Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/05edadcc230465cb7fd4922045f6878527036b65.roa
File:                     05edadcc230465cb7fd4922045f6878527036b65.roa (raw, json)
Hash identifier:          WnzjicTRtuM4Kug1QmUuNl33n1Tgzp/EYapobpD75fE=
Subject key identifier:   26:05:B4:E9:D3:23:9F:BF:AB:0C:79:3E:FB:B5:9D:94:32:E6:BE:BF
Certificate issuer:       /CN=17e7a97de06776a354f146456ee6fb554ad676f2
Certificate serial:       012C3C
Authority key identifier: CE:4F:9B:77:40:91:9B:9C:96:66:E0:DE:F5:51:F0:D2:62:6A:31:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e7a97de06776a354f146456ee6fb554ad676f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/05edadcc230465cb7fd4922045f6878527036b65.roa
Signing time:             Sat 28 May 2022 14:08:53 +0000
ROA not before:           Tue 12 Apr 2022 03:00:00 +0000
ROA not after:            Fri 12 Apr 2024 03:00:00 +0000
asID:                     272042
IP address blocks:        179.63.32.0/22 maxlen: 24
                          2803:ad10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76860 (0x12c3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e7a97de06776a354f146456ee6fb554ad676f2
        Validity
            Not Before: Apr 12 03:00:00 2022 GMT
            Not After : Apr 12 03:00:00 2024 GMT
        Subject: CN=05edadcc230465cb7fd4922045f6878527036b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:61:ea:42:df:6a:11:2d:15:2c:6f:76:89:15:
                    54:7f:a5:7b:e1:e6:c7:72:7b:4e:86:4a:de:be:0d:
                    c1:6d:18:6a:3f:83:36:23:05:1c:0e:d6:2c:01:c0:
                    8d:30:9c:be:80:9e:aa:20:2c:ac:a2:c6:c6:d7:ed:
                    95:92:d2:26:41:19:88:28:e5:4c:6c:0c:ee:26:07:
                    5c:d0:19:b7:13:fc:e7:19:3b:37:5f:c4:11:71:24:
                    cb:32:e5:1a:e7:f3:19:99:da:38:a4:84:f5:65:f2:
                    72:6e:93:12:c2:2b:42:8f:ee:c1:3b:f4:27:08:29:
                    cf:06:32:84:c7:4d:a3:d8:06:ba:d1:32:94:02:92:
                    fe:df:35:a8:01:9d:16:cb:bf:82:42:cd:a7:b5:0a:
                    99:55:0e:b7:fb:d2:89:c5:9d:cd:cb:b0:5b:3f:0d:
                    64:be:93:aa:3e:6f:54:44:d8:48:6f:01:82:cf:4a:
                    57:d4:af:08:f6:39:1e:a1:54:39:2b:e3:07:ec:7b:
                    ee:f4:70:a8:59:58:8d:88:88:d0:2a:3e:33:e6:2f:
                    a7:92:d2:60:a0:ed:a9:31:09:87:4b:11:5f:1c:b5:
                    7c:b3:d2:67:12:c0:99:5a:be:7c:ea:e1:7f:27:7b:
                    68:65:53:28:60:e7:56:4d:ec:da:05:43:0b:c1:2a:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:05:B4:E9:D3:23:9F:BF:AB:0C:79:3E:FB:B5:9D:94:32:E6:BE:BF
            X509v3 Authority Key Identifier:
                keyid:CE:4F:9B:77:40:91:9B:9C:96:66:E0:DE:F5:51:F0:D2:62:6A:31:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e7a97de06776a354f146456ee6fb554ad676f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/05edadcc230465cb7fd4922045f6878527036b65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/17e7a97de06776a354f146456ee6fb554ad676f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.32.0/22
                IPv6:
                  2803:ad10::/32

    Signature Algorithm: sha256WithRSAEncryption
         68:56:03:b3:46:c5:c4:cc:37:7d:45:0a:95:e0:72:8f:14:e5:
         ca:b4:13:21:b6:7c:94:12:09:38:88:fe:09:eb:4f:5a:00:f6:
         6e:22:54:a4:1a:78:83:d7:6a:1e:7c:2d:17:36:41:cb:f7:7b:
         6a:21:52:9e:cc:c8:22:53:a2:87:5c:d0:6f:74:83:4d:aa:78:
         8c:4e:fd:bf:96:dd:4d:70:a0:a8:35:4c:e8:ba:39:bd:b2:2f:
         fd:4d:10:bd:b5:f7:22:5c:a4:27:33:43:b0:b0:71:0f:7e:45:
         81:51:e9:d6:b1:fe:f2:82:71:fa:3f:8c:92:b7:3e:6a:13:d5:
         f7:8a:f9:82:59:dc:00:8c:56:29:b4:6e:82:99:dd:37:dd:2e:
         e4:fc:2d:bf:30:1f:13:06:e6:89:34:e4:1a:c1:6e:33:73:45:
         d3:19:f1:04:b3:f5:0b:13:d0:cc:e6:8e:b2:b9:48:05:5b:f7:
         6c:ce:21:8f:3d:48:42:2f:72:4a:76:e8:46:fa:51:6f:c0:0b:
         6f:db:ee:97:95:e5:5e:32:31:e5:46:31:34:c6:32:64:7c:51:
         71:6d:12:ec:96:e1:cd:b7:72:b3:2c:d7:66:a6:a7:8b:c3:02:
         6f:ab:c7:02:ad:fe:21:02:08:ad:c6:2b:d8:3e:13:a0:06:37:
         d3:4f:68:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----