Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/4d22b5d4ae747281f654978e7206c4816d7bbfbf.roa
File:                     4d22b5d4ae747281f654978e7206c4816d7bbfbf.roa (raw, json)
Hash identifier:          vwvVkiOt7tAS6Gq/e06VfuTygDS5tyaDfeAlSihIbDY=
Subject key identifier:   20:FC:72:C2:6E:47:63:8A:79:8C:8E:92:6D:1A:9A:61:22:D9:2E:FC
Certificate issuer:       /CN=a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba
Certificate serial:       20657E
Authority key identifier: B2:AD:96:76:80:84:36:EE:12:47:AD:3A:21:31:E4:59:D6:EC:71:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/4d22b5d4ae747281f654978e7206c4816d7bbfbf.roa
Signing time:             Thu 08 Jun 2023 08:30:05 +0000
ROA not before:           Wed 07 Jun 2023 08:30:05 +0000
ROA not after:            Fri 06 Jun 2025 08:30:05 +0000
asID:                     265777
IP address blocks:        181.191.64.0/22 maxlen: 24
                          2803:4fc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2123134 (0x20657e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba
        Validity
            Not Before: Jun  7 08:30:05 2023 GMT
            Not After : Jun  6 08:30:05 2025 GMT
        Subject: CN=4d22b5d4ae747281f654978e7206c4816d7bbfbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:8c:6c:9f:69:40:04:8d:ae:8c:3f:18:48:12:
                    f5:81:39:c8:39:7c:3c:a7:b6:69:24:42:4e:c0:ab:
                    46:c0:38:67:f6:f1:d1:5e:17:be:4e:89:94:a8:a3:
                    ce:7a:c2:fd:3a:b6:b1:dc:a5:4b:9a:08:95:43:a7:
                    68:df:3a:ca:ad:49:50:94:01:62:e2:77:e4:b7:6a:
                    3d:20:aa:89:32:b3:68:2d:46:59:b9:88:c3:34:2a:
                    1c:85:65:41:15:25:09:28:23:00:f5:d5:35:93:77:
                    25:d5:68:e3:64:4d:c4:d6:d2:f9:8e:08:3a:3e:eb:
                    70:79:e5:72:a3:dc:47:9f:77:60:1d:ab:9e:b3:fb:
                    cd:b9:ce:4f:23:aa:bc:91:3d:f3:74:b1:90:5f:36:
                    db:c3:ff:2e:4f:a8:22:94:84:76:cb:c0:2a:ad:f4:
                    bf:42:39:0d:cc:dc:50:80:58:72:13:16:7e:a5:e4:
                    b0:08:be:09:0c:74:73:b2:b9:c4:9c:20:65:a5:bf:
                    16:29:07:45:38:8e:44:7d:48:bd:bb:77:1c:2a:51:
                    f5:f6:3e:00:be:18:6c:87:41:59:82:d5:9e:f8:16:
                    6e:33:33:1b:d5:4e:14:aa:f6:a2:ca:31:fb:76:cf:
                    94:9b:19:ee:a6:d8:27:8d:c2:a9:3b:71:9e:a7:35:
                    29:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:FC:72:C2:6E:47:63:8A:79:8C:8E:92:6D:1A:9A:61:22:D9:2E:FC
            X509v3 Authority Key Identifier:
                keyid:B2:AD:96:76:80:84:36:EE:12:47:AD:3A:21:31:E4:59:D6:EC:71:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/4d22b5d4ae747281f654978e7206c4816d7bbfbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89863180-9e30-4555-b44d-5d6a474eca7b/a808fe3169c9a368552bc9d7cd11b93fa0d5e1ba.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.64.0/22
                IPv6:
                  2803:4fc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:94:b9:83:02:a1:f3:e6:24:1f:c4:ca:c9:e8:4c:eb:70:c2:
         99:af:c1:d8:bc:4c:4a:c5:5b:97:cb:84:36:05:c4:22:80:7c:
         39:e3:be:e6:f3:e0:f9:fb:c5:2c:38:4b:2e:2a:cb:fc:09:b2:
         87:b2:92:a9:71:9d:3f:8b:36:7b:31:c1:a4:e1:4e:30:d2:3d:
         b0:7a:17:e9:17:2c:d1:76:e8:42:03:dd:ab:c1:55:3e:fc:34:
         d7:9c:64:53:64:3d:e1:14:d5:e6:59:22:e2:72:65:d4:6c:77:
         40:b7:86:ed:84:54:1d:03:8a:1f:f3:5b:9d:df:ab:cc:39:9e:
         14:ce:ef:0f:d4:f3:71:30:7d:6d:5c:77:ea:17:ff:b4:c3:75:
         f3:20:1e:31:e4:36:d8:21:da:8c:30:9b:d6:22:c0:de:0b:cc:
         e4:70:5c:40:ba:b3:9f:24:ea:e9:b8:d9:87:dc:7c:bf:e8:e1:
         8d:f7:47:c2:7b:22:f7:bd:9f:01:39:59:7a:a4:e4:07:e5:2f:
         aa:09:8c:03:eb:d4:93:c9:9d:e7:52:8d:81:a3:3d:7c:d6:bf:
         50:67:03:50:f1:7b:ee:e8:dd:a4:ee:a6:48:7a:3e:07:7d:f1:
         bb:35:e8:df:61:c6:af:27:d3:c2:07:36:33:3b:91:4b:e9:01:
         c3:19:eb:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----