Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/828fe70ba3af47adb952dc2309ca445a96e1694a.roa
File:                     828fe70ba3af47adb952dc2309ca445a96e1694a.roa (raw, json)
Hash identifier:          0eLgdffyno2RP1biLt8r6XxmcM88c8+IlwLTQe7PJhg=
Subject key identifier:   D1:9F:0D:C9:D5:11:AB:4C:3D:28:B6:E2:33:29:01:C9:1F:45:1F:FE
Certificate issuer:       /CN=1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1
Certificate serial:       2088DC
Authority key identifier: 7B:3D:40:27:F3:FE:53:8D:78:88:41:31:A1:DE:5D:90:05:07:9C:B7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/828fe70ba3af47adb952dc2309ca445a96e1694a.roa
Signing time:             Wed 31 May 2023 08:30:04 +0000
ROA not before:           Tue 30 May 2023 08:30:04 +0000
ROA not after:            Thu 29 May 2025 08:30:04 +0000
asID:                     14080
IP address blocks:        179.0.146.0/24 maxlen: 24
                          2801:1a:c000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2132188 (0x2088dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1
        Validity
            Not Before: May 30 08:30:04 2023 GMT
            Not After : May 29 08:30:04 2025 GMT
        Subject: CN=828fe70ba3af47adb952dc2309ca445a96e1694a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b2:fd:e9:05:8c:e9:ac:1d:f1:de:75:41:2d:
                    9f:f9:10:d6:d6:ca:68:2f:07:c0:f5:2c:38:73:cf:
                    9c:a1:45:27:86:9b:26:18:57:95:71:4c:b4:22:dd:
                    11:5d:1d:2b:66:62:7a:2e:88:c4:3c:b1:96:76:f6:
                    04:69:ab:f2:37:c2:dd:75:61:a4:af:9d:c8:eb:3d:
                    06:41:e7:b6:58:68:1f:ea:54:79:5c:64:8c:d6:02:
                    1a:a0:5e:22:32:30:f3:62:79:8e:f8:3f:d1:21:a7:
                    5e:d9:34:7f:a6:1b:98:69:0a:54:9e:a5:99:3e:99:
                    56:61:d1:be:2e:ba:3e:f7:a4:49:17:d8:7e:4c:4b:
                    94:35:0a:e9:5f:8b:00:05:87:9f:f1:4c:72:58:52:
                    5b:0a:26:88:7e:ad:d4:50:63:d3:66:21:9c:03:a3:
                    3c:b6:09:78:a2:b8:4c:db:90:0c:6e:bd:e3:c1:63:
                    4d:2f:4a:4d:51:5c:2c:f3:5a:e9:99:8b:89:e6:b5:
                    14:d9:c0:16:3a:7d:04:5b:21:bf:1c:24:2e:a6:01:
                    c9:65:e3:81:26:21:92:c1:59:86:53:3c:a2:3a:0c:
                    23:09:84:1b:75:9f:64:5d:0c:c3:e1:5f:47:e4:19:
                    11:ce:62:86:59:f2:78:50:93:02:45:02:ef:3b:03:
                    24:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9F:0D:C9:D5:11:AB:4C:3D:28:B6:E2:33:29:01:C9:1F:45:1F:FE
            X509v3 Authority Key Identifier:
                keyid:7B:3D:40:27:F3:FE:53:8D:78:88:41:31:A1:DE:5D:90:05:07:9C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/828fe70ba3af47adb952dc2309ca445a96e1694a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1b243215-2249-474e-92b3-ad93315aa77e/1ff1a83b43a13a21d68e8bc190f7e2c162ec8bf1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.146.0/24
                IPv6:
                  2801:1a:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:8a:73:db:c5:7e:52:5d:1c:f8:33:d6:00:43:a4:40:24:17:
         ad:04:fe:43:32:ff:f1:4d:ee:46:8e:2a:24:a8:55:82:f6:e3:
         8a:39:db:c9:87:21:91:4c:72:57:0b:f7:41:cd:03:ac:3b:4e:
         bf:12:0c:aa:58:81:21:a5:53:75:ba:27:df:48:33:31:ce:e3:
         3a:af:f8:13:f8:8a:b2:66:18:91:60:e9:98:00:10:8f:56:dc:
         b5:bc:41:96:4c:1c:3e:c6:a6:ea:c5:e6:84:5a:ca:10:15:4b:
         e1:92:92:9a:73:9a:d9:23:f8:c5:18:b0:ac:bb:53:71:bc:1b:
         29:31:90:87:31:11:7a:d7:03:11:6b:42:ff:55:f2:bd:9e:bc:
         6b:11:1c:7c:51:56:3b:54:e5:14:ac:8e:74:a4:b8:44:f7:f9:
         1a:b3:46:04:92:dd:5b:37:7d:de:6b:d8:2d:95:0d:d0:6f:cd:
         24:a9:87:b9:30:d4:4e:89:03:0a:09:60:79:51:bb:56:38:e5:
         8e:28:c6:44:1c:a0:e4:59:6a:84:36:d4:81:02:df:92:a4:67:
         fc:61:ce:58:ea:46:dd:36:9e:1d:0e:dc:68:c8:df:c3:41:3f:
         02:aa:ee:63:13:bd:9f:72:6b:e1:f2:7c:14:ff:62:b7:a7:22:
         0b:14:e6:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----