Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fad31c4e-8abd-4d14-bae0-4432d5aeb6a6/3c596e8c010cc58796aaf854ca4ceb5bf8907a22.roa
File:                     3c596e8c010cc58796aaf854ca4ceb5bf8907a22.roa (raw, json)
Hash identifier:          uU8he4nNC4eDo23/2yk+LuKLA8y0y/Esa1WDNiUw4bo=
Subject key identifier:   25:49:E0:00:6C:5E:A3:63:B6:13:18:A7:B0:75:8C:DA:6E:7A:FC:74
Certificate issuer:       /CN=765a09f6bc455b179b8f2f6892acf5facd9d4d21
Certificate serial:       0B0BAD
Authority key identifier: C4:67:C6:37:DA:9B:17:39:51:E7:71:35:B5:B3:C2:C4:1A:CB:5E:B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/765a09f6bc455b179b8f2f6892acf5facd9d4d21.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fad31c4e-8abd-4d14-bae0-4432d5aeb6a6/3c596e8c010cc58796aaf854ca4ceb5bf8907a22.roa
Signing time:             Wed 12 Jan 2022 03:20:06 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     271812
IP address blocks:        181.232.180.0/22 maxlen: 24
                          2803:7010::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 723885 (0xb0bad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765a09f6bc455b179b8f2f6892acf5facd9d4d21
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=3c596e8c010cc58796aaf854ca4ceb5bf8907a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:11:f9:37:04:6f:b7:50:88:8f:9b:fa:72:c2:
                    e0:72:6d:b6:d2:cb:8f:32:72:17:9a:ba:b2:95:82:
                    16:c0:2a:38:22:c5:a4:0d:c0:6c:be:3d:26:9e:4d:
                    f8:dc:8b:d4:56:06:46:df:a6:3d:80:93:f0:55:4e:
                    6d:cc:91:45:95:13:e8:7e:88:d7:06:f2:51:fe:f1:
                    c8:98:11:50:14:c6:49:42:d4:bc:ba:3a:72:15:d5:
                    8d:bf:e2:53:f6:a8:c0:01:17:6d:4d:83:a6:33:45:
                    06:f0:52:ce:e3:72:fb:2d:f0:d5:07:b2:f9:be:40:
                    6f:52:e6:60:2a:07:65:dd:12:20:37:3b:ac:b0:2b:
                    84:b7:02:9d:20:6f:e5:dd:95:61:2a:45:b6:8c:ed:
                    5d:a0:1c:f7:1c:0a:55:1d:b4:91:2a:4e:11:94:97:
                    27:88:ba:f7:91:e1:33:0c:c7:fa:d6:11:52:4c:ed:
                    9c:9c:1b:04:78:63:56:c7:16:0a:90:0b:68:d4:9f:
                    b1:36:d7:56:3f:51:72:8b:7f:c2:1e:60:6e:b9:1e:
                    d4:4f:e3:33:d4:6c:93:64:98:c6:24:1c:7f:87:f4:
                    2b:f7:7d:6a:2e:66:f6:88:98:e9:fa:a1:e3:eb:d2:
                    2f:b0:7a:96:a1:33:de:54:21:8f:af:21:a8:dc:40:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:49:E0:00:6C:5E:A3:63:B6:13:18:A7:B0:75:8C:DA:6E:7A:FC:74
            X509v3 Authority Key Identifier:
                keyid:C4:67:C6:37:DA:9B:17:39:51:E7:71:35:B5:B3:C2:C4:1A:CB:5E:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/765a09f6bc455b179b8f2f6892acf5facd9d4d21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fad31c4e-8abd-4d14-bae0-4432d5aeb6a6/3c596e8c010cc58796aaf854ca4ceb5bf8907a22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fad31c4e-8abd-4d14-bae0-4432d5aeb6a6/765a09f6bc455b179b8f2f6892acf5facd9d4d21.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.180.0/22
                IPv6:
                  2803:7010::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:6a:b4:f7:7a:d3:92:fe:99:6d:54:65:d6:b9:af:0d:0f:3e:
         28:ee:00:f4:6f:a0:ee:0c:3c:0b:5c:51:9d:08:10:c0:54:30:
         89:65:55:f1:59:88:a5:8f:5f:79:7c:53:f2:a1:cf:79:a2:e9:
         79:11:ff:78:1c:4e:d4:d1:7c:db:52:d5:9e:b6:0a:cc:4f:ba:
         18:2e:94:bb:2b:03:b9:22:4f:0c:da:77:d3:dc:9a:b8:d1:4c:
         68:2b:9a:11:30:92:4e:62:c5:25:b4:fb:96:d1:cd:9e:c9:ce:
         45:04:ad:12:83:d0:e3:70:e0:14:e9:6b:43:dd:be:d3:61:f9:
         33:ba:24:44:c9:5d:ca:26:26:6f:73:29:9e:85:64:ea:f6:0b:
         fa:94:7f:0f:8c:9c:be:b0:f2:b0:e1:0c:68:ff:ef:aa:6b:1d:
         4d:66:54:b0:e4:d1:80:54:50:cc:4b:af:ef:61:44:b3:cd:e9:
         28:74:8a:05:a0:81:ee:68:09:e9:8d:ff:17:97:bb:78:f5:73:
         3f:cd:f8:33:ea:85:7f:bf:d9:eb:b4:e6:86:99:b7:fc:fd:2f:
         3d:d1:73:7b:a5:6a:ce:5e:e2:21:04:56:2c:59:db:68:85:85:
         56:b5:e9:cc:de:cd:f4:be:2a:41:b8:b2:75:6f:1d:bf:6f:38:
         5d:44:a9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----