Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/8f62de5dea60858ecbc7aa08f226f5a56362fb7a.roa
File:                     8f62de5dea60858ecbc7aa08f226f5a56362fb7a.roa (raw, json)
Hash identifier:          GPp12IEvwPnpjh62WZpHd9o5DSz3gr7KA+jzWjCJMxY=
Subject key identifier:   64:5D:55:6A:B6:E9:CE:79:AA:E5:6F:D3:B0:13:19:D6:26:62:3D:C6
Certificate issuer:       /CN=751a67f045f8f4106edcbcac4a291b68cb4fca20
Certificate serial:       04E3DD
Authority key identifier: 74:56:F4:FA:00:5B:BD:C8:10:41:D1:84:B9:90:6E:8D:AB:B8:9B:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/751a67f045f8f4106edcbcac4a291b68cb4fca20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/8f62de5dea60858ecbc7aa08f226f5a56362fb7a.roa
Signing time:             Wed 26 Apr 2023 22:23:49 +0000
ROA not before:           Tue 25 Apr 2023 22:23:49 +0000
ROA not after:            Sat 26 Apr 2025 22:23:49 +0000
asID:                     7303
IP address blocks:        181.174.216.0/22 maxlen: 24
                          2803:e810::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320477 (0x4e3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=751a67f045f8f4106edcbcac4a291b68cb4fca20
        Validity
            Not Before: Apr 25 22:23:49 2023 GMT
            Not After : Apr 26 22:23:49 2025 GMT
        Subject: CN=8f62de5dea60858ecbc7aa08f226f5a56362fb7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:97:91:3c:b3:77:57:dd:1c:63:4e:60:2f:16:
                    cb:5f:e5:62:b5:7e:2a:a9:d1:64:74:55:c5:4e:91:
                    e2:ee:ce:51:c9:5c:9c:fa:62:3a:94:cb:40:85:97:
                    9e:be:34:2e:58:5a:50:07:3c:60:bb:9d:d2:34:8b:
                    35:68:fa:4c:dd:01:34:a9:37:5f:fa:ae:76:b3:cd:
                    50:f2:c0:ed:2a:a8:06:9a:06:79:dc:af:dc:11:cb:
                    59:b0:7b:51:8f:84:b0:50:43:60:11:62:f8:e4:b2:
                    b2:38:29:69:94:87:e3:6f:52:4b:6c:93:39:9d:94:
                    e6:b2:34:fa:6d:46:bb:46:ff:73:72:97:08:d4:65:
                    6f:8f:5c:c6:da:ea:1f:30:91:99:78:e0:76:6c:ff:
                    2f:e3:7c:d5:3a:98:b9:27:be:d8:9d:3d:4a:06:79:
                    69:01:35:b2:41:d3:91:c2:32:b4:1b:f5:28:10:e1:
                    7c:67:c9:d6:e4:93:1e:94:a8:ac:73:69:10:bf:7c:
                    d5:49:e5:18:a5:0f:36:91:65:a0:fa:93:bc:cc:8a:
                    dd:23:4e:a3:3b:14:19:37:da:67:8a:72:b3:b3:8f:
                    1d:44:7b:66:33:84:15:27:b5:cd:57:7d:e8:1e:98:
                    01:8f:f0:9e:06:b6:fb:2a:f0:d3:18:d1:ff:14:dd:
                    69:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5D:55:6A:B6:E9:CE:79:AA:E5:6F:D3:B0:13:19:D6:26:62:3D:C6
            X509v3 Authority Key Identifier:
                keyid:74:56:F4:FA:00:5B:BD:C8:10:41:D1:84:B9:90:6E:8D:AB:B8:9B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/751a67f045f8f4106edcbcac4a291b68cb4fca20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/8f62de5dea60858ecbc7aa08f226f5a56362fb7a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/751a67f045f8f4106edcbcac4a291b68cb4fca20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.216.0/22
                IPv6:
                  2803:e810::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:4b:fa:f3:1a:0d:06:86:02:95:83:7f:d5:7f:5b:6a:71:00:
         2f:69:b1:ce:1f:fd:77:cf:26:9e:e0:5c:b0:0b:dd:0d:3d:94:
         b0:87:79:43:ad:2c:88:0c:6d:38:47:93:cf:32:9a:3b:02:79:
         d8:23:7b:28:c2:e5:a9:03:72:cc:af:d1:32:30:e8:2c:ae:27:
         0d:6a:ce:60:ec:3a:9f:13:1b:aa:08:df:53:8b:2a:65:9a:ab:
         10:3c:28:36:ca:4c:da:a1:2c:d3:e0:46:53:cb:90:eb:67:12:
         47:21:a2:c3:ac:61:10:5f:8e:87:2d:ef:f5:1a:7d:83:fc:e5:
         08:06:be:8e:a5:aa:73:bc:0d:1e:24:cd:ec:e8:48:6d:55:ab:
         87:6c:8d:23:33:9b:4f:11:51:01:c9:7d:06:7a:25:aa:32:b7:
         50:3a:85:b6:07:f0:81:58:07:26:8b:09:48:17:e0:c2:4f:1e:
         6b:ed:c3:ce:ec:fd:79:e4:c2:3b:e9:1d:64:cb:59:e3:d2:c5:
         24:74:b3:5d:cc:b4:48:b4:c7:90:66:1d:25:c4:e8:05:c3:b6:
         20:06:ed:12:ec:12:e8:7b:9d:88:46:80:51:35:e2:94:a1:99:
         bb:3f:56:49:1d:0b:8c:c6:59:2a:b8:b3:b2:81:65:25:3d:0a:
         4e:ae:e8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----