Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/6f44d29ada4f5d11a48adbf46c8986831b1306b8.roa
File:                     6f44d29ada4f5d11a48adbf46c8986831b1306b8.roa (raw, json)
Hash identifier:          nLqDpou+2KEeehKmV/DiNbpf6NVuo32GxVf3afTGDck=
Subject key identifier:   9C:C3:33:6D:AC:75:0D:B1:80:16:5F:2B:C4:17:B1:55:D1:70:14:D4
Certificate issuer:       /CN=45578380b9b89070a52d9eb52d3ea3222cd94a51
Certificate serial:       266983
Authority key identifier: F0:AC:99:E3:BD:66:B7:43:F7:00:BE:6C:DD:68:A1:37:19:39:F1:AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45578380b9b89070a52d9eb52d3ea3222cd94a51.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/6f44d29ada4f5d11a48adbf46c8986831b1306b8.roa
Signing time:             Wed 31 Jan 2024 14:44:58 +0000
ROA not before:           Wed 31 Jan 2024 14:44:58 +0000
ROA not after:            Sat 31 Jan 2026 14:44:58 +0000
asID:                     7727
IP address blocks:        181.210.0.0/18 maxlen: 19
                          190.130.0.0/18 maxlen: 19
                          181.210.0.0/16 maxlen: 19
                          181.210.64.0/18 maxlen: 18
                          181.210.128.0/17 maxlen: 18
                          2803:100::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2517379 (0x266983)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45578380b9b89070a52d9eb52d3ea3222cd94a51
        Validity
            Not Before: Jan 31 14:44:58 2024 GMT
            Not After : Jan 31 14:44:58 2026 GMT
        Subject: CN=6f44d29ada4f5d11a48adbf46c8986831b1306b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a9:21:05:19:9c:2a:ed:35:34:e6:d7:db:bf:
                    94:c7:b1:94:78:50:48:cd:20:32:37:de:86:7c:b8:
                    0d:3b:58:32:ca:7b:ef:ea:0f:6f:48:b2:c2:8f:0b:
                    7d:77:0d:90:a3:6c:85:5b:37:2b:24:29:66:bc:28:
                    5e:d8:0b:e0:32:21:10:f1:d6:5c:27:25:fe:b1:2a:
                    cd:c6:79:37:26:17:84:94:26:76:6f:34:c0:cb:9a:
                    8f:51:ac:e9:7f:cf:4d:cd:f8:e7:40:8f:42:14:23:
                    26:1c:dc:13:5a:cc:2c:e8:01:2f:48:95:a2:7e:93:
                    95:f6:c8:e2:62:63:57:bb:d0:ca:f2:4a:50:e9:82:
                    49:64:07:db:a0:9a:36:89:5b:37:20:ea:1f:67:cb:
                    5c:24:3e:f2:1e:fd:56:08:7a:3f:8b:21:37:d6:51:
                    a9:79:3f:9b:14:b9:40:ec:c2:76:9f:c1:5e:b2:a6:
                    d0:bc:96:ce:2b:28:98:a8:30:ee:51:d1:e8:ba:1b:
                    6e:68:05:55:30:56:0f:c7:cc:5d:00:44:0c:a6:74:
                    5c:c2:00:74:9a:30:55:4d:2e:71:7a:70:22:4b:f3:
                    b8:f7:ec:69:d8:fc:0a:f9:9b:58:71:16:29:b0:81:
                    ec:29:f4:8f:50:74:62:33:3f:ef:d7:ed:5d:de:08:
                    5d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C3:33:6D:AC:75:0D:B1:80:16:5F:2B:C4:17:B1:55:D1:70:14:D4
            X509v3 Authority Key Identifier:
                keyid:F0:AC:99:E3:BD:66:B7:43:F7:00:BE:6C:DD:68:A1:37:19:39:F1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45578380b9b89070a52d9eb52d3ea3222cd94a51.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/6f44d29ada4f5d11a48adbf46c8986831b1306b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/fda10918-e3c8-4e5e-9b0b-e58049bf768f/45578380b9b89070a52d9eb52d3ea3222cd94a51.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.210.0.0/16
                  190.130.0.0/18
                IPv6:
                  2803:100::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:54:2d:a3:ac:f4:00:90:52:57:a9:8a:c3:3d:f1:7e:91:46:
         6a:3f:ed:35:b1:e1:c4:b4:25:60:44:ec:7e:ab:66:9f:5a:e9:
         f5:89:4a:85:46:8c:a9:a6:a9:b9:1b:43:0f:c3:7d:d0:d9:63:
         14:62:75:b5:d0:72:ab:98:83:24:9a:8f:3c:38:ac:68:4f:0d:
         59:97:c2:10:49:93:1a:1c:b9:d3:de:bf:2b:83:86:07:6c:c8:
         47:20:a8:dd:9b:1e:f6:2a:3a:e0:36:cb:30:09:eb:a0:a7:20:
         9c:f4:f5:30:b9:ab:97:a8:77:51:1d:8a:a9:49:73:fe:95:cb:
         ad:1d:53:44:c3:a0:6f:7a:14:01:bc:db:7b:26:4a:38:99:51:
         47:16:c5:e9:7b:9f:5d:79:58:02:7d:d7:bd:df:a9:ab:c5:58:
         4b:9a:00:69:2a:c9:46:f8:14:a5:b3:aa:9a:18:3d:85:14:27:
         53:1d:cb:ac:aa:f4:54:1a:2f:f0:36:0d:06:19:f2:a2:87:41:
         60:ee:b2:f9:48:f6:f7:a1:be:6e:11:ce:67:f5:1c:d0:4b:bc:
         54:8f:54:64:2b:e0:7b:0b:d2:40:57:63:86:00:e8:01:be:8b:
         3c:d6:1d:be:9a:e9:7d:ce:b0:15:bf:67:bb:33:d8:5b:ae:e3:
         b5:66:75:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----