Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/d674a6383e3cf4ae92a04120a9a4e7fa6106daff.roa
File:                     d674a6383e3cf4ae92a04120a9a4e7fa6106daff.roa (raw, json)
Hash identifier:          C/l2lSGH95d2fDEyatfr5NmbYoVCfhZeylKsqHd7IYY=
Subject key identifier:   2B:24:D1:21:1D:2A:E4:5A:04:F4:F5:78:11:3C:9A:C5:2D:95:E6:41
Certificate issuer:       /CN=87b7f548b0d643ffa768da76ef82c2b3680dff0d
Certificate serial:       09AC1C
Authority key identifier: A5:7D:43:76:BE:81:6F:39:76:17:86:E0:01:33:1B:08:1E:42:DD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87b7f548b0d643ffa768da76ef82c2b3680dff0d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/d674a6383e3cf4ae92a04120a9a4e7fa6106daff.roa
Signing time:             Tue 09 May 2023 14:38:16 +0000
ROA not before:           Mon 08 May 2023 14:38:16 +0000
ROA not after:            Fri 09 May 2025 14:38:16 +0000
asID:                     272067
IP address blocks:        181.224.197.0/24 maxlen: 24
                          2801:16:9800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633884 (0x9ac1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b7f548b0d643ffa768da76ef82c2b3680dff0d
        Validity
            Not Before: May  8 14:38:16 2023 GMT
            Not After : May  9 14:38:16 2025 GMT
        Subject: CN=d674a6383e3cf4ae92a04120a9a4e7fa6106daff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:48:c2:66:47:b8:77:6e:5f:ee:f0:0d:04:c1:
                    8f:82:75:5b:b3:4c:17:79:dd:ca:1f:8e:cf:69:b5:
                    40:92:bc:90:6a:1b:1f:48:19:12:e7:b0:1d:51:ca:
                    21:18:3b:1d:21:4f:26:5c:de:f2:31:e6:a9:49:fd:
                    78:f9:52:1f:25:86:3e:d2:59:b6:91:89:63:03:8d:
                    58:b6:f6:ed:c7:a0:d3:5b:6b:7f:35:b6:bf:8b:b2:
                    4f:fb:10:2f:f9:29:31:29:25:8d:1f:97:60:65:f6:
                    b7:92:46:08:8f:f8:a7:2b:00:c5:48:d9:50:b1:c1:
                    7d:55:b2:f4:80:ce:84:48:4b:ab:3f:7f:d3:a9:e1:
                    f5:f0:03:1a:08:6f:cc:91:6d:4b:7d:76:27:e7:97:
                    ac:f6:69:47:64:1f:03:dc:e3:95:a3:fd:7d:06:c7:
                    a7:b2:ef:9c:10:e1:14:d3:25:54:57:d6:1f:a5:d2:
                    80:a4:02:62:1e:39:c6:83:c6:e2:80:ed:7f:e3:78:
                    35:0e:1e:71:98:e0:86:d9:fd:74:3b:19:b5:45:46:
                    90:5f:12:78:d1:03:f7:59:5f:d5:d4:f2:59:22:2a:
                    20:03:e1:c8:e7:3e:b6:5f:6e:23:36:01:99:00:2d:
                    0c:7f:63:7b:8c:75:d5:81:15:c8:f6:3e:4e:bb:48:
                    e5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:24:D1:21:1D:2A:E4:5A:04:F4:F5:78:11:3C:9A:C5:2D:95:E6:41
            X509v3 Authority Key Identifier:
                keyid:A5:7D:43:76:BE:81:6F:39:76:17:86:E0:01:33:1B:08:1E:42:DD:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87b7f548b0d643ffa768da76ef82c2b3680dff0d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/d674a6383e3cf4ae92a04120a9a4e7fa6106daff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/87b7f548b0d643ffa768da76ef82c2b3680dff0d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.197.0/24
                IPv6:
                  2801:16:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:06:0a:b4:67:3a:9d:7e:62:df:2f:db:a8:67:d5:21:fc:be:
         b6:0c:6c:11:2e:db:69:84:dd:0f:f6:e8:79:6c:79:7d:4e:4a:
         20:fe:44:1b:fe:d1:33:0b:ce:fc:c5:b4:d7:34:d4:c4:8b:83:
         48:32:b0:60:f6:9e:e8:dd:38:58:81:44:cd:d5:2e:bc:67:ab:
         ff:2f:73:3b:66:9a:ad:5b:c1:e5:c6:1d:62:fa:2d:43:37:15:
         00:8c:df:2b:89:30:d1:aa:4d:aa:82:ab:30:9f:bb:79:c2:67:
         e8:1c:36:28:c7:e2:d3:e3:ea:85:dd:db:25:28:97:79:50:e8:
         5b:5d:a0:f1:61:54:31:08:0c:70:d4:a3:3d:71:56:e8:b8:95:
         dd:3b:73:2c:06:0e:29:ab:3a:91:ee:a6:30:50:25:63:3b:bc:
         8f:b3:88:10:91:63:67:cf:3c:24:86:e7:23:23:f5:68:cf:fa:
         3b:36:e8:58:08:3e:55:ce:95:02:89:e7:0d:63:90:be:f8:7e:
         38:e0:3f:18:39:a7:ba:b7:68:79:fe:a8:0b:cd:b7:a1:0e:59:
         89:41:a8:ed:0d:9c:f2:f8:fb:04:f8:0a:f2:07:a8:95:5c:bf:
         a8:04:16:75:ac:c6:5e:0e:e3:10:32:73:55:ed:17:86:cf:98:
         a5:60:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----