Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/b1bf25377b4b1a41961b7dfd3c0e63c1e683656a.roa
File:                     b1bf25377b4b1a41961b7dfd3c0e63c1e683656a.roa (raw, json)
Hash identifier:          f5DnMo/iSMvDRc6Tahboop6y2g5+2vFa90qtgptnppI=
Subject key identifier:   54:54:25:87:A4:1F:07:93:DA:7E:C7:E1:50:85:15:9D:7F:B9:2A:5C
Certificate issuer:       /CN=2733e5fc045a22897f64385008a5c519f68c3738
Certificate serial:       06D955
Authority key identifier: 34:F4:01:2A:E3:5E:A3:ED:47:89:FB:B2:04:40:FF:56:A7:F4:DE:48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2733e5fc045a22897f64385008a5c519f68c3738.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/b1bf25377b4b1a41961b7dfd3c0e63c1e683656a.roa
Signing time:             Thu 23 Mar 2023 21:51:17 +0000
ROA not before:           Thu 09 Jun 2022 03:00:00 +0000
ROA not after:            Mon 30 Nov 2026 03:00:00 +0000
asID:                     272057
IP address blocks:        187.63.156.0/22 maxlen: 24
                          2803:7d10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448853 (0x6d955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2733e5fc045a22897f64385008a5c519f68c3738
        Validity
            Not Before: Jun  9 03:00:00 2022 GMT
            Not After : Nov 30 03:00:00 2026 GMT
        Subject: CN=b1bf25377b4b1a41961b7dfd3c0e63c1e683656a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:3d:f5:62:40:31:b3:35:63:d7:58:e1:d4:
                    ee:a4:fc:3e:b5:26:02:4e:60:15:9e:68:af:48:1b:
                    68:4e:97:b5:46:b7:cc:4a:aa:13:c2:91:3a:0e:22:
                    53:b4:6b:b8:90:1a:b6:c8:a8:6e:23:9f:f9:af:cf:
                    08:0e:81:e0:98:43:bf:a1:f5:a4:9d:a7:0c:38:9a:
                    3f:14:2f:8e:1a:25:86:82:c1:c1:2b:57:54:a0:53:
                    31:58:3a:f4:93:cd:07:7b:ba:c3:13:08:14:fa:4d:
                    74:02:14:91:4f:c4:3f:26:84:c9:4d:71:ae:ff:27:
                    18:7e:cd:4d:45:34:94:90:6e:d5:fe:9d:90:a0:61:
                    d1:6c:1f:cc:05:81:0e:0d:ff:51:1b:b3:3f:c7:ab:
                    94:b0:4c:13:d2:4f:26:dd:c3:71:eb:5e:2b:10:01:
                    a9:cb:0c:f8:1d:2f:8d:ae:97:81:ab:9b:13:19:84:
                    c3:3a:4d:a7:ed:c1:01:6f:5f:8e:ee:e7:8c:90:f4:
                    21:22:7d:ab:4e:e9:01:51:08:a5:a5:d3:00:db:c4:
                    99:a6:9d:88:68:38:24:07:d5:a0:b1:95:12:77:34:
                    f0:c7:4f:f0:c0:ff:37:72:91:78:c8:7d:97:1f:97:
                    07:10:d6:07:87:20:21:24:11:bf:e0:00:50:c4:66:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:54:25:87:A4:1F:07:93:DA:7E:C7:E1:50:85:15:9D:7F:B9:2A:5C
            X509v3 Authority Key Identifier:
                keyid:34:F4:01:2A:E3:5E:A3:ED:47:89:FB:B2:04:40:FF:56:A7:F4:DE:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2733e5fc045a22897f64385008a5c519f68c3738.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/b1bf25377b4b1a41961b7dfd3c0e63c1e683656a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/2733e5fc045a22897f64385008a5c519f68c3738.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.156.0/22
                IPv6:
                  2803:7d10::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:78:0c:a3:6e:56:90:a3:0e:48:a1:d5:06:ed:ed:02:59:e6:
         4e:d5:ec:90:06:04:10:86:5f:50:73:a6:bf:36:1f:bd:99:89:
         15:a4:19:14:af:e7:5c:e1:32:34:7b:8b:da:08:f7:77:a3:e5:
         b4:24:74:63:12:38:b2:9b:4f:d2:8e:f0:91:51:57:5e:37:b4:
         67:2a:b0:fe:60:d0:17:dc:80:54:43:29:a0:74:88:a9:da:5c:
         fd:09:05:1d:9d:48:5b:16:4c:7a:13:32:e0:b8:68:30:e3:0a:
         07:c3:d4:ac:4b:08:34:13:df:db:a0:ad:da:2c:eb:dd:21:7f:
         f3:9c:23:03:52:28:ad:67:44:7a:15:64:2a:47:8f:d4:42:f6:
         52:d4:24:bf:06:9f:30:2c:4c:5f:e0:78:ab:1e:c0:d4:4b:0c:
         41:8b:f9:d1:8f:d3:71:2c:a5:4b:b8:46:9f:31:46:87:61:1b:
         fc:53:95:5c:29:07:80:e3:fe:b8:22:0a:4a:f1:8d:8c:61:7a:
         93:84:05:d4:d5:01:d4:81:ee:b5:66:d2:76:be:52:ba:66:cf:
         5d:8f:1e:bb:94:2a:eb:db:45:6e:00:e5:2a:ec:6a:ab:06:82:
         e7:34:1d:40:4b:03:e5:6f:50:97:a9:ec:bd:1c:6c:77:2d:d7:
         8d:d0:48:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----