Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/e703464b549a94bef62dd685276c5f17d71a8ebe.roa
File:                     e703464b549a94bef62dd685276c5f17d71a8ebe.roa (raw, json)
Hash identifier:          exOyAg1ZvvfRnS6htw9qdbnnQjEMbG33/TgquJciapI=
Subject key identifier:   1A:3A:3F:6F:7E:AF:FE:B9:0A:50:D3:42:A2:34:1D:73:02:DE:98:85
Certificate issuer:       /CN=87b7f548b0d643ffa768da76ef82c2b3680dff0d
Certificate serial:       01DCF9
Authority key identifier: A5:7D:43:76:BE:81:6F:39:76:17:86:E0:01:33:1B:08:1E:42:DD:18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87b7f548b0d643ffa768da76ef82c2b3680dff0d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/e703464b549a94bef62dd685276c5f17d71a8ebe.roa
Signing time:             Mon 11 Jul 2022 14:15:43 +0000
ROA not before:           Sat 23 Apr 2022 03:00:00 +0000
ROA not after:            Tue 23 Apr 2024 03:00:00 +0000
asID:                     27947
IP address blocks:        181.224.197.0/24 maxlen: 24
                          2801:16:9800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122105 (0x1dcf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87b7f548b0d643ffa768da76ef82c2b3680dff0d
        Validity
            Not Before: Apr 23 03:00:00 2022 GMT
            Not After : Apr 23 03:00:00 2024 GMT
        Subject: CN=e703464b549a94bef62dd685276c5f17d71a8ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:33:25:19:83:ab:74:4f:47:8b:fb:b4:c9:b9:
                    24:ba:2d:de:64:de:da:a4:66:fe:77:f0:87:a5:53:
                    74:35:61:2c:01:1c:e5:ad:50:3c:bc:c5:43:67:a5:
                    f0:91:d5:ac:3f:6d:09:65:11:6b:91:fb:86:ef:1f:
                    10:a3:9b:31:51:b1:34:85:86:36:2c:d5:c3:8b:87:
                    54:a9:d9:e8:6b:d9:90:69:cc:e1:cc:68:8d:9e:8d:
                    8c:24:fd:c3:85:72:0f:85:7c:e7:c3:08:95:ec:64:
                    80:5a:71:e1:bb:c6:c6:5d:fd:7f:10:f0:8e:df:2f:
                    a9:1a:09:58:17:ce:a0:42:75:e9:9a:71:26:18:5a:
                    c1:9e:de:09:bf:68:33:4a:9b:76:0e:56:6e:18:9c:
                    52:e1:93:2c:00:76:34:fd:08:0f:ee:81:f4:52:33:
                    d6:3c:7e:d0:c5:40:b8:79:87:c2:ed:3d:aa:c9:05:
                    3c:49:bd:fa:04:62:da:61:07:89:3a:ed:99:b4:88:
                    21:7f:7e:51:d2:69:7b:9f:98:65:16:4d:95:c2:11:
                    c0:32:a3:df:39:73:3c:27:56:00:da:14:03:50:9f:
                    fe:87:b5:66:a7:a1:a7:ed:a9:9f:5c:a0:48:7c:d6:
                    1c:01:3e:31:be:2e:19:ae:a0:bd:8d:0a:1e:a4:d5:
                    f2:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:3A:3F:6F:7E:AF:FE:B9:0A:50:D3:42:A2:34:1D:73:02:DE:98:85
            X509v3 Authority Key Identifier:
                keyid:A5:7D:43:76:BE:81:6F:39:76:17:86:E0:01:33:1B:08:1E:42:DD:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87b7f548b0d643ffa768da76ef82c2b3680dff0d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/e703464b549a94bef62dd685276c5f17d71a8ebe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba373a1b-387b-41d1-8540-c1758dfe3cf3/87b7f548b0d643ffa768da76ef82c2b3680dff0d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.197.0/24
                IPv6:
                  2801:16:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:f9:61:c0:97:5c:8c:51:8f:c5:b6:9b:17:55:b6:e1:21:98:
         89:d7:fe:e3:fe:ee:f0:be:f3:8d:9c:c0:ae:c4:38:e2:53:96:
         d5:64:05:f9:d9:33:98:5d:6e:4c:cc:ea:97:26:46:56:a3:2f:
         5c:98:93:e9:25:fd:06:97:58:83:c3:31:ad:64:1e:1c:4b:eb:
         75:b3:fc:1c:d4:74:b1:46:e6:ab:04:b6:a6:08:eb:f8:8a:41:
         c9:1f:c7:13:a2:78:74:90:81:36:55:a0:1d:a3:4b:dc:a7:f7:
         83:76:e3:07:60:e0:da:62:3c:5a:5b:ea:7a:3e:30:dc:d0:86:
         89:fc:43:a9:49:b3:5a:62:55:a4:94:b1:5f:75:07:8e:a1:f6:
         13:f1:6d:73:5d:9a:4c:5e:f4:0c:b5:41:c5:af:b6:93:4a:ff:
         84:89:60:cf:48:44:2f:13:02:89:2f:15:b0:8c:ff:c8:24:80:
         3a:5c:a0:fe:97:8a:dc:f2:6c:9f:d5:49:de:78:d9:ff:6c:6c:
         86:1e:78:b2:2d:31:db:87:84:7c:58:f6:27:de:c7:e5:64:d7:
         17:15:10:5e:fa:06:d4:01:06:ae:6c:96:8b:49:05:e8:dc:7a:
         d2:9c:e1:32:ac:b9:ac:e7:a5:51:5f:27:d0:61:ed:b8:66:ee:
         59:9e:27:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----