Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/e3e7b9d833bf828b6d9d66834444a702158eff11.roa
File:                     e3e7b9d833bf828b6d9d66834444a702158eff11.roa (raw, json)
Hash identifier:          1QO+OZ/DfcIK+T1g45Bk/aCrsMQd6uAyQ2KSVz5M0/M=
Subject key identifier:   B5:7C:87:34:FE:7C:9E:C1:1A:0F:62:53:00:FA:26:98:BF:AA:19:4F
Certificate issuer:       /CN=17e7a97de06776a354f146456ee6fb554ad676f2
Certificate serial:       0EE86E
Authority key identifier: CE:4F:9B:77:40:91:9B:9C:96:66:E0:DE:F5:51:F0:D2:62:6A:31:0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e7a97de06776a354f146456ee6fb554ad676f2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/e3e7b9d833bf828b6d9d66834444a702158eff11.roa
Signing time:             Thu 07 Dec 2023 17:16:11 +0000
ROA not before:           Thu 07 Dec 2023 17:16:11 +0000
ROA not after:            Sun 07 Dec 2025 17:16:11 +0000
asID:                     272042
IP address blocks:        179.63.32.0/22 maxlen: 24
                          2803:ad10::/32 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977006 (0xee86e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e7a97de06776a354f146456ee6fb554ad676f2
        Validity
            Not Before: Dec  7 17:16:11 2023 GMT
            Not After : Dec  7 17:16:11 2025 GMT
        Subject: CN=e3e7b9d833bf828b6d9d66834444a702158eff11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:91:2f:26:b1:23:57:83:4c:1d:00:be:a0:2e:
                    60:fe:ca:ea:3a:e6:a2:14:12:27:d0:f5:1d:9f:97:
                    23:ca:27:db:97:a6:48:9d:00:bf:7d:e7:69:8b:64:
                    2f:f9:b3:12:1c:e5:e3:f4:b9:ed:c7:ee:6d:78:7b:
                    6b:51:10:b8:1b:32:5e:4b:85:17:0e:14:f3:92:3a:
                    b4:2d:be:f1:27:64:4f:8c:75:c3:e7:a7:8a:06:48:
                    57:cf:53:e2:4f:cf:f1:f3:4a:32:60:5b:26:fd:2e:
                    a0:44:0a:cb:3b:5d:0a:c9:d9:33:7c:54:51:aa:a2:
                    f9:bd:8a:c3:25:23:7f:ac:2b:b9:29:f4:69:5d:05:
                    d4:53:49:58:fc:1a:1b:89:72:77:e1:e6:e5:38:2f:
                    d8:49:89:e0:78:cc:4b:54:7f:23:19:e3:65:25:24:
                    14:ef:ce:df:c8:24:4d:47:76:d3:3b:b6:23:83:d0:
                    83:44:b7:50:2d:ba:30:be:b8:8b:7a:32:2f:bc:c5:
                    5f:53:36:a9:c3:bf:2b:33:15:a8:a4:1c:1e:d1:6b:
                    13:84:7a:76:0d:20:2f:8e:97:e2:a0:96:af:16:21:
                    48:d6:a9:ee:8c:05:e3:50:5b:a8:f7:88:c9:2e:ac:
                    5b:4c:82:77:62:32:90:85:6f:76:0e:4b:9d:33:f9:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7C:87:34:FE:7C:9E:C1:1A:0F:62:53:00:FA:26:98:BF:AA:19:4F
            X509v3 Authority Key Identifier:
                keyid:CE:4F:9B:77:40:91:9B:9C:96:66:E0:DE:F5:51:F0:D2:62:6A:31:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e7a97de06776a354f146456ee6fb554ad676f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/e3e7b9d833bf828b6d9d66834444a702158eff11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10b8771f-fb93-42ae-abdd-1dbf887ef1d1/17e7a97de06776a354f146456ee6fb554ad676f2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.32.0/22
                IPv6:
                  2803:ad10::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:1a:58:dd:f0:fd:04:e1:30:7f:ec:c1:6b:ff:46:dd:78:5e:
         07:49:c9:28:82:07:d3:05:f7:33:b5:ef:35:6b:82:76:40:43:
         f8:ff:f8:db:57:53:a4:10:d8:38:18:f4:97:5a:f2:0f:1d:cb:
         9b:d7:55:80:8c:af:37:f3:d0:47:ed:57:fb:2a:cc:2b:10:9a:
         0c:34:d9:31:0c:ca:3c:b3:f6:3d:29:8e:bd:36:38:ee:49:48:
         a9:4e:e9:14:bc:74:96:26:26:a2:cc:58:92:a7:8f:7b:5b:a0:
         2e:6d:57:f5:86:9b:5a:1b:1e:26:98:5b:b3:c6:0a:52:28:d4:
         51:cd:b6:33:e2:81:51:45:eb:60:9c:fc:e7:2a:4a:60:cf:e2:
         d3:5e:14:15:be:ab:6a:8e:ce:35:29:8a:84:f4:d6:91:5e:00:
         19:1f:90:b2:09:58:0b:74:49:24:37:dc:ff:92:71:ce:3f:a0:
         6f:89:ba:c3:4e:c6:26:88:88:d3:45:e5:34:a1:da:ae:e6:fd:
         14:d7:21:00:d9:6d:29:7b:b8:75:74:47:b1:f3:29:0e:23:14:
         4e:89:85:f1:f3:de:82:70:39:97:85:48:73:7a:2a:74:99:87:
         56:51:b1:f3:d2:98:6d:e7:1a:f3:d5:fa:07:14:16:4e:2d:33:
         82:d3:e9:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----