Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e42d711d-2c03-40f6-ac45-6903a54b2324/753e0af627d12f03e602024457bd80b52e10866e.roa
File:                     753e0af627d12f03e602024457bd80b52e10866e.roa (raw, json)
Hash identifier:          f3xhpeQ0RodofkdgZPsiT82kFsdsyPhmoeMQJcYKfpk=
Subject key identifier:   31:B8:CB:75:7A:D0:A6:9A:24:00:FA:26:47:20:7F:1F:0D:A0:05:26
Certificate issuer:       /CN=dedf8d5736c0557e727f6db72e984837a300b8ac
Certificate serial:       051630
Authority key identifier: 32:F5:45:4E:85:B9:BA:CF:E3:D6:81:55:95:CE:B6:00:EB:A5:4F:9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dedf8d5736c0557e727f6db72e984837a300b8ac.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e42d711d-2c03-40f6-ac45-6903a54b2324/753e0af627d12f03e602024457bd80b52e10866e.roa
Signing time:             Wed 24 Mar 2021 14:35:04 +0000
ROA not before:           Wed 24 Mar 2021 14:35:04 +0000
ROA not after:            Tue 24 Mar 2026 14:35:04 +0000
asID:                     52468
IP address blocks:        181.225.188.0/22 maxlen: 25
                          2803:53e0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333360 (0x51630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dedf8d5736c0557e727f6db72e984837a300b8ac
        Validity
            Not Before: Mar 24 14:35:04 2021 GMT
            Not After : Mar 24 14:35:04 2026 GMT
        Subject: CN=753e0af627d12f03e602024457bd80b52e10866e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a9:68:51:d7:b8:d9:e8:35:a4:77:15:49:ad:
                    ec:5a:a1:93:de:79:9d:37:b6:e7:f5:97:4c:4f:cf:
                    98:5d:f2:c0:02:48:72:5a:89:1f:a2:8d:f7:88:50:
                    f4:95:74:af:d6:70:f5:33:f0:3d:40:5e:2d:75:9a:
                    8a:9a:6c:7a:b0:78:98:57:44:ce:97:1b:1b:05:45:
                    da:b7:81:6b:67:44:39:a0:53:fe:bc:6d:89:c8:30:
                    06:a3:50:57:39:3e:5d:72:92:15:9e:e2:75:37:17:
                    3e:8b:a7:c3:bb:e4:6b:f3:34:8d:73:3b:29:8b:4b:
                    3e:ab:87:01:1a:4d:3a:46:8e:40:41:6b:38:9c:3d:
                    cf:fd:e1:62:9d:f5:4e:22:0d:d5:ee:e3:f3:29:13:
                    ba:c4:98:ce:a2:f8:1c:8e:cb:9e:ac:5f:64:10:62:
                    1a:3c:18:ed:32:b2:ef:e4:fc:e0:c0:fe:26:e2:f2:
                    6a:76:3d:8f:87:40:77:ba:d2:d1:7f:0b:4e:cc:d4:
                    15:cb:0b:43:cf:bb:71:22:a2:59:6c:d3:47:3d:04:
                    6f:aa:8c:33:5f:f4:a7:5c:0a:04:02:80:02:49:39:
                    a2:58:04:4b:4b:1a:21:b5:47:73:21:00:8a:66:64:
                    4a:0d:b3:4d:30:99:21:bb:35:04:89:5f:9a:ad:d6:
                    6d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:B8:CB:75:7A:D0:A6:9A:24:00:FA:26:47:20:7F:1F:0D:A0:05:26
            X509v3 Authority Key Identifier:
                keyid:32:F5:45:4E:85:B9:BA:CF:E3:D6:81:55:95:CE:B6:00:EB:A5:4F:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dedf8d5736c0557e727f6db72e984837a300b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e42d711d-2c03-40f6-ac45-6903a54b2324/753e0af627d12f03e602024457bd80b52e10866e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e42d711d-2c03-40f6-ac45-6903a54b2324/dedf8d5736c0557e727f6db72e984837a300b8ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.225.188.0/22
                IPv6:
                  2803:53e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         74:ac:83:ec:4d:0f:38:74:30:04:a8:c6:b5:63:bd:cb:c7:83:
         7c:d4:57:2c:79:8d:28:17:57:89:2c:71:3f:cc:66:38:fd:bb:
         cb:66:45:45:89:4e:a4:cd:f0:75:49:91:9b:51:f5:2d:6b:d6:
         a9:f8:39:9f:53:4e:29:47:01:ad:9c:c3:8d:1e:3c:d7:b3:31:
         11:c7:d6:c7:f2:7d:fa:66:b5:0d:76:a5:00:7f:ff:53:1a:9d:
         3c:5a:ba:f0:cc:79:99:9e:c2:6e:a8:0c:72:9b:32:46:f1:00:
         7d:39:ca:55:2e:e7:8e:b6:bb:fd:89:84:e5:fd:61:23:18:a8:
         ee:07:c0:fd:39:53:04:c6:a1:5a:c9:36:2d:c9:7b:af:30:ed:
         bf:3f:0a:ca:91:21:23:f7:d1:01:8f:f2:77:06:49:19:9e:de:
         5b:e8:77:f4:d0:76:cf:b3:a8:5b:28:76:f4:f2:c7:da:c9:93:
         2b:a7:89:98:cd:87:39:b7:02:99:b8:52:23:19:e5:69:53:c5:
         c9:86:3f:f6:dc:a0:46:62:32:9b:5f:16:a4:be:cc:d7:5e:5a:
         13:a9:7c:2c:57:4d:06:43:3b:41:f7:80:a3:5c:36:be:c9:26:
         7a:cb:3d:18:08:12:c9:f2:eb:76:60:2f:9d:1a:27:d6:7d:50:
         69:15:a6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----