Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/80b1ec29-6b64-40d8-915d-498a99dca9e5/25d083f043b0329afa247d0ae54dcb4094fd3758.roa
File:                     25d083f043b0329afa247d0ae54dcb4094fd3758.roa (raw, json)
Hash identifier:          5fzDuqwU9WFK9IM/A3UIXZoQSrAyE+HnyuqT4eu5AU8=
Subject key identifier:   01:20:DD:B4:3E:FA:83:7A:92:44:A9:E2:75:AB:AA:C8:21:BD:62:A9
Certificate issuer:       /CN=b8b8ea4db9b3064d98014509a427acd3924e9fff
Certificate serial:       0427F9
Authority key identifier: 78:0F:E9:7D:39:4A:EA:7B:F8:B4:49:2E:B6:76:1E:1B:31:B1:4B:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8b8ea4db9b3064d98014509a427acd3924e9fff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/80b1ec29-6b64-40d8-915d-498a99dca9e5/25d083f043b0329afa247d0ae54dcb4094fd3758.roa
Signing time:             Tue 01 Nov 2022 16:04:04 +0000
ROA not before:           Mon 31 Oct 2022 15:42:25 +0000
ROA not after:            Fri 01 Nov 2024 15:42:25 +0000
asID:                     272147
IP address blocks:        181.232.252.0/23 maxlen: 24
                          2803:3090::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 272377 (0x427f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8b8ea4db9b3064d98014509a427acd3924e9fff
        Validity
            Not Before: Oct 31 15:42:25 2022 GMT
            Not After : Nov  1 15:42:25 2024 GMT
        Subject: CN=25d083f043b0329afa247d0ae54dcb4094fd3758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:22:7c:b7:a2:3e:4e:71:8b:0a:6f:35:e6:86:
                    d5:69:01:67:40:dc:d0:a2:78:71:1c:a1:9a:15:e8:
                    70:d5:73:1c:6b:cb:7b:8c:c4:88:db:83:41:ce:91:
                    82:19:3a:b8:00:3a:35:05:c0:1f:36:ac:c2:02:f5:
                    a4:e9:56:e0:a3:90:70:49:85:66:c1:b7:a2:bb:4c:
                    48:8b:5e:b3:94:cb:e9:10:81:ca:46:21:c2:9f:27:
                    52:21:93:1a:36:15:73:25:1a:cb:db:12:cd:0e:5c:
                    c7:8b:15:2c:2f:e6:d2:db:b3:98:47:90:97:c1:7f:
                    62:8c:6c:d7:ae:47:52:e1:6e:9e:70:7a:02:b1:00:
                    67:d0:09:3e:4c:6d:75:4c:3f:99:4d:3f:31:eb:bd:
                    65:83:f6:c9:ac:bc:bc:f1:e3:f9:54:bc:aa:c4:fd:
                    77:77:88:b5:f8:2d:cd:16:4c:9a:f4:cf:2f:c0:4d:
                    44:a9:d8:e6:25:35:ca:57:82:b3:66:ae:38:66:08:
                    e7:c8:12:fa:46:eb:c5:c0:f8:7f:d6:9c:28:05:47:
                    c1:b6:fb:e9:6b:1c:99:98:59:95:a5:3a:62:2c:9d:
                    ad:e3:9b:03:1e:43:2c:a6:1a:96:26:62:b7:f5:27:
                    cc:34:76:b0:f4:a8:b5:cd:4a:6d:b5:dd:c7:5d:60:
                    9e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:20:DD:B4:3E:FA:83:7A:92:44:A9:E2:75:AB:AA:C8:21:BD:62:A9
            X509v3 Authority Key Identifier:
                keyid:78:0F:E9:7D:39:4A:EA:7B:F8:B4:49:2E:B6:76:1E:1B:31:B1:4B:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b8b8ea4db9b3064d98014509a427acd3924e9fff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/80b1ec29-6b64-40d8-915d-498a99dca9e5/25d083f043b0329afa247d0ae54dcb4094fd3758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/80b1ec29-6b64-40d8-915d-498a99dca9e5/b8b8ea4db9b3064d98014509a427acd3924e9fff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.252.0/23
                IPv6:
                  2803:3090::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:29:db:0b:78:8e:70:17:2e:5c:37:7f:94:aa:48:90:fb:97:
         71:24:10:df:79:75:f9:80:2f:3b:fe:32:97:ba:4a:47:56:d8:
         c1:12:91:21:69:17:3f:ae:70:13:6e:b2:ad:b4:35:c4:c3:0c:
         96:b5:2d:9e:bc:0a:9d:58:36:13:57:d3:3a:a4:65:b1:7a:80:
         b8:17:47:b9:c2:45:d6:58:83:0b:ff:14:b5:57:6f:b6:b2:78:
         3d:3e:c0:c3:b6:ca:c9:b6:48:79:8f:6e:2d:b3:61:3a:f2:2f:
         7b:e7:49:a5:5b:2e:05:8a:72:2f:d4:a4:95:4a:25:c1:58:5d:
         ac:54:61:34:78:5c:fe:f1:67:70:0d:e5:7a:ac:a1:33:b5:53:
         6c:37:c7:fc:14:d3:e1:80:c7:6e:ae:af:ee:b3:2e:03:bc:c2:
         eb:cb:06:79:76:16:aa:c4:9a:ed:82:6b:c5:53:3a:18:c6:fb:
         a0:22:ac:92:55:c2:ff:e3:fa:c6:ee:db:01:df:48:78:1d:3e:
         0f:ef:d1:75:53:ce:37:91:1e:5d:87:0c:ad:1a:6f:e1:fd:fa:
         7d:6e:e6:70:fb:2c:17:87:5a:9a:48:e9:be:21:7f:43:5b:7a:
         4b:e7:46:96:36:5a:57:28:96:5b:71:58:54:86:77:8f:49:d0:
         37:d3:b1:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----