Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d54f10a-7480-42ca-b336-fdb14396a612/5e70b1ce0e0d717dadc891c2112c177c77cb1b7c.roa
File:                     5e70b1ce0e0d717dadc891c2112c177c77cb1b7c.roa (raw, json)
Hash identifier:          CQkC0UuqgFdP8sRpPqUlL7z8WZOUjJdLa171rvUXDm4=
Subject key identifier:   53:37:5B:84:1E:E8:8C:B1:EE:01:1F:89:EA:E4:BB:AD:56:6D:75:A8
Certificate issuer:       /CN=86f774323c235bf52b2cb5fa18f7945e51ca702c
Certificate serial:       219193
Authority key identifier: 7F:CB:FE:18:7B:BB:C4:B4:F4:50:A2:70:DE:43:72:FC:35:3F:F9:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86f774323c235bf52b2cb5fa18f7945e51ca702c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d54f10a-7480-42ca-b336-fdb14396a612/5e70b1ce0e0d717dadc891c2112c177c77cb1b7c.roa
Signing time:             Tue 27 Jun 2023 14:30:00 +0000
ROA not before:           Mon 26 Jun 2023 14:29:59 +0000
ROA not after:            Fri 27 Jun 2025 14:29:59 +0000
asID:                     27754
IP address blocks:        181.41.224.0/19 maxlen: 24
                          2803:ca00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2199955 (0x219193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86f774323c235bf52b2cb5fa18f7945e51ca702c
        Validity
            Not Before: Jun 26 14:29:59 2023 GMT
            Not After : Jun 27 14:29:59 2025 GMT
        Subject: CN=5e70b1ce0e0d717dadc891c2112c177c77cb1b7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:12:10:c2:a7:09:e0:70:61:6f:e1:67:35:
                    d1:57:3d:bf:d6:15:c5:69:ff:15:d1:ee:c5:64:fb:
                    88:44:d1:e3:dc:d1:22:ef:a2:a9:71:15:12:eb:d7:
                    1f:d7:92:17:65:eb:b1:15:a4:0c:04:e5:6e:7f:fa:
                    d4:81:7f:9f:30:b3:c5:2f:4d:f5:39:6f:74:e0:2d:
                    40:3b:a6:42:3f:c7:26:ba:9a:4a:94:15:ea:f9:f3:
                    49:7e:01:d6:8e:79:89:9c:c1:bd:ec:37:c6:4f:5b:
                    b4:a1:57:36:17:14:ca:61:26:6c:fa:ba:27:ff:f9:
                    7c:43:9d:5b:12:47:a1:fd:4d:52:94:61:e2:31:fd:
                    10:59:c9:fe:b4:94:91:66:08:9b:75:66:9a:93:2d:
                    f9:d6:07:2d:a3:32:81:0a:6b:e9:6d:3d:f2:1a:2d:
                    e0:ff:43:a3:68:7e:d3:f7:f9:c4:fa:a6:29:0b:fd:
                    02:1e:6e:92:28:72:83:ad:90:11:ab:d1:a4:8c:b2:
                    49:0f:00:9b:4c:80:82:ee:ea:7c:a5:fb:bc:76:39:
                    34:d8:2d:31:c4:bf:f3:90:97:7d:37:48:a7:2c:b8:
                    e2:6c:dd:5a:85:b6:ce:2c:ba:e2:d3:ae:a0:08:0a:
                    7b:db:16:df:77:7a:15:df:9a:d2:8e:2f:b5:c5:2d:
                    a5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:37:5B:84:1E:E8:8C:B1:EE:01:1F:89:EA:E4:BB:AD:56:6D:75:A8
            X509v3 Authority Key Identifier:
                keyid:7F:CB:FE:18:7B:BB:C4:B4:F4:50:A2:70:DE:43:72:FC:35:3F:F9:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86f774323c235bf52b2cb5fa18f7945e51ca702c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d54f10a-7480-42ca-b336-fdb14396a612/5e70b1ce0e0d717dadc891c2112c177c77cb1b7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d54f10a-7480-42ca-b336-fdb14396a612/86f774323c235bf52b2cb5fa18f7945e51ca702c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.41.224.0/19
                IPv6:
                  2803:ca00::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:76:52:8b:07:33:68:e9:2a:56:47:d5:88:a0:d9:d3:43:61:
         7c:a3:69:b7:0d:b4:23:2e:6b:d2:40:dc:0c:69:fd:67:33:08:
         9f:ae:29:1e:0d:af:cb:58:e8:4d:8b:b7:04:18:1a:99:62:4f:
         6c:56:74:7d:18:d3:0d:e9:cf:04:eb:73:02:9a:37:56:9f:32:
         ed:40:93:d3:3f:13:9b:2f:a7:7a:bf:0d:85:95:81:3f:2d:a3:
         de:a7:11:df:20:9f:bc:9e:33:b5:ad:07:0d:14:87:23:ac:d3:
         70:98:98:44:08:56:24:01:52:ea:48:ff:9e:6d:92:42:42:8c:
         87:8a:ef:68:00:1c:de:a3:ad:4e:38:31:58:09:4a:5e:ea:1d:
         e4:19:44:e0:4f:01:f7:69:0c:1a:08:76:93:81:fc:38:c1:e5:
         7a:08:4b:c5:19:07:b5:ce:3c:dc:13:15:64:5a:30:b5:fb:16:
         50:cd:06:ea:3d:d5:62:96:a2:f4:aa:c4:f2:63:90:4d:f3:78:
         fe:43:b5:81:ce:86:b5:e9:68:5e:a5:71:84:5d:85:39:b7:b4:
         f4:ad:63:2f:a7:4c:9a:ad:a5:38:2c:96:fb:fe:43:86:0d:ba:
         c7:18:d7:fe:d0:6a:c1:56:fc:01:29:e4:92:25:9f:59:a5:10:
         0e:8c:ac:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----