Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/224d0b359961a3c445f4822222ade0663a024cf9.roa
File:                     224d0b359961a3c445f4822222ade0663a024cf9.roa (raw, json)
Hash identifier:          +rtAkZJdqkyE3vjlFmETEpaAFywtfZNkuXza3g6nRzg=
Subject key identifier:   B7:67:3C:45:E9:F6:F0:CE:F0:17:E4:7B:95:1C:95:B4:41:FA:43:41
Certificate issuer:       /CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
Certificate serial:       25AC16
Authority key identifier: 38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/224d0b359961a3c445f4822222ade0663a024cf9.roa
Signing time:             Wed 26 Jul 2023 13:44:44 +0000
ROA not before:           Tue 25 Jul 2023 13:44:44 +0000
ROA not after:            Sat 26 Jul 2025 13:44:44 +0000
asID:                     52323
IP address blocks:        181.16.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2468886 (0x25ac16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f5b360f6396f35cac76fe7727148af2ea950d9
        Validity
            Not Before: Jul 25 13:44:44 2023 GMT
            Not After : Jul 26 13:44:44 2025 GMT
        Subject: CN=224d0b359961a3c445f4822222ade0663a024cf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:11:c5:d8:a9:8b:a1:1c:bb:a3:ff:6c:8d:c0:
                    15:18:e1:07:35:e6:c8:2c:d3:2d:f2:aa:cc:e9:75:
                    ea:2d:c0:a7:da:7b:31:e1:6f:fe:f1:5b:ae:c9:6b:
                    a5:97:09:f7:a8:ea:a0:ac:26:9c:9b:e4:f7:c1:e4:
                    a8:c9:a0:c4:21:c6:37:27:75:8d:5d:08:bd:15:96:
                    13:6f:b3:cd:d0:78:3a:1b:50:e4:07:0a:30:97:8e:
                    cf:f5:88:c0:2f:5f:a3:3a:ac:5e:61:69:1e:5b:ee:
                    0c:74:87:90:ea:3a:ec:34:41:93:d3:1b:4f:f8:b3:
                    19:da:59:ae:27:c3:3c:79:66:4f:f0:fa:fc:ef:ef:
                    a6:7f:db:48:cc:7f:a3:23:b6:50:cb:a6:c7:57:a2:
                    59:79:bd:a1:60:09:b8:7d:b8:6a:96:96:bd:d6:3d:
                    b2:e3:79:2a:e6:04:8b:5f:a8:2f:63:22:74:81:f1:
                    08:4f:c2:bc:9d:84:19:aa:7b:dc:d7:e5:c6:c2:fa:
                    b2:a5:5b:f6:9d:0d:bd:27:a0:27:cd:20:a9:80:90:
                    d9:09:7e:4a:db:fc:1a:15:36:a3:74:96:5b:ec:9f:
                    87:b3:8b:32:48:48:a5:d6:71:49:62:01:7b:74:74:
                    f7:46:de:33:cc:7f:eb:68:bc:4f:8b:4a:5a:90:27:
                    40:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:67:3C:45:E9:F6:F0:CE:F0:17:E4:7B:95:1C:95:B4:41:FA:43:41
            X509v3 Authority Key Identifier:
                keyid:38:66:D1:54:E1:04:2B:B2:C3:11:22:39:6A:CB:0D:60:F0:7A:DD:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5f5b360f6396f35cac76fe7727148af2ea950d9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/224d0b359961a3c445f4822222ade0663a024cf9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/964b6088-85a6-4363-a11f-20d725bba3f7/d5f5b360f6396f35cac76fe7727148af2ea950d9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.16.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:fc:9f:6c:db:48:a0:c0:91:45:7f:2e:7d:68:3a:07:b9:38:
         00:71:12:54:44:31:64:f8:49:e6:d5:73:06:15:94:b6:e3:bf:
         62:1c:44:42:20:14:6c:b5:0e:bd:c8:f6:9c:59:58:25:7d:17:
         e6:4c:17:0d:4e:45:00:3c:53:58:e8:a2:9f:8b:bf:2b:51:ad:
         aa:af:6b:b5:bc:20:0a:04:5b:21:fc:8e:db:86:92:aa:d3:7c:
         ca:5c:2d:79:b7:72:5d:36:21:7d:e2:93:11:e8:cd:ec:de:cb:
         84:6d:84:44:92:70:41:ec:18:cf:54:45:0c:2a:b1:f5:c0:ef:
         cb:4c:66:c8:32:5b:d2:ee:46:2e:6d:5d:46:db:ec:10:b8:dc:
         39:2c:15:4e:7f:49:a6:da:27:62:b4:07:2d:bc:9e:d3:42:c1:
         f0:ce:7e:97:3b:2a:42:b3:4a:a4:13:73:b4:57:a9:a7:a0:3b:
         99:51:73:e3:fc:92:df:7d:9d:cf:55:c5:e7:a5:10:77:06:fa:
         c4:da:30:2b:f7:99:f2:d2:f6:bb:68:39:8e:16:6a:0a:43:86:
         99:9b:77:0a:b6:34:0b:c0:8b:62:4e:cf:0e:5f:ab:25:4d:63:
         20:3e:0c:1f:f2:15:fd:d1:00:a6:db:19:7c:08:45:4d:05:a1:
         a3:c2:8b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----