Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/9eff89c395023f7805ff6efeaecc1c3c9c287bff.roa
File:                     9eff89c395023f7805ff6efeaecc1c3c9c287bff.roa (raw, json)
Hash identifier:          GUg1+Hb4rAX6fXHyYIXrMGcuKXxZ+VP+JsyjAvCYxZg=
Subject key identifier:   AD:F2:34:C3:64:68:85:69:04:AE:0C:0C:16:35:5A:E7:30:9A:E8:14
Certificate issuer:       /CN=4ff66b8a7de8fbaabda6df89d24dc89b663c67b6
Certificate serial:       2319DD
Authority key identifier: B5:24:EE:78:56:06:DD:F9:B4:D2:AC:F4:E7:6B:05:B0:E4:27:64:35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/9eff89c395023f7805ff6efeaecc1c3c9c287bff.roa
Signing time:             Wed 30 Aug 2023 19:50:55 +0000
ROA not before:           Tue 29 Aug 2023 19:50:54 +0000
ROA not after:            Sat 30 Aug 2025 19:50:54 +0000
asID:                     266839
IP address blocks:        181.191.232.0/22 maxlen: 24
                          2803:8820::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2300381 (0x2319dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff66b8a7de8fbaabda6df89d24dc89b663c67b6
        Validity
            Not Before: Aug 29 19:50:54 2023 GMT
            Not After : Aug 30 19:50:54 2025 GMT
        Subject: CN=9eff89c395023f7805ff6efeaecc1c3c9c287bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dc:b6:47:32:7b:81:8b:c4:c1:14:ed:59:71:
                    85:81:52:12:ae:a9:5c:5e:44:cb:c8:60:ca:15:92:
                    59:11:5d:53:a2:98:ec:49:bc:1e:4d:30:fc:b9:7d:
                    c0:f2:36:14:2b:c4:19:a0:5a:4d:cc:4f:b1:37:e5:
                    4d:b9:f9:4f:02:42:96:98:29:32:c2:36:4e:b8:ad:
                    ea:ba:54:66:1d:6f:77:bd:75:a6:1d:25:19:c8:09:
                    b4:89:ca:06:ad:24:df:d5:a6:b5:60:70:62:a3:a9:
                    aa:02:ae:01:42:79:55:81:34:da:ed:d5:fc:86:57:
                    10:06:d6:e1:ff:91:c1:c7:8a:a2:74:79:ae:60:d7:
                    78:da:ec:2f:39:7d:e4:2f:9e:bd:92:87:ed:ca:61:
                    6e:56:1d:79:62:bb:c1:56:40:2e:48:31:b1:3a:22:
                    22:fb:66:bb:c4:4f:a9:8d:46:d8:b8:cf:6d:87:7e:
                    65:d3:6f:11:22:a7:ad:b8:05:ac:e2:b2:5b:15:d1:
                    d0:de:ce:31:1a:b2:86:4f:37:a7:49:8f:7f:3d:a1:
                    5e:4e:9a:6f:cb:de:0c:9b:17:6b:5b:c1:80:9c:ee:
                    89:7d:9c:9e:de:d9:f3:1d:aa:1d:46:c4:99:8f:39:
                    b4:2c:de:0b:e0:c7:2f:91:00:bb:28:97:88:3b:91:
                    60:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F2:34:C3:64:68:85:69:04:AE:0C:0C:16:35:5A:E7:30:9A:E8:14
            X509v3 Authority Key Identifier:
                keyid:B5:24:EE:78:56:06:DD:F9:B4:D2:AC:F4:E7:6B:05:B0:E4:27:64:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/9eff89c395023f7805ff6efeaecc1c3c9c287bff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8f1a3f30-986e-41e7-b43f-0af85be0ff6e/4ff66b8a7de8fbaabda6df89d24dc89b663c67b6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.232.0/22
                IPv6:
                  2803:8820::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:c6:68:cf:14:c4:7b:00:59:3d:d4:6b:08:78:87:d3:a3:8d:
         50:03:07:8c:35:42:e2:2f:cb:40:5e:2b:63:48:17:e5:1f:d8:
         3e:13:7c:0e:8d:5a:e3:1e:b2:ec:bc:42:55:16:8e:d7:96:b2:
         bc:0a:67:bb:3e:49:e6:f4:9a:b0:67:39:19:5c:a4:03:12:ef:
         d1:b6:47:a5:29:73:b7:d8:6e:ea:7e:9f:01:df:f6:d6:79:39:
         7b:52:6a:c3:8c:57:62:74:8c:93:dc:20:77:72:dc:6f:71:d9:
         5a:84:5c:a6:1b:a4:03:49:fa:e5:ac:40:0f:23:69:4b:6c:00:
         d3:59:1f:21:ae:f8:93:6b:16:03:3a:b3:cf:6a:c2:80:5b:f6:
         33:0d:b9:49:ed:07:b4:13:2a:4b:11:a7:c1:d2:76:4e:d0:44:
         67:51:1e:6f:c5:37:fd:29:a8:fc:19:0b:23:0c:3c:db:52:68:
         a7:4b:c5:90:4a:de:5c:8e:a2:be:6f:f6:64:0f:cd:e3:75:eb:
         74:34:e4:5e:a5:68:13:45:98:8f:e4:09:0a:e2:6e:af:2a:1d:
         80:04:27:c7:9f:89:42:d4:c1:eb:41:d9:7d:54:a9:0a:51:cd:
         86:ba:eb:16:94:28:44:e9:6d:00:83:de:3b:31:af:cb:b1:cf:
         d4:0f:fb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----