Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/d491443331b4457d485935b07910c6648fd13543.roa
File:                     d491443331b4457d485935b07910c6648fd13543.roa (raw, json)
Hash identifier:          iFbDw+EYT8NiMHsruEjQyPCIbDbYv1rbHMs6f3uF4yY=
Subject key identifier:   11:F9:79:C8:8F:B9:3C:D1:1C:D7:7E:1C:36:F5:9A:05:C0:EA:BD:6D
Certificate issuer:       /CN=87b7f548b0d643ffa768da76ef82c2b3680dff0d
Certificate serial:       0396
Authority key identifier: A5:7D:43:76:BE:81:6F:39:76:17:86:E0:01:33:1B:08:1E:42:DD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87b7f548b0d643ffa768da76ef82c2b3680dff0d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/d491443331b4457d485935b07910c6648fd13543.roa
Signing time:             Sat 23 Apr 2022 22:58:41 +0000
ROA not before:           Sat 23 Apr 2022 03:00:00 +0000
ROA not after:            Tue 23 Apr 2024 03:00:00 +0000
asID:                     272067
IP address blocks:        181.224.197.0/24 maxlen: 24
                          2801:16:9800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918 (0x396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b7f548b0d643ffa768da76ef82c2b3680dff0d
        Validity
            Not Before: Apr 23 03:00:00 2022 GMT
            Not After : Apr 23 03:00:00 2024 GMT
        Subject: CN=d491443331b4457d485935b07910c6648fd13543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:60:95:e0:fa:3b:be:78:4a:1a:28:a8:bb:f1:
                    8d:28:85:0c:e1:b9:7b:c4:24:69:0e:7b:2e:44:64:
                    64:1b:ce:dd:0c:01:32:e7:f6:25:a2:c1:f9:4d:fb:
                    f4:7b:66:de:c3:95:52:38:1c:e3:8b:a1:44:12:a7:
                    15:b7:f2:0e:2d:b8:f4:37:fa:b0:7c:4f:e9:cb:10:
                    08:47:62:ae:a6:3f:d9:6e:78:2a:6c:fc:cf:49:e8:
                    ac:78:59:fd:11:55:9f:0d:0f:1f:39:04:62:34:b2:
                    3a:94:f6:10:62:e9:e2:3c:de:6d:67:37:ae:89:4a:
                    4a:b1:fe:de:5c:49:e7:c9:48:70:c0:a0:a6:e8:62:
                    3b:96:f1:fe:6b:11:dd:eb:65:2c:a9:92:0c:b4:2a:
                    12:59:f4:be:fa:b1:e1:6b:ba:6a:0c:52:2b:18:01:
                    f5:49:f0:db:c9:32:17:81:0c:7f:78:2e:8e:5e:f4:
                    3d:c9:c5:3b:9b:63:9f:84:5d:40:3e:8a:64:f9:39:
                    0c:b1:38:7d:d6:a4:d6:6a:4c:1b:81:25:b6:eb:7b:
                    87:13:6e:12:07:57:ed:14:60:12:e6:b0:27:a9:08:
                    d7:f4:fe:b9:14:41:a0:59:9a:28:cf:72:44:36:e8:
                    c6:3f:51:00:05:27:2c:af:36:ac:79:72:39:c9:ec:
                    cb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F9:79:C8:8F:B9:3C:D1:1C:D7:7E:1C:36:F5:9A:05:C0:EA:BD:6D
            X509v3 Authority Key Identifier:
                keyid:A5:7D:43:76:BE:81:6F:39:76:17:86:E0:01:33:1B:08:1E:42:DD:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87b7f548b0d643ffa768da76ef82c2b3680dff0d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/d491443331b4457d485935b07910c6648fd13543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/87b7f548b0d643ffa768da76ef82c2b3680dff0d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.197.0/24
                IPv6:
                  2801:16:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:ab:39:83:c7:74:65:6d:8b:c4:1d:73:ec:86:f5:3b:f9:52:
         8f:49:25:76:32:1d:88:d5:2b:41:48:32:e3:e1:d7:a9:c0:4e:
         19:fe:d8:65:55:5d:cd:27:b9:9c:b8:de:16:e2:a0:5a:b4:69:
         8a:e1:97:e5:3b:9f:cf:4d:b9:41:13:fe:2a:19:ef:53:1d:2e:
         4b:d2:ea:78:98:53:62:9c:ba:53:4c:4c:2b:f4:c3:21:96:50:
         fd:33:34:f6:01:b4:de:45:b9:7a:1c:88:ff:0a:44:60:57:64:
         55:b4:31:a5:3e:30:13:5b:80:f5:6b:7c:98:fe:4a:85:78:0f:
         b9:46:d0:df:b6:07:ab:7a:93:43:e5:e5:7c:de:b7:4f:af:17:
         f6:7a:e6:40:c3:57:39:eb:63:3e:83:53:59:4c:70:9a:83:10:
         f9:f3:20:ca:68:7a:63:18:51:ca:00:40:01:e3:19:3c:d1:c7:
         5d:ba:9a:ff:e3:d5:ed:0d:65:45:8e:e7:f9:b5:a5:a4:49:6e:
         ec:85:3a:63:db:2b:5a:78:d4:b6:ea:a3:0d:bb:f0:98:86:80:
         ec:26:5e:0b:fa:1b:42:62:6e:92:7d:8f:ce:fa:f5:8b:b8:37:
         fa:5d:d4:b9:f6:c2:fe:ba:ad:4d:9e:4a:79:f2:9e:e7:ec:87:
         e1:ed:63:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----