Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/4ae4f2492ba8aee4f3805bb20af4bc8fc35f749a.roa
File:                     4ae4f2492ba8aee4f3805bb20af4bc8fc35f749a.roa (raw, json)
Hash identifier:          IS8fKJrVzrZe4FbGqfBO58/JA98oD2dVMIKj743NaAs=
Subject key identifier:   09:4C:DD:6E:5B:B9:2E:25:10:5F:36:F3:EE:42:D8:4B:80:41:69:D7
Certificate issuer:       /CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
Certificate serial:       22F4A7
Authority key identifier: 26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/4ae4f2492ba8aee4f3805bb20af4bc8fc35f749a.roa
Signing time:             Wed 16 Aug 2023 16:41:04 +0000
ROA not before:           Tue 15 Aug 2023 16:41:04 +0000
ROA not after:            Sat 16 Aug 2025 16:41:04 +0000
asID:                     6306
IP address blocks:        181.180.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2290855 (0x22f4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c69b99fc2d2eefbdb75ba663d575a10ac84f78c1
        Validity
            Not Before: Aug 15 16:41:04 2023 GMT
            Not After : Aug 16 16:41:04 2025 GMT
        Subject: CN=4ae4f2492ba8aee4f3805bb20af4bc8fc35f749a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:52:e0:d3:b8:06:4a:44:37:b4:2c:75:1c:b2:
                    62:b2:42:e2:62:9e:ff:26:14:9e:c3:d4:ed:e6:b3:
                    cc:81:24:57:bd:1c:ae:35:d7:fa:41:82:17:c1:c3:
                    b2:07:af:0c:aa:da:51:cf:2b:11:06:14:98:55:9f:
                    49:e8:9d:a1:38:47:e0:97:ee:98:0c:81:eb:d7:69:
                    9c:9d:20:9d:b2:cc:62:78:5f:93:58:06:1f:95:a6:
                    c4:e4:9e:e9:6d:48:2a:4e:9f:22:36:97:61:f6:77:
                    df:6a:23:3d:6c:4b:a1:e7:42:ed:4e:06:a3:49:02:
                    59:66:1c:64:db:55:27:45:c9:68:a9:a0:70:80:5f:
                    82:86:a4:b8:38:8e:15:bf:f4:26:a3:a5:ee:dd:9b:
                    40:8b:10:f8:8c:49:28:d4:f0:c0:c6:7d:9e:1c:70:
                    1d:1f:81:2b:f9:40:01:6d:b3:b7:e4:f7:94:62:9b:
                    51:1a:7d:75:ab:0f:2d:b5:50:17:90:d5:40:38:e5:
                    2d:01:95:34:ef:53:7d:7e:c6:76:b1:51:6e:bb:e3:
                    93:74:4f:79:a5:93:d5:7d:e6:22:41:c4:6d:58:de:
                    05:05:fa:aa:48:d0:1e:de:2d:ef:83:38:5c:83:77:
                    75:5a:6a:23:05:aa:59:1b:cc:db:53:ef:f1:7c:60:
                    be:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4C:DD:6E:5B:B9:2E:25:10:5F:36:F3:EE:42:D8:4B:80:41:69:D7
            X509v3 Authority Key Identifier:
                keyid:26:32:3A:4B:C0:9F:4A:66:92:5C:34:E7:A0:CD:05:9E:A1:ED:05:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/4ae4f2492ba8aee4f3805bb20af4bc8fc35f749a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/f04334a6-8e56-4903-90f0-1a897fc935c5/c69b99fc2d2eefbdb75ba663d575a10ac84f78c1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         1a:0a:ae:f8:b3:ce:04:45:7a:2c:bc:38:18:54:24:f2:5f:8a:
         ee:7e:66:74:cc:e9:fd:7e:52:a0:83:a0:44:c8:0f:3e:1c:a3:
         0f:25:d4:b9:6b:db:ee:49:12:7e:1e:3c:0a:8c:0b:2d:22:94:
         6f:fb:47:da:ae:26:5f:ce:ae:3b:91:fe:0f:62:be:96:d2:df:
         9a:40:41:e2:88:39:9c:4f:3d:fd:ca:90:34:4a:da:7e:31:03:
         27:74:af:8a:56:a0:ef:be:de:5a:9b:ab:03:d4:ef:a3:ca:b5:
         38:e6:da:08:63:9c:c7:e9:51:32:f1:b2:4e:1a:08:60:ad:c2:
         f5:02:7b:c0:3e:cf:e6:46:1a:85:8d:28:f4:8c:97:54:9f:8a:
         bc:c5:13:44:c7:ce:b1:5d:c5:50:34:07:42:cc:aa:78:48:7a:
         8e:8b:1c:60:75:8a:17:45:1c:f5:39:3c:0c:2f:e4:49:1d:4a:
         cd:e5:d7:43:88:b3:c1:bc:bd:94:f3:81:d3:b1:17:98:9e:3a:
         db:ec:c7:42:24:86:80:87:b5:bc:d4:b2:39:6b:a5:7a:f1:72:
         17:6c:d5:da:fc:5f:88:70:c4:c6:66:95:76:8e:94:f4:35:80:
         6e:69:18:5f:f7:14:b6:39:e1:cc:e0:80:79:cb:16:81:ba:1e:
         1f:ad:30:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----