Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/43664c71a32f6e0b7743fb21d451e186edc975aa.roa
File:                     43664c71a32f6e0b7743fb21d451e186edc975aa.roa (raw, json)
Hash identifier:          BVJX6f1pqWEZfhiLS5NqIfd8UC3bNpufkZqAj0tIFDE=
Subject key identifier:   6A:B7:E7:F5:34:B4:D3:D5:2E:01:32:48:A2:28:0E:4A:0A:21:A9:5F
Certificate issuer:       /CN=dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152
Certificate serial:       03D6
Authority key identifier: 24:C1:3F:89:56:C0:A5:34:2F:23:D4:C2:54:0F:C8:CC:C0:C1:0F:37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/43664c71a32f6e0b7743fb21d451e186edc975aa.roa
Signing time:             Thu 10 Feb 2022 20:18:03 +0000
ROA not before:           Thu 10 Feb 2022 03:00:00 +0000
ROA not after:            Sat 10 Feb 2024 03:00:00 +0000
asID:                     272032
IP address blocks:        181.224.88.0/22 maxlen: 24
                          2803:b510::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982 (0x3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152
        Validity
            Not Before: Feb 10 03:00:00 2022 GMT
            Not After : Feb 10 03:00:00 2024 GMT
        Subject: CN=43664c71a32f6e0b7743fb21d451e186edc975aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:44:c3:01:28:db:49:64:cf:37:e8:fd:9a:
                    76:5e:c1:f9:31:b3:4a:e0:5d:53:a9:4a:4f:d6:08:
                    2c:93:d1:40:1d:72:85:bc:42:27:2f:24:79:ef:2e:
                    73:0a:c7:3d:71:23:85:2b:73:c9:a6:66:3c:e2:9f:
                    65:a2:a2:32:4c:23:11:de:8c:23:f8:b9:06:6b:e4:
                    49:8b:b6:d1:29:0b:6f:e5:e5:f9:d5:76:d0:12:0d:
                    12:54:8d:54:73:27:75:15:87:15:6b:30:50:1d:e2:
                    fa:1c:62:ce:be:93:d5:e7:6b:e0:45:92:60:92:60:
                    cb:9e:89:26:4a:90:91:a5:42:b8:88:2d:f1:50:27:
                    03:a5:c0:8b:b1:60:4c:62:45:78:d6:90:77:a4:31:
                    bf:c4:e6:e9:0d:47:11:e6:95:7a:91:fa:f7:0d:56:
                    b5:87:c5:0e:59:dc:6d:cc:da:d9:c4:6a:7a:0f:83:
                    cb:2c:5c:1b:c9:ba:42:ab:99:aa:b5:69:21:9a:a9:
                    4c:ef:7f:76:16:13:a5:fe:b5:3c:87:30:4b:0c:1d:
                    4b:f5:e7:3a:11:94:3f:00:38:be:cf:a8:2f:c5:3c:
                    a7:e9:0b:bb:cf:19:c7:9c:99:0d:61:89:1b:a3:84:
                    74:b8:c0:6e:0a:b2:a9:0d:17:61:ab:43:51:2b:9c:
                    1f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B7:E7:F5:34:B4:D3:D5:2E:01:32:48:A2:28:0E:4A:0A:21:A9:5F
            X509v3 Authority Key Identifier:
                keyid:24:C1:3F:89:56:C0:A5:34:2F:23:D4:C2:54:0F:C8:CC:C0:C1:0F:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/43664c71a32f6e0b7743fb21d451e186edc975aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9d788c39-ab55-4569-8bca-8b0159d08915/dddfd6abfbc7ef7f6d4d01273b0009c90f8ac152.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.88.0/22
                IPv6:
                  2803:b510::/32

    Signature Algorithm: sha256WithRSAEncryption
         14:38:7f:52:55:4b:05:5a:65:19:47:03:67:8e:6d:4b:3f:28:
         70:75:32:8c:08:48:19:43:c6:da:b1:b2:39:d6:13:aa:76:5c:
         e7:dc:83:9d:a3:56:92:a3:ee:b3:0b:36:ce:f9:8b:2b:92:51:
         41:57:53:ec:97:e4:a9:da:a3:1a:ad:26:23:76:a2:49:18:a9:
         6d:34:c6:53:ea:6c:3b:1a:3c:14:1d:85:24:9e:27:bc:a8:6e:
         ca:fc:1f:a0:c1:ef:d8:46:e7:ce:b9:97:77:83:7b:d1:11:56:
         7c:12:00:c4:54:42:a3:26:d6:5a:0c:ef:fb:59:a6:2f:cf:52:
         ed:e0:67:96:6b:66:ac:95:43:42:bb:6e:1d:f8:2e:80:a6:57:
         fe:26:fc:5d:8b:d9:03:b0:96:19:b7:36:33:5a:e7:72:0b:5b:
         8d:96:12:98:67:64:d7:ad:a1:34:a3:e4:d4:94:2c:22:02:6c:
         8b:fb:1a:8c:21:4d:88:85:59:c2:ee:b1:fc:7a:0a:ce:06:5a:
         a8:7a:64:db:f9:9a:b2:5a:fe:bd:0b:f2:ee:78:bc:0d:cc:69:
         ef:35:d8:27:f8:88:3f:3d:44:17:9b:a7:b7:e8:e5:93:8d:d9:
         e1:18:25:f1:83:56:1a:c0:12:8d:c7:83:43:94:61:b0:ee:a1:
         3c:37:49:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----