Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/13a7711fd3ad556c5704aa769c1b0be62dab340a.roa
File:                     13a7711fd3ad556c5704aa769c1b0be62dab340a.roa (raw, json)
Hash identifier:          2//Zc8XYLlqhvJ03h0Qm/AejMKyZD9vEsaliKD0JpyU=
Subject key identifier:   13:85:CA:D9:85:AF:0B:96:79:88:86:27:90:D1:2E:6A:9F:9F:73:3A
Certificate issuer:       /CN=e3f77a34865cadd70a0ff5534f4846c76077a32f
Certificate serial:       07DB99
Authority key identifier: AA:B4:AE:22:1F:06:09:06:15:B5:B0:1A:CC:54:4B:3C:E5:0E:24:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3f77a34865cadd70a0ff5534f4846c76077a32f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/13a7711fd3ad556c5704aa769c1b0be62dab340a.roa
Signing time:             Tue 21 Feb 2023 17:00:16 +0000
ROA not before:           Mon 11 Apr 2022 03:00:00 +0000
ROA not after:            Fri 12 Apr 2024 03:00:00 +0000
asID:                     272031
IP address blocks:        181.189.20.0/22 maxlen: 24
                          2803:3510::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 514969 (0x7db99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f77a34865cadd70a0ff5534f4846c76077a32f
        Validity
            Not Before: Apr 11 03:00:00 2022 GMT
            Not After : Apr 12 03:00:00 2024 GMT
        Subject: CN=13a7711fd3ad556c5704aa769c1b0be62dab340a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:2d:df:ed:f7:d5:b2:9e:aa:ab:c6:4c:0e:8d:
                    d6:e5:b2:2e:34:83:96:b7:4d:06:28:6c:c3:01:61:
                    6e:66:08:83:55:8f:c2:76:bc:ae:d7:30:83:7e:13:
                    74:80:14:3c:88:b4:7a:eb:4f:52:94:dc:17:d3:2b:
                    a8:cc:09:3b:4e:b5:78:96:1f:6b:00:a8:d7:a5:95:
                    a0:f6:2d:bf:9d:5e:48:82:aa:86:d3:6c:56:3c:1c:
                    51:a2:31:e3:66:58:57:e7:cc:4c:a9:0d:84:3f:a8:
                    a8:a4:fc:fe:12:6a:b4:ad:95:c9:28:60:a8:4e:65:
                    cb:21:42:13:4d:07:3b:26:5a:0a:02:26:b0:79:68:
                    61:83:cc:ac:23:f5:e0:31:9c:7d:cc:39:ce:43:7d:
                    0d:27:45:19:7d:9a:a1:bb:c7:ee:84:fa:a7:76:86:
                    aa:08:9f:ce:8e:09:19:1c:0b:d9:bd:74:90:01:1e:
                    94:00:f8:07:ce:9f:d7:31:f9:7d:b9:9b:1b:56:c4:
                    11:e3:45:5f:27:57:67:d7:69:70:2a:45:af:48:c6:
                    e2:30:cb:6d:b3:af:d7:82:8c:6a:d9:17:ce:e2:23:
                    fd:69:f7:8a:b8:c5:15:09:ad:27:cd:69:02:02:ca:
                    f8:39:eb:c7:46:6e:e4:60:38:21:74:f2:6f:9d:c0:
                    aa:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:85:CA:D9:85:AF:0B:96:79:88:86:27:90:D1:2E:6A:9F:9F:73:3A
            X509v3 Authority Key Identifier:
                keyid:AA:B4:AE:22:1F:06:09:06:15:B5:B0:1A:CC:54:4B:3C:E5:0E:24:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3f77a34865cadd70a0ff5534f4846c76077a32f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/13a7711fd3ad556c5704aa769c1b0be62dab340a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/e3f77a34865cadd70a0ff5534f4846c76077a32f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.20.0/22
                IPv6:
                  2803:3510::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:ba:90:a4:69:ee:ff:05:7f:d6:5a:38:f5:c5:75:69:8b:a1:
         a4:f8:17:73:f4:b6:45:0e:4c:0c:8c:e6:8f:4c:a2:9a:17:e4:
         6d:19:fe:99:86:95:2b:7b:5f:f7:00:e4:15:f5:ed:fe:0a:ac:
         1d:a2:d7:15:2f:17:0a:9d:ab:ce:d4:03:72:8a:6a:b0:0d:fa:
         6c:3d:a2:9e:ba:31:27:50:d5:4b:68:3f:14:38:76:88:47:72:
         59:76:4e:2d:46:b9:ad:b1:de:20:df:30:3a:6c:54:6c:74:62:
         c0:15:96:8b:fa:6e:61:5b:00:14:9f:d6:a9:c1:bf:c0:aa:76:
         fd:fa:86:37:ef:c0:a9:08:60:ab:61:56:af:aa:29:14:73:f8:
         c2:74:7b:dd:de:65:c1:66:2d:1c:4a:e9:ea:7d:5f:18:29:74:
         29:18:ea:d3:bc:de:d5:ee:8c:19:49:5d:7a:ce:83:e5:33:dd:
         c9:d8:ea:ab:5d:a0:06:cf:0d:43:57:cc:56:1c:48:f9:32:0d:
         91:2c:1c:8c:fa:1d:36:de:f9:a7:2c:2f:65:cb:d1:79:b7:2c:
         cf:83:2a:55:d1:97:1e:38:19:0d:4e:c5:72:9f:ee:1a:b8:49:
         db:d6:a4:77:d4:b9:e1:72:87:13:5c:82:33:e2:c0:61:ac:d5:
         85:88:7d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----