Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/08678512c28245c17f8a4405982716a0e5605e41.roa
File:                     08678512c28245c17f8a4405982716a0e5605e41.roa (raw, json)
Hash identifier:          Xd0SJAzr0RKH/6mOSFx1nLBGTC+wW0RvahVzxvacaj8=
Subject key identifier:   4A:5A:8C:C9:8E:79:93:A3:D9:C9:50:84:40:1F:7F:7D:86:C1:19:E7
Certificate issuer:       /CN=1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1
Certificate serial:       20F149
Authority key identifier: 7B:3D:40:27:F3:FE:53:8D:78:88:41:31:A1:DE:5D:90:05:07:9C:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/08678512c28245c17f8a4405982716a0e5605e41.roa
Signing time:             Fri 16 Jun 2023 13:36:26 +0000
ROA not before:           Thu 15 Jun 2023 13:36:26 +0000
ROA not after:            Mon 16 Jun 2025 13:36:26 +0000
asID:                     14080
IP address blocks:        179.0.146.0/24 maxlen: 24
                          2801:1a:c000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2158921 (0x20f149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1
        Validity
            Not Before: Jun 15 13:36:26 2023 GMT
            Not After : Jun 16 13:36:26 2025 GMT
        Subject: CN=08678512c28245c17f8a4405982716a0e5605e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:4d:92:f5:f3:c4:7a:f1:77:a4:63:89:af:
                    53:5d:1f:7d:6e:b0:1f:5f:62:99:ab:89:0e:90:13:
                    e5:fc:f6:91:59:89:ab:2c:3e:3d:55:5c:6f:47:4d:
                    5a:63:bd:2f:35:ca:f2:94:24:16:f0:e1:c9:7a:f4:
                    89:40:70:f6:91:62:07:fc:d5:ff:11:7f:f8:91:98:
                    c9:d6:92:30:c6:80:77:e2:e6:46:01:80:e5:f7:04:
                    4f:11:df:ba:ad:df:20:5e:1c:b0:93:cf:fe:fc:04:
                    ef:15:ea:3d:bd:81:1f:8d:24:06:94:4e:e4:23:1f:
                    7b:6f:e5:65:3e:69:6e:30:fc:0e:ad:d0:80:73:f6:
                    b9:c9:16:dd:39:bf:06:44:9b:6f:ad:30:3e:6c:01:
                    22:c6:83:56:2b:fe:13:a9:a6:00:44:ab:e8:a6:d4:
                    03:c0:ff:87:7d:de:d6:c5:89:10:43:13:f2:a3:68:
                    17:8d:89:9f:01:00:26:4a:cf:f7:98:2a:3a:a2:b7:
                    f1:57:4b:42:a2:f9:b8:f3:96:25:47:fb:58:7a:ff:
                    a0:eb:f3:8c:b9:ab:db:c5:01:5b:04:89:79:9c:26:
                    e3:9b:94:5a:a9:d8:44:80:70:f5:f6:54:f9:53:9a:
                    f0:83:be:5a:3c:c9:16:40:50:8e:7a:d9:28:43:ed:
                    74:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5A:8C:C9:8E:79:93:A3:D9:C9:50:84:40:1F:7F:7D:86:C1:19:E7
            X509v3 Authority Key Identifier:
                keyid:7B:3D:40:27:F3:FE:53:8D:78:88:41:31:A1:DE:5D:90:05:07:9C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/08678512c28245c17f8a4405982716a0e5605e41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.146.0/24
                IPv6:
                  2801:1a:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:a2:47:f7:9e:02:0c:9b:0f:27:0e:6f:9f:08:41:3c:1c:1b:
         d2:71:92:90:50:34:2e:93:9d:41:8c:dd:73:aa:cd:d5:18:94:
         c5:67:26:71:b7:46:60:3d:71:08:fb:df:7b:57:ba:69:d9:41:
         d3:52:60:46:c9:95:5e:71:59:32:fb:47:c7:32:83:3d:da:2d:
         e7:52:69:96:63:82:d8:31:56:f0:7d:67:93:0a:a0:32:9a:98:
         3a:56:7b:00:42:aa:6d:c5:73:46:16:72:23:6b:f2:eb:f6:bf:
         b3:43:be:81:0b:99:a4:aa:a5:8b:1a:28:d1:fe:63:dc:02:56:
         ad:b6:fc:36:5b:dd:c3:05:69:41:a5:34:dd:8a:f0:5c:6b:16:
         97:28:03:21:c4:23:cd:22:20:05:1b:1d:10:96:a6:bf:11:a7:
         b2:4d:4f:7f:0e:33:b2:ad:7c:1b:88:7c:b2:f9:0e:a8:d7:32:
         f6:74:8c:cd:70:b6:c0:de:70:65:a0:7c:c4:f9:e8:56:fb:26:
         85:e7:4b:60:b9:e6:90:49:6b:7b:da:88:73:f7:06:52:f6:a3:
         f9:33:59:b5:3e:e5:ba:ec:73:65:b6:86:da:de:32:c7:df:87:
         09:93:0e:19:83:c6:86:d2:0c:8f:b2:68:dc:4e:a4:93:18:99:
         9e:38:d3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----