Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/5d1d6c6a5facba26a6d14eb6b111b02a541458f2.roa
File:                     5d1d6c6a5facba26a6d14eb6b111b02a541458f2.roa (raw, json)
Hash identifier:          KD5A88G/ihYZK8s6WzvaI35uFfG9Rvbikx10blPua9A=
Subject key identifier:   13:61:F0:0C:A6:60:9D:48:BD:20:47:07:ED:1B:F6:27:30:DA:3A:C2
Certificate issuer:       /CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
Certificate serial:       05C7
Authority key identifier: F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/5d1d6c6a5facba26a6d14eb6b111b02a541458f2.roa
Signing time:             Tue 29 Nov 2022 17:27:25 +0000
ROA not before:           Mon 28 Nov 2022 17:24:59 +0000
ROA not after:            Fri 29 Nov 2024 17:24:59 +0000
asID:                     7418
IP address blocks:        181.172.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca241a84c27bfe35e84dea65f4a7db00fab553c
        Validity
            Not Before: Nov 28 17:24:59 2022 GMT
            Not After : Nov 29 17:24:59 2024 GMT
        Subject: CN=5d1d6c6a5facba26a6d14eb6b111b02a541458f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:05:82:c2:32:a1:70:6c:b5:1c:38:ee:56:
                    da:9d:f7:3d:ac:c9:82:c3:cb:ff:12:b7:b6:d1:6f:
                    ef:b9:62:d8:b1:b0:bd:34:14:f9:34:cf:e9:7a:d8:
                    ba:3a:c5:3e:09:ab:53:2f:00:d0:fd:b0:3b:39:1d:
                    ac:e2:ff:56:e7:fd:30:fe:53:ca:e6:4a:35:f3:fb:
                    67:7b:3b:df:e5:52:49:54:10:62:50:51:c7:b5:00:
                    ac:cb:e7:e7:f8:a0:61:cb:a7:0c:6e:ca:90:bb:9a:
                    15:64:84:42:2a:5d:57:a1:56:e8:16:93:97:8a:b6:
                    dd:0f:8f:42:85:99:49:51:ad:61:ba:7e:5a:6b:a4:
                    04:f2:50:9e:c8:e6:17:96:cf:38:54:97:9d:12:52:
                    0e:3c:df:02:35:41:62:67:c4:91:74:a6:9d:ee:42:
                    87:7f:0b:97:1a:99:9c:b1:ac:3c:b4:e9:0e:e8:36:
                    09:02:bf:68:63:60:01:de:b5:f5:2a:80:bc:30:7f:
                    d4:a0:53:b4:12:d0:36:27:08:1c:59:ce:80:4a:95:
                    86:96:8f:00:6a:d5:36:0f:40:1d:d2:26:42:9c:e4:
                    f7:78:07:0e:55:39:b9:e0:c2:b8:c7:4e:b3:9a:5c:
                    c4:8d:62:ca:3a:bb:b3:b2:39:70:a5:7d:bd:70:85:
                    e3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:61:F0:0C:A6:60:9D:48:BD:20:47:07:ED:1B:F6:27:30:DA:3A:C2
            X509v3 Authority Key Identifier:
                keyid:F4:58:60:FC:8C:F0:EC:66:8C:12:40:B7:75:C3:E2:4E:6C:36:03:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bca241a84c27bfe35e84dea65f4a7db00fab553c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/5d1d6c6a5facba26a6d14eb6b111b02a541458f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d7da0c3-c0a0-4dbb-a356-50448d749317/bca241a84c27bfe35e84dea65f4a7db00fab553c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.172.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         03:6f:24:2b:9d:a7:d2:b2:02:77:28:31:b3:88:f7:73:b5:5c:
         9e:5a:e8:2e:c7:e9:d5:a5:42:5a:b3:ce:98:81:d6:2b:61:c9:
         ba:70:ba:db:b2:77:61:42:b2:88:41:74:5f:9f:91:b4:84:4a:
         3d:49:df:51:a1:14:16:09:61:87:83:88:b8:ea:3c:22:f6:86:
         5a:9d:77:68:9e:4b:ee:a0:44:7c:62:fd:fc:10:04:e0:1d:3e:
         b8:45:fa:bb:e8:e4:e2:03:0d:6f:62:c5:60:00:82:aa:b6:85:
         ed:e1:9d:7a:02:53:8a:d3:8f:dc:8e:ff:cc:14:74:76:3f:ac:
         05:66:b6:13:ca:f3:a4:fe:1d:88:0f:0d:d4:59:88:b7:2f:f3:
         03:ee:36:d0:43:e3:68:14:9b:38:a8:61:6e:98:4f:10:ed:df:
         af:c2:9f:9c:2e:9f:69:04:6a:f7:83:66:01:9b:8a:63:dd:7d:
         f4:00:e5:07:90:84:6e:dc:2c:6a:56:e0:af:22:68:0e:b0:f0:
         d8:33:d2:29:84:9f:8e:4c:85:17:c5:e8:94:9c:6d:0d:87:e8:
         d1:87:af:3b:80:f1:5a:b0:18:e7:79:c2:fa:b3:a0:ce:b5:00:
         94:b4:62:86:39:4d:27:97:3f:c5:81:d8:d8:8e:42:fa:5e:f9:
         94:45:14:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----