Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/83be7180-05ac-41aa-a5b9-4e61e64cfa3a/bfee652db8330760d8c27605377fab41ad2abfc1.roa
File:                     bfee652db8330760d8c27605377fab41ad2abfc1.roa (raw, json)
Hash identifier:          GdFT9Xq+f9XaH90tGBX2AVIg43uU3JiHNsHl940aW7U=
Subject key identifier:   3D:D6:BD:92:52:12:F7:54:FA:BD:26:D3:03:EF:03:A8:F9:A5:3C:FA
Certificate issuer:       /CN=ea2c8002a2e2ca5031578192483aacbc7a21c41c
Certificate serial:       025F
Authority key identifier: 1E:FC:63:29:51:8D:F5:35:FA:52:B8:66:6C:20:A7:8A:96:65:71:EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea2c8002a2e2ca5031578192483aacbc7a21c41c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/83be7180-05ac-41aa-a5b9-4e61e64cfa3a/bfee652db8330760d8c27605377fab41ad2abfc1.roa
Signing time:             Tue 26 Jul 2022 12:25:13 +0000
ROA not before:           Tue 26 Jul 2022 03:00:00 +0000
ROA not after:            Fri 26 Jul 2024 03:00:00 +0000
asID:                     265805
IP address blocks:        201.182.188.0/22 maxlen: 24
                          2803:2820::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea2c8002a2e2ca5031578192483aacbc7a21c41c
        Validity
            Not Before: Jul 26 03:00:00 2022 GMT
            Not After : Jul 26 03:00:00 2024 GMT
        Subject: CN=bfee652db8330760d8c27605377fab41ad2abfc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c4:31:3f:5d:07:4e:c7:94:d2:16:27:56:41:
                    36:f2:a2:ba:a6:c5:3d:0a:05:be:27:f4:8e:cf:00:
                    66:61:17:f7:f0:00:3d:d3:ae:a7:ba:d5:29:e9:98:
                    b9:1a:fe:3d:d8:38:4c:65:11:e3:d3:97:ec:38:c0:
                    08:d3:26:a9:96:26:95:12:ae:e1:67:fe:21:a7:7a:
                    b1:bb:ed:52:87:a9:00:e1:70:18:a7:7a:b5:43:26:
                    fd:87:83:cc:23:71:23:00:96:3f:e6:da:56:19:84:
                    2c:83:9f:e7:d0:81:cb:50:2a:70:e8:e6:c5:a6:af:
                    05:2c:a0:e9:34:8b:c0:46:47:9a:ca:45:ce:b5:84:
                    de:e6:c2:a0:7c:ca:aa:bc:b8:60:df:89:96:af:7d:
                    ae:e8:fb:58:ee:08:eb:33:80:ad:d1:d0:2e:33:f5:
                    09:42:45:dc:07:df:c0:e3:b0:78:76:d6:97:3f:fa:
                    71:23:10:1d:36:7d:5d:9b:83:0e:5b:67:4a:a9:19:
                    b6:0c:61:63:d9:09:e4:67:a0:d5:3f:34:a4:3f:5c:
                    d4:79:93:07:ba:b5:04:d2:30:d6:eb:4b:50:8b:98:
                    33:0c:23:d7:04:bb:6b:3c:e7:ef:76:3f:41:7b:fc:
                    c0:8b:84:be:eb:d3:45:04:5d:32:b0:49:47:63:25:
                    ab:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D6:BD:92:52:12:F7:54:FA:BD:26:D3:03:EF:03:A8:F9:A5:3C:FA
            X509v3 Authority Key Identifier:
                keyid:1E:FC:63:29:51:8D:F5:35:FA:52:B8:66:6C:20:A7:8A:96:65:71:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea2c8002a2e2ca5031578192483aacbc7a21c41c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/83be7180-05ac-41aa-a5b9-4e61e64cfa3a/bfee652db8330760d8c27605377fab41ad2abfc1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/83be7180-05ac-41aa-a5b9-4e61e64cfa3a/ea2c8002a2e2ca5031578192483aacbc7a21c41c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.188.0/22
                IPv6:
                  2803:2820::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:8e:05:aa:00:88:64:b5:61:36:81:3e:33:19:f7:08:db:18:
         da:1b:9c:5b:29:2e:19:df:b7:3f:65:99:a8:59:6f:5a:83:0d:
         10:e7:d6:a8:18:ed:ef:22:f9:31:09:78:b0:3c:b0:ee:a0:f0:
         82:8a:cb:43:7c:b5:70:30:99:da:cf:c0:5e:de:e7:7f:77:6a:
         18:5f:c5:7c:f8:75:ab:81:6b:ef:e4:ed:59:e0:8f:2e:18:99:
         e3:8a:1e:57:13:73:b0:c5:c3:8b:dc:54:59:46:00:9f:4d:1e:
         b3:cf:bb:ee:4c:75:33:cc:66:a9:ac:fc:91:d5:e4:ae:05:fd:
         60:02:0a:19:f5:73:19:f5:21:da:83:1c:1f:af:0b:22:9f:e6:
         0c:f4:44:75:05:37:aa:bd:8b:45:d9:56:6c:fe:7e:dc:8c:93:
         85:c3:eb:e3:0f:08:cd:d4:c1:d1:c5:71:4d:67:d5:e7:19:d9:
         18:64:cd:07:5d:f5:06:4c:f5:da:42:36:7b:cf:6b:63:a9:12:
         45:15:a6:01:31:61:a3:b9:03:67:7b:a2:69:1d:bd:5b:8e:6e:
         8b:3f:38:29:25:85:13:70:93:02:09:07:44:23:41:e6:46:9c:
         33:21:ef:89:d1:28:96:34:4c:05:d6:87:a7:71:39:f6:c2:1c:
         a7:02:b1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----