Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265842.roa
File:                     AS265842.roa (raw, json)
Hash identifier:          bJCWyj6gjzluTxkmwVLT5nVRoBFKB6EcaEmx0mX379w=
Subject key identifier:   62:EB:5A:3A:F5:F2:B9:1F:73:22:8A:13:C0:06:9F:47:49:04:F6:14
Certificate issuer:       /CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
Certificate serial:       2B99B79A2AACD4FB57FC7E84A97B95E1BC63B591
Authority key identifier: 27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265842.roa
Signing time:             Tue 05 Mar 2024 18:12:34 +0000
ROA not before:           Tue 05 Mar 2024 18:07:34 +0000
ROA not after:            Tue 04 Mar 2025 18:12:34 +0000
asID:                     265842
IP address blocks:        181.80.38.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:99:b7:9a:2a:ac:d4:fb:57:fc:7e:84:a9:7b:95:e1:bc:63:b5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=274D68F06BB1F2ED094F03B52FED7565F7825D99
        Validity
            Not Before: Mar  5 18:07:34 2024 GMT
            Not After : Mar  4 18:12:34 2025 GMT
        Subject: CN=62EB5A3AF5F2B91F73228A13C0069F474904F614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e1:17:0a:ed:88:79:32:15:d2:63:81:51:ed:
                    e9:62:bd:e1:c5:4d:da:56:3e:00:63:46:33:af:1f:
                    ad:f8:0e:07:c0:22:66:08:29:ab:c9:11:a7:c9:17:
                    ea:b9:1d:38:21:bb:11:58:da:38:27:49:55:4b:95:
                    92:8a:15:04:96:26:d3:37:bf:69:40:2c:a2:52:09:
                    6c:1e:b2:d1:e4:43:8c:94:ed:04:1e:33:c4:fd:c2:
                    8f:2c:21:06:70:a4:ec:f6:ca:7a:49:27:44:61:72:
                    b3:6c:fe:49:f9:bf:47:60:b7:e3:49:23:cd:91:e9:
                    a7:e9:51:1e:90:8d:8a:d7:b8:73:12:4a:14:b2:a2:
                    0d:40:ae:24:06:a4:d1:3a:98:e3:04:b2:38:3e:09:
                    1d:53:e6:88:34:dc:0c:f5:da:57:59:f6:a2:da:83:
                    89:04:70:0c:97:61:95:f2:d8:55:06:7c:48:7a:4b:
                    37:a3:83:c9:f2:28:8a:f7:9f:7d:6f:90:f8:e7:76:
                    12:70:68:33:b0:d5:7f:60:30:ed:29:be:6f:0e:8b:
                    3d:39:b1:10:b3:ad:f5:9c:78:0b:ee:ad:a4:8a:ec:
                    3a:9d:67:2f:be:cc:09:04:0f:55:b7:50:c2:59:0d:
                    6a:25:18:09:ae:89:5e:93:c1:46:60:99:9b:b1:2f:
                    e0:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EB:5A:3A:F5:F2:B9:1F:73:22:8A:13:C0:06:9F:47:49:04:F6:14
            X509v3 Authority Key Identifier:
                keyid:27:4D:68:F0:6B:B1:F2:ED:09:4F:03:B5:2F:ED:75:65:F7:82:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/274D68F06BB1F2ED094F03B52FED7565F7825D99.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9EE9B1E0831677ED93803AF0B8ED6B95FE367BA0CC83CED4B0AEF617E1F03150/0/AS265842.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.80.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:30:4f:93:9b:14:9c:d6:42:9c:30:48:35:ab:c5:f4:fd:77:
         47:53:a9:7f:f3:ea:d6:40:1d:44:2b:56:9c:60:a1:a8:11:ea:
         28:59:77:03:bc:7f:b5:43:d8:4f:b2:2c:d8:e5:44:01:61:93:
         b7:f6:e1:f1:9d:de:56:8e:7e:2a:9f:2c:97:ac:17:ba:26:d5:
         ca:96:6e:af:8e:2c:17:43:35:11:dd:21:5f:85:26:fa:10:27:
         84:98:3c:21:4c:df:f8:95:6d:91:76:f1:f3:c9:23:b5:39:b5:
         5f:97:e7:32:96:8c:6a:4a:66:78:e0:ff:2a:d0:fe:77:a8:51:
         b3:21:52:c1:4b:7e:d5:27:67:6e:f5:b2:d2:a6:b6:22:f1:9b:
         86:c9:0a:1a:a0:58:56:f8:ee:c1:a3:61:85:6f:61:b7:4b:05:
         5e:9c:66:42:ad:2a:56:3f:8b:c6:3b:61:97:a3:7c:72:1e:03:
         a3:7b:f2:c1:93:6a:95:ba:75:8e:41:e0:1b:e9:aa:f6:3a:b6:
         4d:3f:25:3d:d7:b9:b9:78:82:e3:cc:33:59:f8:3a:d8:f7:34:
         e3:ae:b4:9e:b0:33:10:86:a1:6c:8b:5c:a2:43:db:49:b4:df:
         07:15:ae:11:91:b4:9a:55:52:48:1c:fe:35:ea:9d:48:c2:24:
         77:15:41:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----