Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/49e20af47262fda71d5b94597e149ef6e273a72f.roa
File:                     49e20af47262fda71d5b94597e149ef6e273a72f.roa (raw, json)
Hash identifier:          i6xVHddxFvFnbuNfbMdq5oHxhQbCB5f6GuWIlKmcyZw=
Subject key identifier:   01:1C:32:95:19:FC:AB:15:E5:CC:AD:BC:9A:8B:34:40:4E:7F:C8:95
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       037546
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/49e20af47262fda71d5b94597e149ef6e273a72f.roa
Signing time:             Tue 11 Jul 2023 12:51:39 +0000
ROA not before:           Mon 10 Jul 2023 12:51:39 +0000
ROA not after:            Fri 11 Jul 2025 12:51:39 +0000
asID:                     16629
IP address blocks:        181.160.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226630 (0x37546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 12:51:39 2023 GMT
            Not After : Jul 11 12:51:39 2025 GMT
        Subject: CN=49e20af47262fda71d5b94597e149ef6e273a72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:36:77:d7:20:26:dc:48:18:53:d1:69:b1:e4:
                    6b:7d:ba:73:f5:39:a8:6b:98:05:86:0b:65:2b:31:
                    48:7e:0d:e8:51:4e:e5:ae:aa:2a:ca:a4:3d:cd:e5:
                    73:36:1d:ec:7d:a9:1a:32:67:d2:b5:fb:36:0f:c4:
                    32:be:6b:c5:f7:b3:98:a0:4a:15:6e:1c:7b:57:0a:
                    7b:e1:db:e0:05:75:2c:ee:60:1f:c6:c4:cd:30:2c:
                    a4:75:f6:50:57:2f:53:eb:4a:53:c5:46:86:bd:1c:
                    60:19:2b:a8:d4:57:6e:52:e1:f5:ea:4a:3d:c9:a0:
                    ef:6e:99:8e:0d:26:fd:14:5c:58:7b:3e:ed:5b:88:
                    27:8e:16:6f:b9:d1:ad:0c:08:0f:b2:a2:58:da:7a:
                    97:f3:a8:8a:06:f6:9d:a2:47:d2:3a:83:3b:e8:a3:
                    1b:d5:22:16:34:bb:30:de:88:1f:53:68:73:ed:a5:
                    4d:9e:99:4c:b9:98:f6:57:00:78:0b:0e:98:51:24:
                    89:2f:0d:f9:b8:a3:5f:37:c8:e7:e8:8a:36:f8:5a:
                    1e:02:15:e6:8a:79:69:1a:dd:22:81:f8:ed:99:99:
                    09:ec:7f:37:65:3d:0e:d3:b6:97:38:81:f1:fc:1b:
                    be:d6:b6:1d:b3:59:ad:8b:25:47:8d:88:b4:88:98:
                    7a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1C:32:95:19:FC:AB:15:E5:CC:AD:BC:9A:8B:34:40:4E:7F:C8:95
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/49e20af47262fda71d5b94597e149ef6e273a72f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.160.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         34:93:25:4d:86:95:0d:6a:76:a5:2b:44:49:f1:f6:36:2f:fb:
         11:7f:a2:a9:f2:f6:f7:95:7f:c8:c4:fc:7c:b6:32:2f:79:c7:
         22:b8:f1:52:1d:de:58:5f:d5:61:0c:bb:16:80:72:51:0b:db:
         74:28:b3:63:74:4c:fc:07:d2:65:eb:d9:f7:ae:71:d7:3d:52:
         2e:d2:a2:c0:60:4e:b5:95:66:6f:23:40:db:b9:e8:8d:c7:97:
         a6:d6:41:b7:64:e6:24:a3:f3:10:7e:c5:60:7c:ef:26:54:1a:
         4a:5d:2c:56:a3:11:7c:43:b6:8a:af:27:e1:73:d6:81:02:5a:
         d6:d9:e8:7d:eb:19:3c:25:4f:00:59:11:ec:a8:54:35:14:15:
         88:dc:80:df:ec:36:fe:cf:7c:bb:59:b0:06:90:6e:b6:59:15:
         b9:8f:5a:5f:53:4d:a8:a4:f5:47:0e:ad:08:6c:ea:c4:5a:ba:
         b5:17:de:8f:68:16:b2:0b:75:d0:1d:7b:fe:eb:b7:25:9a:a6:
         ef:7f:6a:55:7e:31:95:f2:13:4e:ff:6e:da:63:5f:0a:b1:99:
         de:dd:20:6e:12:dc:ad:fe:7d:a5:a6:07:19:12:11:b6:e6:25:
         92:6a:e4:52:17:1a:b3:8b:84:57:78:94:1c:3f:00:6c:3e:eb:
         d5:a6:8d:c0
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIDA3VGMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGRm
MjZkNmY0MmZmY2E2MjkxYzZjNWM2MTYwMWY5MTZkN2U1OWEyZDMwHhcNMjMwNzEw
MTI1MTM5WhcNMjUwNzExMTI1MTM5WjAzMTEwLwYDVQQDEyg0OWUyMGFmNDcyNjJm
ZGE3MWQ1Yjk0NTk3ZTE0OWVmNmUyNzNhNzJmMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsTZ31yAm3EgYU9FpseRrfbpz9Tmoa5gFhgtlKzFIfg3oUU7l
rqoqyqQ9zeVzNh3sfakaMmfStfs2D8QyvmvF97OYoEoVbhx7Vwp74dvgBXUs7mAf
xsTNMCykdfZQVy9T60pTxUaGvRxgGSuo1FduUuH16ko9yaDvbpmODSb9FFxYez7t
W4gnjhZvudGtDAgPsqJY2nqX86iKBvadokfSOoM76KMb1SIWNLsw3ogfU2hz7aVN
nplMuZj2VwB4Cw6YUSSJLw35uKNfN8jn6Io2+FoeAhXminlpGt0igfjtmZkJ7H83
ZT0O07aXOIHx/Bu+1rYds1mtiyVHjYi0iJh6owIDAQABo4ICWjCCAlYwHQYDVR0O
BBYEFAEcMpUZ/KsV5cytvJqLNEBOf8iVMB8GA1UdIwQYMBaAFM2qHwCJ05renW3b
eH+AQ9p8hu5IMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZGYyNmQ2
ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJkMy5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvNjVkYjQxNWItYjNkZC00ZjQxLWJlZTMtMjg0ZWRh
MWQ3ZTU5LzQ5ZTIwYWY0NzI2MmZkYTcxZDViOTQ1OTdlMTQ5ZWY2ZTI3M2E3MmYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy82NWRiNDE1Yi1iM2RkLTRmNDEtYmVlMy0yODRl
ZGExZDdlNTkvZGYyNmQ2ZjQyZmZjYTYyOTFjNmM1YzYxNjAxZjkxNmQ3ZTU5YTJk
My5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQP
MA0wCwQCAAEwBQMDAbWgMA0GCSqGSIb3DQEBCwUAA4IBAQA0kyVNhpUNanalK0RJ
8fY2L/sRf6Kp8vb3lX/IxPx8tjIvecciuPFSHd5YX9VhDLsWgHJRC9t0KLNjdEz8
B9Jl69n3rnHXPVIu0qLAYE61lWZvI0DbueiNx5em1kG3ZOYko/MQfsVgfO8mVBpK
XSxWoxF8Q7aKryfhc9aBAlrW2eh96xk8JU8AWRHsqFQ1FBWI3IDf7Db+z3y7WbAG
kG62WRW5j1pfU02opPVHDq0IbOrEWrq1F96PaBayC3XQHXv+67clmqbvf2pVfjGV
8hNO/27aY18KsZne3SBuEtyt/n2lpgcZEhG25iWSauRSFxqzi4RXeJQcPwBsPuvV
po3A
-----END CERTIFICATE-----