Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/737d4c80758ee73f6d4ad7f987bdae334168f822.roa
File:                     737d4c80758ee73f6d4ad7f987bdae334168f822.roa (raw, json)
Hash identifier:          q++uNE/S3ETxh1T+D6NBhdoNnc1iabiihofUjRIz4hw=
Subject key identifier:   AC:04:5D:42:EC:E2:0C:FD:6A:DA:FF:8B:D6:14:21:A7:B0:34:5D:53
Certificate issuer:       /CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
Certificate serial:       275292
Authority key identifier: A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/737d4c80758ee73f6d4ad7f987bdae334168f822.roa
Signing time:             Mon 12 Feb 2024 19:34:42 +0000
ROA not before:           Mon 12 Feb 2024 19:34:42 +0000
ROA not after:            Thu 12 Feb 2026 19:34:42 +0000
asID:                     27651
IP address blocks:        181.43.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2577042 (0x275292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
        Validity
            Not Before: Feb 12 19:34:42 2024 GMT
            Not After : Feb 12 19:34:42 2026 GMT
        Subject: CN=737d4c80758ee73f6d4ad7f987bdae334168f822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8f:1d:ef:81:dd:d1:ab:7a:b7:07:f9:7e:bd:
                    42:6d:a5:66:0a:64:a4:e3:ef:2f:09:89:90:44:58:
                    66:5a:7e:1d:c7:60:8e:84:d3:fc:4e:29:0e:dc:57:
                    97:f5:20:99:50:5a:b7:65:ca:27:06:62:63:a9:4b:
                    da:2f:f9:19:92:d3:f9:ab:31:47:f2:b9:e3:32:53:
                    f8:ea:91:db:62:1f:26:e4:e8:74:9a:a1:bf:50:a3:
                    7c:ec:1f:47:c2:7e:90:bd:5f:72:c9:14:cc:51:dd:
                    71:07:ac:92:90:6f:3a:5a:6f:b5:34:1a:f3:88:fb:
                    4c:ea:22:e9:eb:fd:85:eb:14:fa:c4:9a:e3:61:3a:
                    49:8e:28:a6:d1:77:8b:1e:93:36:57:4b:29:c4:1e:
                    5a:41:ff:eb:eb:7b:c4:1a:9c:64:1a:b3:d7:9f:68:
                    0d:8d:c3:84:4e:2d:67:fe:7a:00:55:57:62:9e:70:
                    b8:bd:b9:e2:c2:9f:b4:3d:c0:bb:43:34:26:e4:91:
                    1d:e5:80:e2:53:96:fc:99:70:9e:04:b2:6d:3f:e3:
                    f0:9d:ef:e2:c5:b6:18:5a:e0:26:be:53:a7:64:1f:
                    44:75:05:72:87:aa:ea:1d:16:85:1f:a9:06:6f:c7:
                    9d:98:05:d6:48:89:b6:8d:f9:c2:13:76:e4:88:27:
                    4e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:04:5D:42:EC:E2:0C:FD:6A:DA:FF:8B:D6:14:21:A7:B0:34:5D:53
            X509v3 Authority Key Identifier:
                keyid:A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/737d4c80758ee73f6d4ad7f987bdae334168f822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         84:16:f6:b4:ca:f3:55:79:3e:ea:d6:86:2a:12:18:a6:e2:ff:
         d8:aa:d6:b7:75:e9:06:49:eb:19:78:36:13:52:e5:5b:d8:96:
         ed:e9:48:f9:17:25:e8:0e:0c:ae:c7:b8:3d:67:40:71:cb:f9:
         9f:2b:31:4f:c7:d4:d8:58:23:e6:64:a4:5b:f7:05:b3:9f:27:
         54:be:70:84:79:b9:e9:0b:55:bb:8d:9d:e5:c5:b9:3b:5c:14:
         b5:82:54:c4:b2:0d:a3:16:d0:e6:f2:4e:34:05:98:d2:9f:d4:
         de:71:11:78:92:88:99:6c:05:e0:9f:91:86:ae:ca:a7:bd:bc:
         84:1b:54:85:ac:65:1f:b7:15:f4:e1:83:90:2c:b7:8d:6a:ce:
         01:0b:9a:e2:1d:0b:c0:18:1b:80:c9:41:54:7b:d5:af:a9:60:
         34:fe:ed:67:37:fb:a4:e1:10:01:f9:c9:19:82:c6:33:a1:19:
         0d:5b:9c:e7:bc:b5:d5:d2:3e:98:19:e7:02:94:3d:dc:5e:94:
         29:05:b0:14:3f:d0:48:f8:32:d5:1a:17:14:6f:1c:c8:71:ae:
         16:43:dd:20:4d:3a:b9:de:1a:a1:39:b0:24:e7:3d:78:9a:8d:
         19:10:ea:d8:80:bc:17:ba:d0:f2:bb:fc:5e:86:74:27:55:9b:
         84:65:57:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----