Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be177ad9-6073-4d5d-8783-4c9a57d11a43/440603fd2aacb94c7b05cf99ddc473fea0e4ea51.roa
File:                     440603fd2aacb94c7b05cf99ddc473fea0e4ea51.roa (raw, json)
Hash identifier:          Iu+Iy8ru+B5piPsVvI+/Y2369DWddZCAEEvsB/WDBsI=
Subject key identifier:   59:1A:FF:9F:A3:4D:4A:73:90:84:07:DA:85:9E:2C:27:A6:8A:AE:92
Certificate issuer:       /CN=8b35289194208004e4cde6c265343d055a0a80df
Certificate serial:       088C
Authority key identifier: C1:E5:79:C1:BF:76:78:FF:44:79:07:B6:7A:9E:61:43:07:BC:37:13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b35289194208004e4cde6c265343d055a0a80df.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be177ad9-6073-4d5d-8783-4c9a57d11a43/440603fd2aacb94c7b05cf99ddc473fea0e4ea51.roa
Signing time:             Fri 21 Jan 2022 02:36:40 +0000
ROA not before:           Thu 20 Jan 2022 03:00:00 +0000
ROA not after:            Sat 20 Jan 2024 03:00:00 +0000
asID:                     272034
IP address blocks:        181.233.76.0/22 maxlen: 24
                          2803:f510::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2188 (0x88c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b35289194208004e4cde6c265343d055a0a80df
        Validity
            Not Before: Jan 20 03:00:00 2022 GMT
            Not After : Jan 20 03:00:00 2024 GMT
        Subject: CN=440603fd2aacb94c7b05cf99ddc473fea0e4ea51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d2:b4:f7:c8:95:8b:5a:3c:7b:c0:21:ac:cf:
                    2a:d9:0f:a1:36:4f:7f:ed:af:7c:86:23:79:e2:2d:
                    f0:43:0d:e1:1f:0b:1d:b8:48:1b:22:da:02:c9:63:
                    c7:4e:29:83:67:11:9e:fe:30:a8:7c:fc:d3:1a:72:
                    12:cf:77:10:fe:f1:54:da:42:cb:23:7b:ba:10:d9:
                    64:be:39:4b:2f:66:49:15:8f:e3:97:a2:2f:eb:7e:
                    cd:f4:48:c9:7f:a9:91:c0:81:94:2e:f9:46:e0:81:
                    2c:34:8d:bd:4e:dd:5d:c1:96:a7:90:c0:64:43:88:
                    b5:a5:0c:c7:55:d2:2d:5d:4f:69:73:23:f4:9f:c7:
                    9a:fd:a1:ac:55:0b:56:0b:f4:d1:f3:0d:81:fa:7c:
                    b7:bf:3c:ea:2e:11:5e:06:be:9a:ac:54:d3:c8:91:
                    f1:cf:11:94:b9:b8:77:4a:2a:b8:df:a8:02:ad:92:
                    97:d4:b3:98:b5:7c:82:fc:4b:bb:ee:6b:f8:bb:59:
                    9f:77:87:04:74:d0:e3:b5:04:73:c2:c0:ab:86:d4:
                    d5:33:ce:ba:fe:db:a7:b4:c5:5a:24:8f:06:24:92:
                    5b:00:e1:bb:32:c5:7a:79:f9:05:3e:3d:99:5d:3b:
                    6d:18:8f:7a:d4:b0:c8:e6:75:6d:08:d5:c5:cf:77:
                    12:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1A:FF:9F:A3:4D:4A:73:90:84:07:DA:85:9E:2C:27:A6:8A:AE:92
            X509v3 Authority Key Identifier:
                keyid:C1:E5:79:C1:BF:76:78:FF:44:79:07:B6:7A:9E:61:43:07:BC:37:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b35289194208004e4cde6c265343d055a0a80df.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be177ad9-6073-4d5d-8783-4c9a57d11a43/440603fd2aacb94c7b05cf99ddc473fea0e4ea51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be177ad9-6073-4d5d-8783-4c9a57d11a43/8b35289194208004e4cde6c265343d055a0a80df.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.76.0/22
                IPv6:
                  2803:f510::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:ea:e4:0e:eb:c4:e9:0a:73:ea:62:49:f5:e4:73:7e:08:71:
         13:c6:3c:2f:08:94:5a:b4:39:27:91:2f:27:f4:f2:e4:c4:aa:
         96:1d:48:e1:4d:d3:e8:bf:1b:3e:81:45:8b:05:54:1c:63:67:
         7b:47:15:90:87:1e:a6:45:e6:d1:c3:fe:fb:6a:93:bd:ed:7f:
         ee:8f:84:1b:45:a6:a4:a2:09:4b:0c:bf:67:b3:4d:8f:ee:a5:
         a9:0b:a2:fd:f9:e6:a4:25:1b:e0:48:47:6e:83:8f:2f:4a:af:
         e2:17:ae:92:05:3a:5e:4a:02:a1:08:ba:55:67:82:31:91:1e:
         8d:b6:e5:4a:be:c3:b5:af:7b:e0:6e:50:39:9b:98:60:e8:a4:
         48:2b:1f:4b:3b:f7:5a:ed:14:ce:47:2e:b5:9f:42:6c:42:dd:
         36:ea:9f:77:66:8d:b3:c3:3a:26:45:9d:47:9a:6b:30:0a:6d:
         5c:5c:87:21:a0:c7:70:78:9a:e5:13:61:12:7d:9e:93:a6:9d:
         80:42:5c:47:58:7b:24:80:99:48:5c:d2:77:19:0f:43:9f:7c:
         d0:b3:73:26:20:03:f5:c0:00:d0:43:8a:e5:7e:3b:9e:9c:8b:
         11:a7:69:89:86:ef:4e:9d:21:78:42:d5:04:e5:c1:0f:74:53:
         e9:c9:d2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----