Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/6f58897e888395bacfdd83d40899ae0b730e6260.roa
File:                     6f58897e888395bacfdd83d40899ae0b730e6260.roa (raw, json)
Hash identifier:          1iHJJnBF8QdcoBa3yLAMBXtUE7RgYFmaGp/yaTWxAto=
Subject key identifier:   52:0B:35:F1:70:88:CC:97:62:22:58:3F:67:47:A6:60:D1:F8:9B:81
Certificate issuer:       /CN=4a3d4fdf5d4afff13254531592d21c29a5ad3196
Certificate serial:       0C42DD
Authority key identifier: 9F:B3:09:64:3E:AC:FE:F8:8C:AE:4C:7B:C0:BC:58:B2:FC:C8:E5:FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3d4fdf5d4afff13254531592d21c29a5ad3196.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/6f58897e888395bacfdd83d40899ae0b730e6260.roa
Signing time:             Wed 13 Dec 2023 20:47:36 +0000
ROA not before:           Wed 13 Dec 2023 20:47:36 +0000
ROA not after:            Sat 13 Dec 2025 20:47:36 +0000
asID:                     272038
IP address blocks:        181.233.182.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803549 (0xc42dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a3d4fdf5d4afff13254531592d21c29a5ad3196
        Validity
            Not Before: Dec 13 20:47:36 2023 GMT
            Not After : Dec 13 20:47:36 2025 GMT
        Subject: CN=6f58897e888395bacfdd83d40899ae0b730e6260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:f4:77:40:c0:e8:f5:e1:11:95:ab:c6:e9:
                    d8:25:c9:23:11:a9:fa:f4:21:2d:ba:ca:01:e7:5e:
                    ef:fb:7f:8c:ca:d9:1e:6a:7d:ea:ee:91:89:a4:18:
                    e1:37:c8:9c:55:86:fd:83:b5:86:2c:0b:e4:50:4e:
                    eb:d2:8c:dd:4c:46:d2:cb:4b:45:6d:0a:09:b6:d8:
                    77:e9:b8:22:73:b8:39:35:bc:4b:8a:5d:13:1b:0f:
                    df:2c:83:f3:d1:60:fd:9d:15:01:d6:b2:f7:8a:6a:
                    93:7a:26:77:e2:68:81:41:3b:08:e0:4c:ae:b4:27:
                    bb:2a:7a:10:b4:ad:45:04:41:d6:35:3d:0f:70:fc:
                    09:68:be:6b:3d:e9:ea:7f:90:8a:92:c1:28:7e:f0:
                    4f:3a:0c:2d:6a:78:2b:06:0d:8e:01:29:c0:8f:78:
                    c0:3e:e7:47:1f:82:d5:30:5f:94:fe:22:cc:e6:9e:
                    0e:39:63:57:8b:9d:6e:a7:8d:c7:c2:4f:c1:42:ae:
                    0f:33:d6:d1:e0:66:45:cd:19:a5:62:ed:73:9b:d5:
                    40:70:c1:83:fc:39:b8:29:31:c3:1d:58:b4:5e:84:
                    90:60:c7:0f:2b:80:db:85:e0:8a:55:6f:dd:f8:3a:
                    39:22:3b:91:98:a1:f1:b8:af:5a:0f:b0:27:91:df:
                    d3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:0B:35:F1:70:88:CC:97:62:22:58:3F:67:47:A6:60:D1:F8:9B:81
            X509v3 Authority Key Identifier:
                keyid:9F:B3:09:64:3E:AC:FE:F8:8C:AE:4C:7B:C0:BC:58:B2:FC:C8:E5:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3d4fdf5d4afff13254531592d21c29a5ad3196.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/6f58897e888395bacfdd83d40899ae0b730e6260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/4a3d4fdf5d4afff13254531592d21c29a5ad3196.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:14:f0:d7:d2:a7:43:10:4d:33:72:60:88:23:67:4c:15:38:
         ff:0c:db:b9:72:02:83:26:17:9c:52:33:95:b5:9a:5c:26:27:
         0a:9c:b4:2e:c0:5c:a0:3b:eb:11:87:a1:f3:14:1d:de:dd:bc:
         89:ee:d1:8e:9a:f5:be:f5:8f:70:38:74:fb:2e:a8:ce:3b:a2:
         f1:e7:a4:3e:40:5d:c8:b3:7a:ec:09:cb:d6:01:2d:23:48:dd:
         dd:4d:4a:24:23:b0:b3:ea:45:9b:6a:4c:18:11:eb:54:6f:b4:
         c8:86:84:b8:f6:c0:e6:13:44:32:ff:99:09:9c:22:d4:23:f7:
         7e:0c:cb:67:0b:be:53:53:a4:4b:a6:86:63:36:40:c9:73:a0:
         05:05:e1:28:93:be:46:9b:98:62:a2:e9:a1:e3:f4:27:b9:87:
         f0:a3:d5:54:10:20:52:48:49:49:ce:88:9a:f3:a0:74:ef:8f:
         f7:7a:42:2e:9a:db:ce:68:c0:46:2c:21:9d:50:5c:1c:5c:65:
         80:3d:06:db:84:44:8f:82:d5:54:66:56:a3:b7:dc:6b:76:0b:
         0d:5d:98:fe:b4:fa:37:01:5a:4d:ca:65:18:68:fe:df:99:40:
         52:f7:f6:c5:a2:dd:97:7b:36:22:df:a9:7e:65:39:14:2e:6e:
         78:66:80:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----