Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/5863ce7d0aff7a317d127581520609656eed9ed8.roa
File:                     5863ce7d0aff7a317d127581520609656eed9ed8.roa (raw, json)
Hash identifier:          VAAlMq/4iLtZS8EzVBQb4sOkFUU59++GPhYKzROqYhU=
Subject key identifier:   41:8B:E7:B4:41:15:B7:8A:A8:16:7D:8C:A6:BA:7F:3F:53:77:9C:C3
Certificate issuer:       /CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
Certificate serial:       019732
Authority key identifier: D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/5863ce7d0aff7a317d127581520609656eed9ed8.roa
Signing time:             Wed 16 Nov 2022 19:06:57 +0000
ROA not before:           Mon 14 Nov 2022 19:02:30 +0000
ROA not after:            Sat 16 Nov 2024 19:02:30 +0000
asID:                     3816
IP address blocks:        181.192.128.0/17 maxlen: 17

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104242 (0x19732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20cfd36a556e1a46c18de53d3fa81b0e1e970f23
        Validity
            Not Before: Nov 14 19:02:30 2022 GMT
            Not After : Nov 16 19:02:30 2024 GMT
        Subject: CN=5863ce7d0aff7a317d127581520609656eed9ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:73:f0:16:ba:d5:65:6b:57:99:8c:21:3c:34:
                    bb:98:d3:10:c6:97:d9:4a:54:e1:b6:0a:54:75:ea:
                    f8:80:f6:b3:f7:84:2e:f4:16:03:63:44:b7:5f:41:
                    98:d5:8c:70:44:f4:57:02:a6:a7:45:db:fa:fb:57:
                    80:b8:42:62:46:88:a0:48:30:42:7e:ad:40:f3:64:
                    6b:92:3a:81:a1:86:af:1e:fd:e0:a3:ab:af:73:b2:
                    de:12:d5:cb:65:55:cc:d3:20:86:51:2d:1b:87:ad:
                    e1:ce:c3:f6:e3:15:55:74:e0:2f:cc:e8:96:51:2d:
                    d8:c0:fe:0f:4c:f4:97:c3:42:3b:c9:ba:b4:54:ea:
                    3b:0a:c3:64:e7:41:01:a9:71:37:89:5e:02:f7:12:
                    94:69:ef:34:cc:89:a9:d1:6c:a5:42:2b:16:74:7b:
                    e1:ad:11:2e:aa:8b:6f:78:7c:86:bc:a5:0c:0e:ad:
                    be:17:3b:bb:80:5e:86:08:09:c1:52:88:2a:c2:83:
                    07:09:20:f7:54:73:7e:d6:ae:c5:9f:04:d0:3a:d2:
                    d3:41:58:21:dd:f6:36:bd:2d:01:fd:79:49:3f:c4:
                    65:f1:79:c8:17:e3:8f:c8:69:1f:da:38:c4:7e:8d:
                    42:70:ae:81:1e:a4:d4:97:6e:cb:25:8f:c1:67:89:
                    88:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:8B:E7:B4:41:15:B7:8A:A8:16:7D:8C:A6:BA:7F:3F:53:77:9C:C3
            X509v3 Authority Key Identifier:
                keyid:D6:76:54:78:51:E9:6F:3D:87:FA:EF:A4:05:EA:D4:A4:B7:0D:89:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/5863ce7d0aff7a317d127581520609656eed9ed8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/958b31ec-3133-423d-8adb-38136b3c9f51/20cfd36a556e1a46c18de53d3fa81b0e1e970f23.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.192.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         50:80:54:62:bf:88:22:4e:4e:7d:97:bc:d3:7d:64:f8:ec:79:
         e8:02:10:cf:71:0e:51:ae:d0:8e:43:b3:ac:3d:cb:21:8c:f7:
         e3:5c:f6:35:dd:e6:a9:25:f0:cd:97:6b:89:8b:3a:33:3e:af:
         e6:af:2c:06:01:64:84:f8:b7:3b:3d:07:22:9f:ee:96:7a:79:
         fd:83:49:56:b4:10:0e:16:14:70:87:7e:cd:db:10:d9:cc:db:
         3d:bd:39:4b:08:ff:40:55:42:57:d0:6f:a1:07:54:47:29:19:
         ec:c6:74:ac:59:5a:8d:3d:a8:76:9e:0f:f8:19:08:ba:43:28:
         dd:9f:fb:da:ca:8f:8f:73:ce:69:2c:6d:e6:36:21:16:df:7a:
         b8:d9:14:3a:6d:33:2d:9b:34:ab:6b:cb:81:47:f9:47:e2:48:
         d9:59:15:11:63:ec:05:b6:c4:b6:9c:2b:4f:a5:7a:8c:58:9b:
         9d:5b:06:c5:7e:07:f8:da:ce:7d:17:8d:42:cd:4a:bc:95:27:
         e0:cc:a1:f6:cc:25:0d:de:eb:8c:ce:5b:03:f1:93:b6:93:a7:
         5c:5f:b3:8c:8a:9d:da:7b:0f:95:df:0c:97:6a:25:52:fb:7f:
         f1:09:c4:a2:84:74:b7:fd:16:45:fd:a1:81:c5:1f:70:ea:70:
         75:44:09:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----