Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/552769506b638345418c3a48a896f32356b18a99.roa
File:                     552769506b638345418c3a48a896f32356b18a99.roa (raw, json)
Hash identifier:          WQWUE5ctwd3fXaXbj9QYdviz3OsWFSlp6++u38DIf5c=
Subject key identifier:   E5:27:1A:28:91:6F:7D:63:6E:A3:38:18:95:39:DC:0D:A6:05:11:78
Certificate issuer:       /CN=ca3e60b9e70de193811d28eb980481081c28545b
Certificate serial:       0C499B
Authority key identifier: 55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/552769506b638345418c3a48a896f32356b18a99.roa
Signing time:             Thu 27 Jul 2023 23:58:04 +0000
ROA not before:           Wed 26 Jul 2023 23:58:04 +0000
ROA not after:            Sun 27 Jul 2025 23:58:04 +0000
asID:                     272062
IP address blocks:        181.232.156.0/22 maxlen: 23
                          2803:a310::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 805275 (0xc499b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca3e60b9e70de193811d28eb980481081c28545b
        Validity
            Not Before: Jul 26 23:58:04 2023 GMT
            Not After : Jul 27 23:58:04 2025 GMT
        Subject: CN=552769506b638345418c3a48a896f32356b18a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:7a:4a:d0:cd:31:f4:17:36:c9:9c:2b:c0:6c:
                    99:47:8f:7c:a2:b9:e4:b2:3a:8e:45:02:17:01:13:
                    50:14:b7:dc:bb:0c:b9:6e:ca:bb:63:f5:e2:83:05:
                    51:a9:34:47:d3:0d:db:13:e8:29:fd:e2:fb:d1:70:
                    c0:a7:3d:4c:dd:6d:54:7f:5c:ce:1d:7d:21:40:54:
                    53:28:65:20:51:7e:08:8f:a9:20:3e:83:b6:c4:d9:
                    1d:9f:6a:ac:18:81:24:e0:43:48:2c:b1:c3:46:19:
                    a8:68:d3:05:cb:db:ae:7b:b0:53:c8:b3:5b:a0:d6:
                    c0:63:31:ae:77:b7:94:b6:65:f8:1c:04:e3:ee:ee:
                    a1:cc:69:ed:cb:c8:91:80:0d:8c:b0:64:6e:01:07:
                    fe:a4:40:b2:ee:b1:ef:c9:f4:c2:82:75:3e:b2:39:
                    e6:44:e9:61:ba:ce:f4:e0:ff:84:a9:ba:be:a3:d0:
                    63:d9:f3:0b:07:02:ef:a1:f7:a6:ed:02:15:c6:da:
                    8f:e6:9d:de:57:3e:68:2d:51:47:f2:e8:c7:84:92:
                    2e:14:cd:17:e2:e1:64:1d:28:2d:a2:6c:6b:23:89:
                    7f:e5:0a:da:44:59:c6:95:14:ca:d3:e1:90:57:f5:
                    33:ab:6c:15:ef:16:b7:d6:bc:4a:b0:02:4d:95:6a:
                    8f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:27:1A:28:91:6F:7D:63:6E:A3:38:18:95:39:DC:0D:A6:05:11:78
            X509v3 Authority Key Identifier:
                keyid:55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/552769506b638345418c3a48a896f32356b18a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ca3e60b9e70de193811d28eb980481081c28545b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.156.0/22
                IPv6:
                  2803:a310::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:c1:13:0c:c1:ab:be:a6:da:c2:2c:0c:75:a7:f7:a1:e3:02:
         23:e2:b1:0e:28:47:d8:eb:91:60:7f:2a:43:08:df:cb:17:0c:
         d2:64:94:29:e2:5e:9f:b8:5d:16:30:8b:37:ae:6d:19:46:99:
         6f:de:6d:f1:6a:be:e5:48:7b:c2:e4:7c:7e:6b:a0:7a:4b:87:
         67:7a:a7:f1:41:00:40:b4:49:5a:6d:14:32:67:ce:64:57:6a:
         b9:19:c1:07:a0:43:bc:79:45:77:65:ce:2c:e9:72:a2:50:2f:
         a4:5e:0b:98:c6:5c:5a:f8:c0:08:6d:17:e8:36:b7:4b:19:a9:
         42:a8:1b:49:7e:dd:58:9b:8d:fa:65:62:66:82:49:1a:d9:ca:
         68:c2:33:2a:13:1a:88:41:17:e3:b2:a1:39:e4:8c:94:2b:a5:
         e8:a4:3c:63:a6:3a:b2:ea:78:68:ad:08:24:37:e4:e1:45:6d:
         7a:34:a9:0b:46:51:76:a5:9e:55:f2:a8:5d:ba:f8:37:3b:00:
         e6:5b:bc:a9:ca:89:1b:dd:9e:3f:c5:83:fb:70:0d:86:a3:46:
         88:ad:79:6f:de:b6:4a:5c:93:ba:75:35:91:b2:99:ff:aa:70:
         dc:5e:5d:27:99:d1:f1:2c:1c:48:bc:bb:36:d7:43:4e:3f:e5:
         13:c5:a0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----