Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/788f16587fad19f0ecd08744f82b5fd5ac51c99c.roa
File:                     788f16587fad19f0ecd08744f82b5fd5ac51c99c.roa (raw, json)
Hash identifier:          zqlu6XLf6GxtabCywzIdcyyREy8/9PyoQ52WbPuTxkA=
Subject key identifier:   0F:94:61:C5:F3:40:AE:EC:E2:C9:2D:E2:D5:A9:8B:40:A5:EF:A4:60
Certificate issuer:       /CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8
Certificate serial:       18AE9E
Authority key identifier: C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/788f16587fad19f0ecd08744f82b5fd5ac51c99c.roa
Signing time:             Wed 15 Jun 2022 20:57:54 +0000
ROA not before:           Sat 01 Jan 2022 03:00:00 +0000
ROA not after:            Sat 15 Jun 2024 03:00:00 +0000
asID:                     52363
IP address blocks:        131.0.232.0/22 maxlen: 22
                          2803:f580::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617566 (0x18ae9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8
        Validity
            Not Before: Jan  1 03:00:00 2022 GMT
            Not After : Jun 15 03:00:00 2024 GMT
        Subject: CN=788f16587fad19f0ecd08744f82b5fd5ac51c99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:34:f7:b1:20:5e:98:1e:83:79:6e:5f:ff:7e:
                    44:75:06:37:a0:2b:1a:e1:d2:ec:c0:d0:52:2a:de:
                    96:b2:c3:e1:52:99:cf:58:45:3b:33:5e:19:69:07:
                    1a:fc:e0:bb:f7:d5:55:af:80:fa:ea:f7:55:01:bb:
                    ad:f3:fb:4f:e2:de:f4:b7:17:91:16:60:cb:e8:ca:
                    a1:b9:f4:48:e6:20:71:c3:5c:75:48:a4:5d:82:a0:
                    74:df:2a:db:11:e7:f1:8c:48:2a:dc:7e:ff:89:e7:
                    f8:b9:78:e2:ca:09:ab:0d:7a:a7:67:56:c9:76:8f:
                    a7:ba:bd:15:62:bd:72:25:e5:8e:25:b1:a3:20:19:
                    d0:fc:67:4c:1e:75:9b:89:57:f5:ab:21:06:7b:f0:
                    91:73:80:7d:0b:12:34:c9:6f:c4:d8:80:eb:a9:5e:
                    71:fb:0f:bb:c1:e1:93:78:72:ae:67:f5:71:38:6d:
                    33:f0:0c:ff:68:3e:41:fe:34:d1:93:aa:27:c6:59:
                    22:d5:60:32:0f:52:81:ac:3b:7e:0b:6e:ac:37:08:
                    08:b0:11:9e:3b:0e:20:3e:b1:69:81:f9:2b:59:52:
                    2d:8b:a3:b6:f2:8d:2f:31:52:28:a2:6b:4b:9b:d5:
                    31:73:21:d5:69:71:af:8d:27:ea:63:73:52:4f:1c:
                    3b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:94:61:C5:F3:40:AE:EC:E2:C9:2D:E2:D5:A9:8B:40:A5:EF:A4:60
            X509v3 Authority Key Identifier:
                keyid:C5:95:24:B5:C8:D5:68:1E:4A:E5:E7:6A:72:31:62:8B:87:82:41:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/788f16587fad19f0ecd08744f82b5fd5ac51c99c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba5a158c-27b7-48a6-8e96-bbf902c20408/3a642f0f5bf1f426c14ab984a5eec5cc1219f4a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.232.0/22
                IPv6:
                  2803:f580::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:5c:ee:3f:89:25:64:64:aa:2a:59:9c:2f:8e:2e:1c:3e:85:
         f2:f3:12:76:62:16:86:5c:7d:05:e6:96:a4:76:f1:d1:4e:69:
         b0:3d:80:33:88:41:6c:38:aa:e7:90:0c:26:7c:e5:49:98:5a:
         b7:2b:e0:93:64:55:88:f6:38:19:40:56:ae:4c:1c:a4:18:87:
         81:20:27:f6:27:07:63:8d:2f:22:5b:ea:10:42:47:58:94:25:
         84:d2:aa:1f:d2:56:4e:2d:a9:a3:a6:28:52:75:6f:5a:c5:36:
         a9:cd:f2:a0:ec:22:21:35:8c:cb:28:61:c9:e9:55:6f:4a:a4:
         e4:1a:0e:49:cf:93:43:31:08:6a:5d:00:9f:2e:dd:0c:90:4a:
         d2:0d:54:e0:20:55:24:13:63:a2:7c:3a:20:a6:be:58:dc:98:
         5c:67:97:9e:94:6a:62:8e:f5:93:4e:cc:ad:f7:a4:b6:85:df:
         a7:36:00:f2:89:dd:cf:41:b0:71:f7:cd:aa:ce:8b:30:57:6d:
         aa:3b:8d:12:26:84:3f:bc:d5:b3:71:f7:c6:ee:88:5f:42:e9:
         8e:f0:0f:7b:86:3a:ce:d5:16:c6:71:41:83:ba:64:a3:14:b5:
         e0:3f:ad:c8:ad:4f:c8:f4:8e:2c:87:d2:a4:1f:31:93:39:56:
         bc:70:32:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----