Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/1a80fa7b831fe63f99240a0d048f65a66d1a1be0.roa
File:                     1a80fa7b831fe63f99240a0d048f65a66d1a1be0.roa (raw, json)
Hash identifier:          j1xkzU7Taz5tlcU5/AR7SHOQ/xgElY/M0puFxEErXCU=
Subject key identifier:   D8:4B:90:F9:AC:77:A1:F6:60:F4:C3:8B:C5:8E:E8:A3:CE:11:07:67
Certificate issuer:       /CN=4a3d4fdf5d4afff13254531592d21c29a5ad3196
Certificate serial:       075948
Authority key identifier: 9F:B3:09:64:3E:AC:FE:F8:8C:AE:4C:7B:C0:BC:58:B2:FC:C8:E5:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3d4fdf5d4afff13254531592d21c29a5ad3196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/1a80fa7b831fe63f99240a0d048f65a66d1a1be0.roa
Signing time:             Mon 29 May 2023 19:29:50 +0000
ROA not before:           Sun 28 May 2023 19:29:50 +0000
ROA not after:            Thu 29 May 2025 19:29:50 +0000
asID:                     272038
IP address blocks:        181.233.180.0/22 maxlen: 24
                          2803:4d10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481608 (0x75948)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3d4fdf5d4afff13254531592d21c29a5ad3196
        Validity
            Not Before: May 28 19:29:50 2023 GMT
            Not After : May 29 19:29:50 2025 GMT
        Subject: CN=1a80fa7b831fe63f99240a0d048f65a66d1a1be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:63:c8:91:34:a6:73:dd:55:c8:f6:96:62:27:
                    d7:7a:46:50:08:2b:e6:f8:9a:f6:5e:31:23:a3:f8:
                    ea:64:61:02:43:bb:96:b4:02:9b:45:6e:16:50:44:
                    e6:e4:ad:41:d6:25:2d:25:70:a7:a3:ef:21:84:ac:
                    4a:b3:33:cb:b9:23:8d:7b:94:4c:25:0c:9a:71:70:
                    68:89:7c:e4:34:e3:22:8a:8f:c0:e4:d5:9a:0b:7a:
                    c6:cc:9a:90:33:ff:46:92:f1:2b:30:dc:53:44:d3:
                    61:ba:0d:6a:8e:72:57:37:97:ae:66:9d:72:7e:2b:
                    58:fb:08:e6:66:2c:be:5b:fb:df:b6:c9:73:cf:a1:
                    07:f1:4d:10:88:f1:e0:20:8a:e9:c0:41:b8:c1:d5:
                    fc:99:40:ea:30:31:0d:f9:b7:8e:8b:75:3d:96:36:
                    be:c6:f0:5c:36:67:c3:7f:e9:5b:d0:a4:62:0f:0b:
                    fb:d8:2c:b7:b1:e5:e1:2e:fe:c8:f1:5e:9f:1c:69:
                    a9:31:d6:2e:d2:81:b8:e1:3e:3a:2d:77:e3:89:ef:
                    ac:18:3d:7b:4a:8a:d4:cc:1b:a1:ae:e7:1f:e2:63:
                    d1:3a:27:80:b4:87:fb:22:33:41:15:fb:49:49:a8:
                    c9:74:78:c5:f5:d5:46:80:97:01:9f:2a:9c:e3:16:
                    da:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:4B:90:F9:AC:77:A1:F6:60:F4:C3:8B:C5:8E:E8:A3:CE:11:07:67
            X509v3 Authority Key Identifier:
                keyid:9F:B3:09:64:3E:AC:FE:F8:8C:AE:4C:7B:C0:BC:58:B2:FC:C8:E5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3d4fdf5d4afff13254531592d21c29a5ad3196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/1a80fa7b831fe63f99240a0d048f65a66d1a1be0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/4a3d4fdf5d4afff13254531592d21c29a5ad3196.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.180.0/22
                IPv6:
                  2803:4d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:f2:6d:74:92:77:e6:a0:3d:05:28:9f:cd:1b:a2:5b:a0:c5:
         0b:1a:e0:55:b1:78:c8:2d:98:61:10:7d:d1:91:ff:1e:36:01:
         58:f4:47:d2:54:dc:8f:d5:b8:fb:19:26:31:47:00:bc:af:72:
         0f:fe:fe:3d:3e:96:e2:65:1e:8f:c6:9d:17:c4:1b:15:71:4b:
         a4:f3:a5:df:2c:62:f3:82:3f:54:44:13:0b:62:81:53:6e:09:
         37:1d:41:50:29:65:8e:bd:b4:b9:ea:e0:1e:68:53:37:86:4e:
         92:41:a4:b6:68:55:d9:ba:b4:26:e1:fb:d9:f8:10:e6:fb:00:
         5e:bc:9a:d8:c5:42:c1:45:fc:95:8c:f5:c5:93:90:e6:46:68:
         ac:4b:cb:71:83:2a:47:8a:11:71:f5:b6:44:79:18:ba:a8:f2:
         f7:89:0a:15:48:cb:9f:bc:55:21:04:c5:05:b7:b0:81:1d:b7:
         b3:56:18:5b:3b:ad:b7:8b:d2:2d:e7:d1:cd:ff:cd:db:6e:95:
         2e:c4:b7:85:36:79:fc:c3:a9:19:93:9b:37:18:71:9a:02:ee:
         de:3f:5b:f3:e8:9c:67:b8:c8:2d:b5:49:ee:c9:37:25:bb:81:
         fd:cd:e8:db:e5:a7:95:0b:01:c6:90:79:7e:d3:ea:80:dd:74:
         8e:45:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----