Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e42d711d-2c03-40f6-ac45-6903a54b2324/18a88b8223823a2f99cca4a3382313f561104424.roa
File:                     18a88b8223823a2f99cca4a3382313f561104424.roa (raw, json)
Hash identifier:          3ZFiQ/t6W8UJMK+mG5XJNa3MtzAHGpyv9cLnSYBzNVY=
Subject key identifier:   79:C6:59:D6:CE:73:03:2C:92:1A:23:C3:5A:D9:38:7A:43:D9:E0:7C
Certificate issuer:       /CN=dedf8d5736c0557e727f6db72e984837a300b8ac
Certificate serial:       12077F
Authority key identifier: 32:F5:45:4E:85:B9:BA:CF:E3:D6:81:55:95:CE:B6:00:EB:A5:4F:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dedf8d5736c0557e727f6db72e984837a300b8ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e42d711d-2c03-40f6-ac45-6903a54b2324/18a88b8223823a2f99cca4a3382313f561104424.roa
Signing time:             Tue 13 Sep 2022 15:21:11 +0000
ROA not before:           Tue 13 Sep 2022 15:18:53 +0000
ROA not after:            Fri 13 Sep 2024 15:18:53 +0000
asID:                     272139
IP address blocks:        181.225.188.0/22 maxlen: 24
                          2803:53e0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1181567 (0x12077f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedf8d5736c0557e727f6db72e984837a300b8ac
        Validity
            Not Before: Sep 13 15:18:53 2022 GMT
            Not After : Sep 13 15:18:53 2024 GMT
        Subject: CN=18a88b8223823a2f99cca4a3382313f561104424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:b2:f6:1f:93:89:ee:d6:04:80:9d:9a:d4:
                    7b:32:1c:32:a6:5d:99:85:d8:56:0b:e4:67:6f:14:
                    9d:75:70:7d:98:8f:32:f3:64:13:e2:e5:16:72:d3:
                    e1:4d:1b:52:bc:98:fe:82:ae:02:a7:65:10:37:af:
                    db:27:79:f5:98:df:56:f1:98:38:13:60:d6:74:a3:
                    f1:25:c9:a9:cc:6d:3b:6c:da:2b:2b:a9:73:79:db:
                    02:2b:59:97:5d:99:ea:3b:c7:c2:d9:26:5c:d1:a0:
                    73:ef:0c:6f:04:40:42:d2:5f:f6:41:62:31:aa:6b:
                    06:22:1b:2f:c9:2a:38:e4:fb:74:f3:a5:48:de:f5:
                    33:76:f6:a6:31:9b:ef:fd:d6:8d:ed:32:d3:9f:9f:
                    6d:dd:64:f4:2a:d7:9f:4d:02:97:13:be:04:ff:37:
                    3a:a0:f1:0b:51:5a:72:97:f1:ee:85:db:17:a1:d8:
                    38:c6:8b:b2:c6:04:cd:fa:58:6c:ba:96:db:e0:b0:
                    6c:f6:b2:28:10:3c:77:09:9b:8e:fc:c4:7d:7a:ba:
                    4b:e1:b1:fa:72:8a:4b:c7:77:bf:67:73:76:e2:5a:
                    be:f6:0d:5c:be:12:be:24:3d:19:9f:63:0a:48:11:
                    b8:a0:a5:d2:9d:21:99:4b:f0:a3:08:bc:2e:42:ce:
                    55:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C6:59:D6:CE:73:03:2C:92:1A:23:C3:5A:D9:38:7A:43:D9:E0:7C
            X509v3 Authority Key Identifier:
                keyid:32:F5:45:4E:85:B9:BA:CF:E3:D6:81:55:95:CE:B6:00:EB:A5:4F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dedf8d5736c0557e727f6db72e984837a300b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e42d711d-2c03-40f6-ac45-6903a54b2324/18a88b8223823a2f99cca4a3382313f561104424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e42d711d-2c03-40f6-ac45-6903a54b2324/dedf8d5736c0557e727f6db72e984837a300b8ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.188.0/22
                IPv6:
                  2803:53e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:4f:30:47:d9:1f:e1:81:5b:3a:15:57:49:eb:df:5b:d4:92:
         a1:1e:c8:f1:7c:f0:02:f8:b9:ef:93:9c:a6:da:94:c1:a6:ca:
         a2:70:2f:2b:e6:67:9d:ea:d0:25:80:fa:59:60:26:92:23:19:
         d8:fd:a9:f2:19:11:1a:d6:69:7d:d0:4c:76:61:97:85:d8:d8:
         9d:5c:00:3f:c8:09:47:8a:a0:a0:50:f1:80:64:76:bf:59:23:
         4c:f0:f8:7f:18:89:2d:46:93:97:7f:bd:f3:ab:cd:dd:9e:b1:
         b6:28:a3:8e:7e:a0:56:88:f0:11:e7:ee:0a:f1:7b:43:b8:65:
         b8:23:6b:0a:1b:fd:bd:40:60:5b:55:f6:20:17:9a:23:e9:fa:
         3b:8e:59:32:7e:6d:68:3d:f4:7a:dd:39:66:05:14:1e:c8:d3:
         a8:91:72:e2:38:0d:42:a1:46:71:09:40:20:eb:53:b6:74:42:
         c0:47:7d:1a:5e:fc:c7:36:10:f9:0d:6d:ed:e4:4b:ba:1f:40:
         b2:30:92:ed:75:68:26:4e:fd:5f:40:1f:86:8e:e6:27:09:3c:
         76:4f:b5:06:3b:a0:a1:72:b6:f8:98:fd:8c:0a:36:bb:d6:a2:
         a5:1c:57:78:27:d7:d4:07:2d:51:18:cb:f3:3f:dc:ad:46:e2:
         0e:d7:41:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----