Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f2270cd49258a5ff99f4528e002b63f2b5742766.roa
File:                     f2270cd49258a5ff99f4528e002b63f2b5742766.roa (raw, json)
Hash identifier:          XgHGlzFgkJG2X7jtWay9q2bopuH4WUOe9U35nfq/lQU=
Subject key identifier:   0C:67:7D:88:D9:3E:46:52:A0:42:BD:8B:9D:BA:02:F7:CE:F0:39:C1
Certificate issuer:       /CN=ce24136a35f10502f080a99eec6f12882d2f04fa
Certificate serial:       06016D
Authority key identifier: 2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f2270cd49258a5ff99f4528e002b63f2b5742766.roa
Signing time:             Wed 24 Mar 2021 14:33:34 +0000
ROA not before:           Wed 24 Mar 2021 14:33:29 +0000
ROA not after:            Tue 24 Mar 2026 14:33:29 +0000
asID:                     61317
IP address blocks:        179.61.128.0/17 maxlen: 24
                          181.214.0.0/15 maxlen: 24
                          191.96.0.0/16 maxlen: 24
                          191.101.0.0/16 maxlen: 24
                          2803:80::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393581 (0x6016d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Validity
            Not Before: Mar 24 14:33:29 2021 GMT
            Not After : Mar 24 14:33:29 2026 GMT
        Subject: CN=f2270cd49258a5ff99f4528e002b63f2b5742766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:33:4a:0d:5f:94:a7:b6:a8:da:08:b2:57:b5:
                    76:d1:a0:5f:d1:c4:4e:f0:26:ee:9f:77:97:e3:a4:
                    1c:ef:bf:a0:06:9f:7a:db:74:c7:69:87:e5:7a:df:
                    e2:08:ef:77:48:30:41:93:13:45:97:30:c0:dd:bd:
                    93:4d:92:91:31:d4:79:0f:ad:6a:e5:8a:aa:55:5d:
                    e6:98:06:c0:49:b7:6f:82:4f:bc:f1:3c:9a:ab:d0:
                    cc:63:d1:03:69:7a:23:b1:26:d6:26:c5:90:f7:cc:
                    34:37:fc:74:10:87:5c:f5:6f:cc:d7:91:86:ef:15:
                    27:14:cb:f0:eb:ba:7f:e0:85:8c:61:2e:6e:2a:5f:
                    55:73:65:2e:e0:02:af:65:ca:5a:aa:15:23:92:a8:
                    9f:61:d0:48:86:09:81:ec:68:bc:f7:9e:3a:7b:41:
                    24:91:96:6a:91:a8:bd:cd:64:f3:86:e2:82:78:59:
                    bf:e6:dd:56:12:ae:7c:d3:a6:53:54:dd:ff:04:7c:
                    1f:81:e5:87:a3:bd:07:cf:ad:92:6c:14:4b:2a:a1:
                    b2:f4:de:63:03:8c:19:fd:df:0c:18:af:ee:4d:13:
                    a6:d3:86:ac:81:a3:53:ef:52:7c:4d:45:07:8a:5d:
                    23:23:d1:4e:95:6f:85:85:67:f3:46:54:07:e1:0d:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:67:7D:88:D9:3E:46:52:A0:42:BD:8B:9D:BA:02:F7:CE:F0:39:C1
            X509v3 Authority Key Identifier:
                keyid:2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/f2270cd49258a5ff99f4528e002b63f2b5742766.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.128.0/17
                  181.214.0.0/15
                  191.96.0.0/16
                  191.101.0.0/16
                IPv6:
                  2803:80::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:0c:4f:2d:06:41:25:c2:a9:75:ec:ec:cd:b8:ba:8b:85:a6:
         b7:ba:8b:25:6c:7a:b3:52:cd:ee:fd:68:02:c8:06:d4:a8:c0:
         93:c4:77:20:90:e7:d6:ca:fd:17:af:83:1b:b3:ee:8b:e0:be:
         81:f8:3a:02:8c:17:6d:b1:48:01:d2:98:83:78:9c:66:ab:a7:
         0e:f5:7d:44:45:26:c9:f6:9c:21:2b:36:f2:0c:32:b4:ec:58:
         19:92:9c:dc:c2:99:03:35:8b:b4:41:ad:f7:65:b4:41:89:97:
         e9:76:c8:fc:c1:c5:66:cc:11:0c:4c:f0:ff:c4:a4:43:ab:be:
         18:d8:d6:bb:ab:54:1d:65:d2:97:64:56:96:ea:eb:df:9f:be:
         08:67:f2:5a:e6:ae:5a:49:ef:08:e2:7e:ca:e7:ed:87:36:33:
         e0:56:6b:d7:6c:34:db:14:59:9d:d4:ee:a2:8c:5d:41:84:c0:
         e5:8d:8c:06:1f:0a:d5:db:73:2b:1b:51:89:77:33:ba:0b:2c:
         a5:80:31:2c:a5:23:eb:ad:68:05:b7:82:d2:8b:56:8b:4a:84:
         96:c4:dc:ee:e3:5c:91:41:8a:c2:49:2a:4f:b4:50:74:8f:f0:
         b1:bd:86:a5:66:e1:81:e5:05:86:71:3f:24:16:a6:6c:c0:2a:
         8e:1b:ae:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----