Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/e9f0da3361043355c201d79bfc9a46eea95e0ebc.roa
File:                     e9f0da3361043355c201d79bfc9a46eea95e0ebc.roa (raw, json)
Hash identifier:          sjpWkYlZi8VLa6ADvUjUz67Uy5I8NDfY7eXiQ/YM+nk=
Subject key identifier:   7B:68:18:32:F7:3D:67:C4:8B:C8:DF:38:42:28:27:BE:D3:96:48:2C
Certificate issuer:       /CN=751a67f045f8f4106edcbcac4a291b68cb4fca20
Certificate serial:       04DD56
Authority key identifier: 74:56:F4:FA:00:5B:BD:C8:10:41:D1:84:B9:90:6E:8D:AB:B8:9B:F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/751a67f045f8f4106edcbcac4a291b68cb4fca20.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/e9f0da3361043355c201d79bfc9a46eea95e0ebc.roa
Signing time:             Wed 26 Apr 2023 22:19:36 +0000
ROA not before:           Tue 25 Apr 2023 22:19:36 +0000
ROA not after:            Sat 26 Apr 2025 22:19:36 +0000
asID:                     271832
IP address blocks:        181.174.216.0/22 maxlen: 24
                          2803:e810::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318806 (0x4dd56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=751a67f045f8f4106edcbcac4a291b68cb4fca20
        Validity
            Not Before: Apr 25 22:19:36 2023 GMT
            Not After : Apr 26 22:19:36 2025 GMT
        Subject: CN=e9f0da3361043355c201d79bfc9a46eea95e0ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d7:84:5e:63:9b:47:17:34:33:62:0b:c4:bf:
                    f6:1c:91:31:cc:90:48:5b:30:d8:ff:9d:16:6a:fc:
                    9a:c1:dc:7f:09:21:a3:c5:95:ca:ca:ff:6e:8e:29:
                    41:7d:cb:5a:60:7b:46:21:9d:93:01:43:68:f8:6a:
                    1d:ed:54:76:a5:b8:3f:1d:ea:52:2a:4b:e7:f0:36:
                    dd:15:32:d0:63:c7:db:c3:3e:64:f6:3b:2b:af:88:
                    87:38:d6:da:09:8d:88:35:2f:13:42:92:0b:66:37:
                    42:6a:20:20:11:58:1e:55:3b:00:bc:da:b3:6b:e1:
                    f3:16:15:37:a3:c8:12:47:4c:2e:de:5f:9b:6b:7d:
                    5f:53:97:9a:e9:07:f4:b2:f4:25:c2:b2:cb:14:02:
                    fc:e4:ff:24:24:b1:87:f5:ba:10:4d:b5:4b:99:cc:
                    e1:08:ba:a7:da:45:20:02:cc:a7:8b:36:c8:84:52:
                    16:99:cd:0d:ea:3f:61:ba:00:aa:27:5e:0e:52:e3:
                    81:ea:fa:ad:a6:de:3d:d1:e9:da:55:39:ba:ad:93:
                    05:a4:5c:ae:fa:75:87:46:44:57:37:94:7e:3e:16:
                    93:ad:5c:80:cc:ba:7d:a2:b3:63:fc:ae:ea:32:3e:
                    20:70:69:ff:fb:34:36:bf:82:f5:86:11:27:59:5c:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:68:18:32:F7:3D:67:C4:8B:C8:DF:38:42:28:27:BE:D3:96:48:2C
            X509v3 Authority Key Identifier:
                keyid:74:56:F4:FA:00:5B:BD:C8:10:41:D1:84:B9:90:6E:8D:AB:B8:9B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/751a67f045f8f4106edcbcac4a291b68cb4fca20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/e9f0da3361043355c201d79bfc9a46eea95e0ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ce0c3ef8-9ec7-4ab4-970a-ede96d865f27/751a67f045f8f4106edcbcac4a291b68cb4fca20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.216.0/22
                IPv6:
                  2803:e810::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:4d:25:2a:6a:f4:9a:d2:56:e3:31:f7:f2:08:d9:03:08:c4:
         5f:b0:51:70:f0:88:ad:43:ba:e1:7a:c0:11:f1:1e:33:69:ed:
         29:3c:38:84:7b:12:70:4c:d9:01:38:bb:89:3f:55:b5:ff:c6:
         a4:55:77:be:9d:7a:35:79:06:a0:5f:92:64:f3:59:19:0c:d7:
         19:d1:f8:eb:82:2f:58:dd:da:76:d3:fb:aa:61:64:f3:6f:0a:
         30:ab:1b:a2:0f:c3:d4:54:70:e1:36:10:79:4b:14:d4:d0:b3:
         c4:8e:12:fb:b2:95:45:6e:64:c8:67:41:2a:ec:86:5c:59:43:
         02:95:41:b0:ee:04:8d:60:cb:62:d3:40:21:fc:4c:a4:04:86:
         82:1b:01:2f:54:50:14:99:ac:2d:bf:e4:43:f3:e0:60:81:53:
         4c:12:ad:5c:6b:7d:77:d0:03:f0:60:7a:72:e6:a2:32:77:ad:
         25:96:c1:11:a7:3b:a9:76:71:9a:24:e3:03:0c:80:de:c1:b8:
         ad:f1:0f:81:cb:38:89:8a:84:6e:e6:c0:f6:90:2a:be:1f:68:
         f8:ed:b4:14:ba:95:ec:39:fb:26:d1:c7:16:2a:9a:a5:b1:98:
         0c:1f:10:40:68:7e:e8:c3:83:74:5f:95:f4:29:d0:ec:a4:19:
         d6:fa:a3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----