Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/4d8cbcd635a4ce2016eadb17f25a08abe2281505.roa
File:                     4d8cbcd635a4ce2016eadb17f25a08abe2281505.roa (raw, json)
Hash identifier:          JnQZmM6p+Ol+cFZJNZeai+UrOYFDtiQlHkE+XmIAnZc=
Subject key identifier:   36:F6:35:D6:CC:10:49:C6:33:01:62:FF:D2:AE:5A:9D:AC:FD:CC:83
Certificate issuer:       /CN=e3f77a34865cadd70a0ff5534f4846c76077a32f
Certificate serial:       1AC3
Authority key identifier: AA:B4:AE:22:1F:06:09:06:15:B5:B0:1A:CC:54:4B:3C:E5:0E:24:4C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3f77a34865cadd70a0ff5534f4846c76077a32f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/4d8cbcd635a4ce2016eadb17f25a08abe2281505.roa
Signing time:             Tue 12 Apr 2022 22:52:42 +0000
ROA not before:           Tue 12 Apr 2022 03:00:00 +0000
ROA not after:            Fri 12 Apr 2024 03:00:00 +0000
asID:                     272031
IP address blocks:        181.189.20.0/22 maxlen: 24
                          2803:3510::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6851 (0x1ac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3f77a34865cadd70a0ff5534f4846c76077a32f
        Validity
            Not Before: Apr 12 03:00:00 2022 GMT
            Not After : Apr 12 03:00:00 2024 GMT
        Subject: CN=4d8cbcd635a4ce2016eadb17f25a08abe2281505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:81:cd:39:59:33:50:a1:ab:a8:bc:1a:4d:e3:
                    69:fb:4e:36:da:81:91:b6:09:d4:62:ac:84:ec:d9:
                    a4:a8:e7:eb:22:24:7a:62:52:6c:c8:c6:76:2e:a9:
                    21:f7:91:25:c8:7a:1e:4f:47:80:f2:d4:1c:87:50:
                    28:95:63:85:49:d2:3c:35:cc:2a:90:42:6b:aa:21:
                    57:6c:3e:c3:93:22:de:39:ea:72:74:c2:c6:df:01:
                    9b:01:ae:e8:02:73:f8:33:3f:56:07:8b:77:27:7f:
                    71:2a:b8:1b:7b:44:8c:05:fc:f7:87:b3:c4:62:fa:
                    22:2e:cb:d5:eb:48:59:f2:9a:f5:90:1c:3d:7d:a0:
                    6d:5e:9d:30:1c:dd:ac:93:9f:b2:87:8a:a0:53:ba:
                    33:73:98:37:b7:92:51:ab:0f:81:9c:72:1f:3e:26:
                    27:58:74:cf:a6:bf:05:0c:4c:d9:e9:b3:61:9c:df:
                    a1:ad:35:bf:11:8a:67:72:7d:f4:20:4d:17:14:84:
                    10:49:11:91:f0:32:11:f5:aa:d2:cc:c0:7a:64:57:
                    fa:02:72:fc:7b:06:41:57:7e:af:88:8a:7e:0d:a9:
                    b6:bf:27:66:84:68:cf:57:96:1d:01:90:ee:64:7d:
                    e5:8c:3f:1f:a5:b1:94:db:81:f9:31:be:d3:6a:63:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F6:35:D6:CC:10:49:C6:33:01:62:FF:D2:AE:5A:9D:AC:FD:CC:83
            X509v3 Authority Key Identifier:
                keyid:AA:B4:AE:22:1F:06:09:06:15:B5:B0:1A:CC:54:4B:3C:E5:0E:24:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3f77a34865cadd70a0ff5534f4846c76077a32f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/4d8cbcd635a4ce2016eadb17f25a08abe2281505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/89dba30e-f1a5-4172-b9f2-e4924a18da78/e3f77a34865cadd70a0ff5534f4846c76077a32f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.20.0/22
                IPv6:
                  2803:3510::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:a3:ad:41:e0:39:be:7c:f8:84:c1:6d:d5:e7:00:83:34:99:
         b5:47:94:ac:7e:c4:66:b4:48:6f:b3:16:be:7d:97:b5:b1:19:
         a7:92:5e:de:7d:84:d7:6b:e7:03:0d:91:7a:4e:c4:eb:cb:01:
         29:97:2e:2f:c0:d4:b7:cf:be:58:2b:ae:43:d6:d9:3f:0f:1f:
         3c:74:72:9e:a3:0c:ab:b5:02:7f:74:cb:6e:6e:0d:60:43:d5:
         65:69:e1:84:11:44:d5:d9:94:d8:07:da:54:d9:ee:79:26:e1:
         08:f8:09:84:5a:e2:0f:bc:58:2d:e1:af:b3:3a:af:0f:60:d1:
         47:a8:28:d3:78:26:52:06:b0:a6:1f:02:cf:51:c6:17:56:4a:
         a7:b4:eb:04:6c:d1:a6:4d:05:f8:9e:f8:d7:a7:44:81:ad:e0:
         06:11:f8:4b:02:dc:57:2e:9b:10:23:71:5b:13:67:b9:7b:80:
         43:cb:88:61:bd:2b:d4:40:74:ec:2f:aa:0b:1c:d5:82:64:7e:
         51:12:d6:ab:26:9e:2e:d2:a8:0f:6d:53:d1:38:a2:1e:e8:bb:
         f8:63:10:47:82:bf:90:42:3e:c0:da:83:2c:18:a2:41:94:fb:
         ff:1b:bc:0a:ca:e4:72:57:21:ec:63:2b:f0:33:3c:f7:90:26:
         64:d5:a9:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----