
                keyid:B5:EA:F2:8A:9B:67:30:A1:77:8F:B4:4D:15:0D:C5:03:73:E4:9E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6463717ff42254b521639df4821621e39e0a27af.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64844d90-94b6-4a99-b137-571d9274b34a/f38107d54b02be20591dd13bae323d5c65f3eaeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64844d90-94b6-4a99-b137-571d9274b34a/6463717ff42254b521639df4821621e39e0a27af.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:ac:9d:a2:d2:91:23:6d:a6:b1:f1:aa:82:8e:76:89:f7:47:
         4a:2f:9f:1b:80:c3:2a:b0:62:8d:9f:2e:ff:51:0a:26:e0:f4:
         cd:93:3b:e6:07:c5:a0:af:96:25:e7:7a:be:66:d8:c8:d4:6a:
         b0:c5:9b:a9:0a:84:7c:4a:c8:aa:8a:33:d3:e3:5c:64:e8:ed:
         02:88:7e:bb:8a:a0:ff:c3:c5:83:bb:3b:e3:64:d7:9b:e6:f5:
         59:3c:5b:b7:91:a3:20:42:b5:c9:f4:bd:d2:25:32:9d:d0:75:
         4c:9d:bf:d9:22:a3:e8:8a:84:f3:a4:71:b7:f1:36:ed:e1:a2:
         28:71:e5:7f:d7:14:a6:85:f0:0b:f4:39:49:48:32:5b:f9:19:
         ab:8d:2e:ce:9f:08:c6:c8:87:90:c5:36:6c:84:33:f3:05:51:
         3d:a8:ea:34:92:22:62:22:b4:db:db:e0:51:06:67:ed:c2:c7:
         e7:0d:9d:04:69:89:8e:c7:39:d4:2c:d9:dc:6b:7e:fe:b6:8d:
         20:4e:2a:1f:b1:82:d5:80:72:76:fa:19:e5:9a:02:d8:28:9f:
         8c:b5:61:01:d6:45:20:8b:f4:f7:73:6c:42:33:b7:d7:56:31:
         8e:77:ad:3a:7a:1a:c4:f4:bf:8f:45:25:cc:7a:87:4b:4c:1f:
         43:a0:5d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----