Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/d9daf4fda71bb674d6e0690ec33ccb4aaf661103.roa
File:                     d9daf4fda71bb674d6e0690ec33ccb4aaf661103.roa (raw, json)
Hash identifier:          RL7XQtv7aN4hoWqPZbnLAKHwmDDc7FKoGS3a10J+x9c=
Subject key identifier:   56:70:72:D2:58:EE:82:6A:E9:1D:2C:56:D1:1E:0B:F5:62:28:98:81
Certificate issuer:       /CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
Certificate serial:       035F5F
Authority key identifier: CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/d9daf4fda71bb674d6e0690ec33ccb4aaf661103.roa
Signing time:             Tue 11 Jul 2023 12:49:30 +0000
ROA not before:           Mon 10 Jul 2023 12:49:30 +0000
ROA not after:            Fri 11 Jul 2025 12:49:30 +0000
asID:                     7418
IP address blocks:        181.162.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221023 (0x35f5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df26d6f42ffca6291c6c5c61601f916d7e59a2d3
        Validity
            Not Before: Jul 10 12:49:30 2023 GMT
            Not After : Jul 11 12:49:30 2025 GMT
        Subject: CN=d9daf4fda71bb674d6e0690ec33ccb4aaf661103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:92:7d:3d:90:3a:d8:06:59:d8:4e:e4:d1:c8:
                    54:5c:69:03:87:99:a4:8b:ba:84:59:71:8a:54:e6:
                    39:40:13:e5:ae:67:04:59:1b:41:fb:62:52:a6:d6:
                    ea:02:c3:97:d9:35:b1:e9:5b:d2:0e:3c:e4:0d:bd:
                    ec:fc:97:54:b2:25:32:17:18:56:c2:34:59:4a:72:
                    5d:3d:d7:2d:d4:2a:8b:b3:91:fc:0b:55:bc:f6:6a:
                    0b:95:e1:c5:7f:e7:56:2b:f3:b3:7c:91:6d:16:c8:
                    06:55:97:b8:12:01:da:20:41:65:56:f7:77:04:b9:
                    8b:91:fa:d7:1b:fe:76:0c:f9:34:25:ca:6e:ff:22:
                    04:69:fc:7e:42:26:40:00:f9:9d:1d:1a:5a:40:fc:
                    59:cf:ed:9c:5a:d7:e1:2c:c7:e1:4c:f0:ad:aa:68:
                    9a:5d:04:54:4f:35:bf:0e:f8:56:8f:8c:69:63:19:
                    62:21:61:cc:57:49:c5:c5:c3:b2:7a:d7:73:14:33:
                    fd:a5:a3:53:44:47:93:16:81:a8:1f:ba:5d:5d:32:
                    99:12:af:d0:7d:37:e1:38:81:9a:03:6f:b5:91:fa:
                    7f:0a:d7:60:f5:7b:5b:78:cc:7f:3e:60:71:46:22:
                    ae:3d:55:d9:35:eb:38:fe:b7:f8:9a:3b:99:0f:b5:
                    28:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:70:72:D2:58:EE:82:6A:E9:1D:2C:56:D1:1E:0B:F5:62:28:98:81
            X509v3 Authority Key Identifier:
                keyid:CD:AA:1F:00:89:D3:9A:DE:9D:6D:DB:78:7F:80:43:DA:7C:86:EE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/d9daf4fda71bb674d6e0690ec33ccb4aaf661103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/65db415b-b3dd-4f41-bee3-284eda1d7e59/df26d6f42ffca6291c6c5c61601f916d7e59a2d3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.162.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         32:3d:90:a9:e3:ab:23:85:bb:a8:79:d2:27:3b:0d:a9:c2:d2:
         24:46:90:c1:b6:95:96:5f:0b:b6:1d:a0:06:a1:e7:47:6b:0d:
         7f:6a:d6:84:da:23:dc:f4:67:5d:3a:7c:66:e0:51:06:6c:05:
         f6:88:02:0a:86:e4:f5:87:4a:36:32:07:54:a5:da:61:04:bc:
         2b:6f:e0:0b:21:02:b9:b8:38:d3:4f:54:03:f7:6a:85:44:59:
         cd:56:bf:97:c1:1c:2d:02:d5:6a:e4:85:9f:24:69:5c:35:1a:
         43:44:04:2d:0a:f1:e7:15:bb:fc:d8:cf:ce:ad:38:c1:36:9b:
         e7:22:d8:7c:2e:94:31:cb:23:f0:d1:50:59:21:1f:5d:cb:f4:
         cf:8b:6d:d1:21:d6:25:3c:0c:36:7a:19:4f:e7:40:5e:fa:df:
         c1:73:31:60:99:e9:c8:b9:01:8f:fb:79:b0:d4:b2:52:01:7a:
         a1:77:67:63:af:a1:40:bf:15:52:41:37:f5:5c:7a:2d:85:52:
         4d:9b:51:72:de:98:a3:be:dc:de:0c:f7:dc:62:dc:81:1e:a0:
         8a:6e:11:98:1c:8d:03:2f:3f:5e:50:d5:28:88:d8:0f:77:c8:
         a9:75:3f:0a:b6:39:9d:69:97:b6:5b:a7:54:7e:3a:88:c0:3b:
         72:8f:e2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----