Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/5d88260110c87d6976f57cdc186fb59416941ebd.roa
File:                     5d88260110c87d6976f57cdc186fb59416941ebd.roa (raw, json)
Hash identifier:          Cd/fBlTFrxVE7rXWBHkTQllLNssSDJMJ9jrRyxvkvKQ=
Subject key identifier:   C3:F7:4F:D3:E7:2B:BC:CD:73:70:AF:75:BB:3A:03:09:49:D9:DD:3A
Certificate issuer:       /CN=978e7d88424415725f3aaf2277c4a6e9a5313d10
Certificate serial:       209A2A
Authority key identifier: BB:67:34:7A:28:A3:06:DC:6A:46:9A:2A:1B:BC:80:5B:A8:94:90:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/978e7d88424415725f3aaf2277c4a6e9a5313d10.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/5d88260110c87d6976f57cdc186fb59416941ebd.roa
Signing time:             Wed 19 Apr 2023 15:20:07 +0000
ROA not before:           Tue 18 Apr 2023 15:20:07 +0000
ROA not after:            Sat 19 Apr 2025 15:20:07 +0000
asID:                     263170
IP address blocks:        181.114.56.0/22 maxlen: 24
                          2803:2080::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2136618 (0x209a2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=978e7d88424415725f3aaf2277c4a6e9a5313d10
        Validity
            Not Before: Apr 18 15:20:07 2023 GMT
            Not After : Apr 19 15:20:07 2025 GMT
        Subject: CN=5d88260110c87d6976f57cdc186fb59416941ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ed:cf:56:40:4c:af:b0:8e:62:46:ae:b7:95:
                    61:ad:20:c3:ef:ba:0b:7a:cb:7f:ff:97:f6:a0:13:
                    0a:5c:55:24:8c:40:e2:f3:47:87:04:f4:6a:82:5f:
                    20:0f:ce:2a:c3:54:91:9f:46:2e:74:ec:27:27:ab:
                    c2:7d:25:39:ce:fa:98:11:a7:3e:95:e7:54:f4:3f:
                    3a:cb:63:8a:d8:95:2e:d0:62:79:2f:50:d4:9a:e5:
                    66:0d:bd:b1:26:39:6a:f5:b3:76:d6:e5:f0:e6:1b:
                    ab:45:8d:d7:ae:87:e2:1a:40:00:05:90:f7:58:5a:
                    e3:bd:cc:cc:ab:ba:97:66:bc:8a:32:cb:72:8d:14:
                    09:c6:3a:d3:26:be:cf:a4:9c:5b:27:4c:9a:36:ca:
                    c3:aa:26:c2:db:3a:8d:10:64:23:39:ae:6e:46:6e:
                    cb:62:e6:66:bd:a0:ed:a7:52:40:e5:0b:15:b7:c4:
                    a2:6c:da:d3:c4:51:32:5c:4c:27:88:cb:8b:21:b6:
                    7d:3c:2d:9e:c8:03:2f:f8:2e:19:87:22:a3:02:48:
                    cc:e5:f5:83:ef:27:6d:b1:39:3e:a3:99:e9:f4:f7:
                    34:ec:16:d4:92:08:de:c2:73:db:4f:fc:dc:ec:49:
                    92:89:bb:5b:0e:3b:02:d8:6d:23:d2:5f:a6:69:6f:
                    ea:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F7:4F:D3:E7:2B:BC:CD:73:70:AF:75:BB:3A:03:09:49:D9:DD:3A
            X509v3 Authority Key Identifier:
                keyid:BB:67:34:7A:28:A3:06:DC:6A:46:9A:2A:1B:BC:80:5B:A8:94:90:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/978e7d88424415725f3aaf2277c4a6e9a5313d10.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/5d88260110c87d6976f57cdc186fb59416941ebd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/897dca2d-c59c-42f3-b81b-2d88c0b0b0d1/978e7d88424415725f3aaf2277c4a6e9a5313d10.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.114.56.0/22
                IPv6:
                  2803:2080::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:31:e0:9d:a5:f0:91:fe:31:66:e1:00:f9:c7:b9:93:1f:35:
         be:bf:67:9c:67:55:46:4e:f4:0d:4c:86:d0:b0:da:b8:02:cf:
         c0:5d:c6:a0:b2:b1:a3:82:ae:48:ec:36:83:e9:a9:32:61:31:
         e1:8f:18:dc:c7:fa:fe:e9:a4:af:52:02:01:b1:70:ec:35:02:
         18:0f:eb:74:17:b6:8a:d9:db:30:42:39:bb:b4:86:6c:26:af:
         8d:64:9a:5d:ea:42:27:f9:54:dd:fa:87:d0:cf:46:db:12:d4:
         d1:c5:3f:07:a0:e1:8f:97:9e:d9:51:f7:41:0f:f1:ec:6d:8b:
         bc:c7:71:61:dc:86:ad:e0:ef:09:63:0b:1a:34:4e:77:f6:a1:
         74:b1:8c:e5:df:cf:cd:2a:f8:2e:f2:21:30:9a:0d:05:75:b2:
         83:3e:59:fa:e0:d6:0f:5f:88:80:4f:50:d0:ea:e0:de:7d:0d:
         b3:d3:19:91:a5:3e:45:db:78:22:b3:6e:8f:37:d9:7a:e9:9e:
         b4:e5:5c:45:28:25:f7:89:53:f7:11:a1:eb:a9:9b:a6:00:b7:
         be:50:a3:d3:3e:1e:96:71:3c:80:04:d9:cc:c1:63:88:40:e5:
         7b:ce:71:0d:0f:be:e4:fd:ee:05:4d:c0:cf:ca:d0:4c:6b:b3:
         1f:b8:17:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----