Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/010c3081c981733800795fbee00c7180074c2dcb.roa
File:                     010c3081c981733800795fbee00c7180074c2dcb.roa (raw, json)
Hash identifier:          Dkmm5o3MIU3qskhKIxmkEkjOdWNPOdk2eUrfBOsffLg=
Subject key identifier:   F2:DD:E1:81:16:E0:35:74:2F:4B:CC:A3:E6:A1:BA:EF:2A:AD:86:39
Certificate issuer:       /CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
Certificate serial:       25AA91
Authority key identifier: 8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/010c3081c981733800795fbee00c7180074c2dcb.roa
Signing time:             Mon 18 Sep 2023 11:04:18 +0000
ROA not before:           Sun 17 Sep 2023 11:04:11 +0000
ROA not after:            Thu 18 Sep 2025 11:04:11 +0000
asID:                     264764
IP address blocks:        181.199.210.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2468497 (0x25aa91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf2853cc85c1e55c65e763299ba08894f8ce8d51
        Validity
            Not Before: Sep 17 11:04:11 2023 GMT
            Not After : Sep 18 11:04:11 2025 GMT
        Subject: CN=010c3081c981733800795fbee00c7180074c2dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:dd:ff:0a:a7:b6:4b:26:1f:54:aa:dd:55:fe:
                    f0:ba:ae:88:b4:3e:5d:7d:d8:a1:5f:21:e9:31:05:
                    ff:99:92:93:9f:96:a8:27:32:ba:5b:f6:85:b2:a8:
                    53:4c:1b:6b:2d:12:31:22:3d:44:26:10:d0:84:11:
                    44:6c:68:e3:63:c7:91:ba:fa:f0:06:b8:a1:38:9b:
                    c1:eb:fd:a5:99:89:a3:c3:8e:c4:43:6f:c6:d1:55:
                    d4:80:9d:cc:b9:1a:8e:18:39:42:f4:79:02:61:df:
                    fc:b8:1e:57:a9:40:7b:25:d1:30:f4:97:60:02:e7:
                    cc:8c:d6:61:00:20:2b:63:16:ed:bc:cf:46:d5:c1:
                    05:72:93:fc:42:aa:d5:1b:b6:30:1e:6e:6a:55:32:
                    bc:32:ef:84:80:51:17:8b:ea:5d:3e:29:f9:01:77:
                    5c:e3:eb:46:85:6e:c6:f2:f6:74:f6:fd:ff:4d:1e:
                    bc:6d:f3:03:23:12:9c:24:73:70:ac:c1:b6:b8:2d:
                    ec:7a:38:ba:91:5d:a3:c2:56:c9:dd:3d:79:20:7d:
                    a0:c2:da:d3:d2:d7:62:1a:7f:75:9b:2a:b9:aa:9f:
                    2a:63:21:7f:a3:93:f9:87:3c:ee:1e:a4:a5:0f:5b:
                    5b:53:ab:42:9a:5b:de:bd:f2:af:70:89:ac:32:a9:
                    e8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:DD:E1:81:16:E0:35:74:2F:4B:CC:A3:E6:A1:BA:EF:2A:AD:86:39
            X509v3 Authority Key Identifier:
                keyid:8D:73:C4:77:A1:31:AD:6D:51:67:66:DE:F4:72:CC:2E:60:48:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf2853cc85c1e55c65e763299ba08894f8ce8d51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/010c3081c981733800795fbee00c7180074c2dcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d6f21a8c-3a71-47a7-9f6e-c9b441427fcd/cf2853cc85c1e55c65e763299ba08894f8ce8d51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.199.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:72:f4:4e:3b:dc:68:29:3c:bb:b0:62:67:f0:c5:32:7e:13:
         d3:35:5a:45:19:0a:78:ec:27:fe:d3:fe:fa:19:3d:54:33:dd:
         e7:a0:0c:9a:0e:84:48:81:84:a8:c9:13:49:f3:9c:23:6b:8f:
         ae:a3:92:28:db:96:47:67:f6:2e:17:03:25:14:88:c7:84:d5:
         4d:8f:d7:be:97:33:5f:5d:b1:c0:37:b7:19:bd:9b:39:d6:99:
         7e:61:a9:9f:a6:25:07:5f:8e:bb:60:43:b8:01:2b:71:8d:86:
         c6:e2:45:07:37:f3:e0:c1:fc:e9:42:a5:77:e0:a9:6d:57:9b:
         bd:2a:1c:86:6c:6d:32:75:0b:a8:d3:8f:6e:04:f0:c1:38:8c:
         db:e1:fd:62:61:4d:f8:98:96:53:9c:15:29:6c:aa:3f:60:a9:
         75:b9:a2:ed:dd:a2:00:3e:0e:d2:12:af:96:7c:2a:fc:9a:96:
         5b:db:d7:44:2b:5c:6e:3e:0d:d9:3b:b1:fc:55:ad:44:22:8f:
         02:06:4f:96:2a:e5:7c:32:1f:bd:8c:94:ea:a4:fb:26:a6:12:
         70:50:03:a7:8f:b2:4a:a4:83:8b:a2:9a:77:61:65:8c:53:8e:
         55:5f:78:bb:c0:32:ea:84:51:66:40:f0:16:2b:ac:bf:aa:ac:
         46:a4:8f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----