Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/34bb97fb7d93a4bec5cd9822948dfd4b153367ca.roa
File:                     34bb97fb7d93a4bec5cd9822948dfd4b153367ca.roa (raw, json)
Hash identifier:          Ok+scF+EnzTaXzu6+6EE25p6222zi7nT9GKmbQw6KfY=
Subject key identifier:   1A:DF:61:60:4D:23:B9:16:E5:DB:53:DD:BC:E1:94:FE:10:38:C5:B2
Certificate issuer:       /CN=751a67f045f8f4106edcbcac4a291b68cb4fca20
Certificate serial:       022341
Authority key identifier: 74:56:F4:FA:00:5B:BD:C8:10:41:D1:84:B9:90:6E:8D:AB:B8:9B:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/751a67f045f8f4106edcbcac4a291b68cb4fca20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/34bb97fb7d93a4bec5cd9822948dfd4b153367ca.roa
Signing time:             Fri 13 Jan 2023 11:49:42 +0000
ROA not before:           Mon 17 Oct 2022 13:52:31 +0000
ROA not after:            Sat 19 Oct 2024 13:52:31 +0000
asID:                     271832
IP address blocks:        181.174.216.0/22 maxlen: 24
                          2803:e810::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140097 (0x22341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=751a67f045f8f4106edcbcac4a291b68cb4fca20
        Validity
            Not Before: Oct 17 13:52:31 2022 GMT
            Not After : Oct 19 13:52:31 2024 GMT
        Subject: CN=34bb97fb7d93a4bec5cd9822948dfd4b153367ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e7:6a:87:35:de:3e:68:c7:cf:f0:dc:eb:46:
                    5a:20:7b:6d:33:02:fc:30:9f:12:23:fe:bc:da:a3:
                    03:9f:dc:3b:dc:91:8b:f2:8d:16:e3:d4:e0:a3:75:
                    58:21:f9:21:a0:ab:ab:2f:8c:f7:4b:3c:cb:55:c2:
                    01:4e:08:c0:1b:82:46:81:c6:c5:20:14:c6:b1:1d:
                    77:a3:43:2f:7d:2b:53:e0:e0:e8:fc:1c:17:8a:1f:
                    bd:6b:f5:03:6f:66:e0:20:f6:c2:9c:de:06:f8:26:
                    c1:13:a9:17:60:c6:a4:35:eb:87:0c:68:d6:d0:4e:
                    f9:ee:e5:ea:35:17:81:9e:31:c7:79:cb:2c:68:18:
                    41:b0:b4:8b:73:cc:e3:1c:e8:ff:5e:3d:0c:33:60:
                    69:2d:20:2b:a3:df:60:4b:d7:4f:61:b7:8f:2f:19:
                    25:96:16:b1:98:9a:42:e1:74:a1:d4:e3:00:71:22:
                    45:96:af:a5:2b:00:2d:65:39:f7:95:6b:32:ef:8a:
                    87:1d:15:db:78:40:fd:8b:cd:36:4b:e2:b1:44:25:
                    2b:42:86:6e:e9:61:58:00:64:02:64:47:9b:34:60:
                    c2:c0:f8:c3:a3:37:60:91:9d:eb:8b:43:00:04:48:
                    3c:12:82:e6:60:91:d2:31:22:d5:a0:c0:ed:33:12:
                    59:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DF:61:60:4D:23:B9:16:E5:DB:53:DD:BC:E1:94:FE:10:38:C5:B2
            X509v3 Authority Key Identifier:
                keyid:74:56:F4:FA:00:5B:BD:C8:10:41:D1:84:B9:90:6E:8D:AB:B8:9B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/751a67f045f8f4106edcbcac4a291b68cb4fca20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/34bb97fb7d93a4bec5cd9822948dfd4b153367ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/751a67f045f8f4106edcbcac4a291b68cb4fca20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.216.0/22
                IPv6:
                  2803:e810::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:5f:96:58:82:1d:e5:7a:34:2e:9f:b9:8b:66:7c:8b:8e:97:
         ac:60:f6:4b:5c:83:37:42:7d:45:94:e2:2b:16:7c:8e:d4:d1:
         da:6b:70:82:fe:09:80:a0:15:87:3b:ea:21:5f:62:b6:8d:4f:
         75:12:35:9f:3f:9a:8b:8b:cd:a3:bd:44:9f:4c:cf:c2:3a:14:
         83:49:83:7d:6c:e6:ca:69:ea:82:2a:df:13:ee:39:f7:15:92:
         5a:2c:ef:55:69:0e:26:8c:c7:42:3a:ab:f3:c9:38:33:c5:db:
         96:65:7d:1f:50:ec:52:13:a3:8f:99:f7:9c:34:a3:fd:6e:81:
         10:5c:d0:29:2a:21:da:ec:18:c8:b0:9c:2f:ae:55:7e:3a:60:
         46:57:c5:a9:d8:2e:0a:58:2b:ba:b6:85:93:04:36:7c:c0:eb:
         58:98:5d:14:99:8e:c6:94:52:07:20:5d:aa:56:f7:dc:b8:e9:
         76:44:e7:b1:90:01:2c:05:29:bb:e2:59:c7:72:f3:ef:8b:d4:
         36:fd:e6:b5:3b:bf:7d:43:fa:05:85:d6:e9:12:06:1d:ed:03:
         5c:2b:57:e0:f5:a1:16:71:96:a2:2c:d5:a4:1c:81:ab:f8:70:
         86:18:c5:d0:78:a8:c4:a3:c3:1e:c4:93:74:62:24:2a:be:4f:
         56:f1:01:a5
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDAiNBMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDc1
MWE2N2YwNDVmOGY0MTA2ZWRjYmNhYzRhMjkxYjY4Y2I0ZmNhMjAwHhcNMjIxMDE3
MTM1MjMxWhcNMjQxMDE5MTM1MjMxWjAzMTEwLwYDVQQDEygzNGJiOTdmYjdkOTNh
NGJlYzVjZDk4MjI5NDhkZmQ0YjE1MzM2N2NhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAwedqhzXePmjHz/Dc60ZaIHttMwL8MJ8SI/682qMDn9w73JGL
8o0W49Tgo3VYIfkhoKurL4z3SzzLVcIBTgjAG4JGgcbFIBTGsR13o0MvfStT4ODo
/BwXih+9a/UDb2bgIPbCnN4G+CbBE6kXYMakNeuHDGjW0E757uXqNReBnjHHecss
aBhBsLSLc8zjHOj/Xj0MM2BpLSAro99gS9dPYbePLxkllhaxmJpC4XSh1OMAcSJF
lq+lKwAtZTn3lWsy74qHHRXbeED9i802S+KxRCUrQoZu6WFYAGQCZEebNGDCwPjD
ozdgkZ3ri0MABEg8EoLmYJHSMSLVoMDtMxJZ2wIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFBrfYWBNI7kW5dtT3bzhlP4QOMWyMB8GA1UdIwQYMBaAFHRW9PoAW73IEEHR
hLmQbo2ruJvzMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNzUxYTY3
ZjA0NWY4ZjQxMDZlZGNiY2FjNGEyOTFiNjhjYjRmY2EyMC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvY2UwYzNlZjgtOWVjNy00YWI0LTk3MGEtZWRlOTZk
ODY1ZjI3LzM0YmI5N2ZiN2Q5M2E0YmVjNWNkOTgyMjk0OGRmZDRiMTUzMzY3Y2Eu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9jZTBjM2VmOC05ZWM3LTRhYjQtOTcwYS1lZGU5
NmQ4NjVmMjcvNzUxYTY3ZjA0NWY4ZjQxMDZlZGNiY2FjNGEyOTFiNjhjYjRmY2Ey
MC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArWu2DANBAIAAjAHAwUAKAPoEDANBgkqhkiG9w0BAQsFAAOC
AQEAGF+WWIId5Xo0Lp+5i2Z8i46XrGD2S1yDN0J9RZTiKxZ8jtTR2mtwgv4JgKAV
hzvqIV9ito1PdRI1nz+ai4vNo71En0zPwjoUg0mDfWzmymnqgirfE+459xWSWizv
VWkOJozHQjqr88k4M8XblmV9H1DsUhOjj5n3nDSj/W6BEFzQKSoh2uwYyLCcL65V
fjpgRlfFqdguClgruraFkwQ2fMDrWJhdFJmOxpRSByBdqlb33LjpdkTnsZABLAUp
u+JZx3Lz74vUNv3mtTu/fUP6BYXW6RIGHe0DXCtX4PWhFnGWoizVpByBq/hwhhjF
0HioxKPDHsSTdGIkKr5PVvEBpQ==
-----END CERTIFICATE-----