Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/084d5ff361c0652f53a84176b58120cc629164dc.roa
File:                     084d5ff361c0652f53a84176b58120cc629164dc.roa (raw, json)
Hash identifier:          yFaPQewf3KbuXJKgS6o3Muow+TiJMSrIPLLOpGhbBYg=
Subject key identifier:   51:3A:74:C8:6E:1C:5E:A7:E2:D6:9B:72:EB:75:1C:33:ED:A9:89:52
Certificate issuer:       /CN=4714a8fc89277634ae57cdaf4d814514cd61f656
Certificate serial:       158DB2
Authority key identifier: 25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/084d5ff361c0652f53a84176b58120cc629164dc.roa
Signing time:             Tue 24 May 2022 15:45:02 +0000
ROA not before:           Tue 24 May 2022 03:00:00 +0000
ROA not after:            Mon 24 May 2027 03:00:00 +0000
asID:                     26619
IP address blocks:        179.50.40.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1412530 (0x158db2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4714a8fc89277634ae57cdaf4d814514cd61f656
        Validity
            Not Before: May 24 03:00:00 2022 GMT
            Not After : May 24 03:00:00 2027 GMT
        Subject: CN=084d5ff361c0652f53a84176b58120cc629164dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:43:a5:30:71:31:f5:84:bc:31:63:ae:cb:21:
                    4c:f9:65:e0:99:da:92:5f:46:bc:d6:8d:19:11:34:
                    bf:36:74:b4:83:b4:75:f2:4a:b2:2c:73:15:44:10:
                    14:80:2e:91:ce:47:bb:c2:c8:0e:e6:14:ac:c3:3c:
                    4b:ba:b3:f9:d0:e7:bd:09:cb:44:66:78:a1:70:a6:
                    65:ce:58:ae:35:db:d5:cc:e3:0d:89:22:35:1e:f3:
                    92:2d:b8:50:d2:e1:ef:74:9e:70:46:d7:5b:33:e1:
                    3a:31:a1:92:3b:ed:73:86:91:dd:0a:b3:c2:93:f4:
                    e7:3d:7a:f5:53:08:e5:86:a7:a3:e4:75:a1:44:0b:
                    dc:72:35:ba:5c:44:2f:ae:bd:e4:5c:be:25:cb:ee:
                    ce:8b:bb:1a:54:3b:04:3c:71:fc:87:33:3b:e7:5f:
                    df:c8:b7:bd:8b:c6:e9:04:b9:c3:28:55:ea:e7:98:
                    c6:83:6a:db:a8:ea:f6:cf:04:27:48:0a:80:24:a3:
                    34:cb:f4:e3:b8:b6:ac:ec:4c:a3:86:d2:4e:04:fb:
                    22:b4:43:c7:72:ec:97:5b:24:1c:86:5a:cd:0e:6c:
                    a4:ea:d8:72:94:8f:d1:d0:0e:c2:67:e3:f3:f3:62:
                    aa:26:8c:bd:e5:20:64:cf:cf:44:5f:7c:b3:d3:f3:
                    cd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3A:74:C8:6E:1C:5E:A7:E2:D6:9B:72:EB:75:1C:33:ED:A9:89:52
            X509v3 Authority Key Identifier:
                keyid:25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/084d5ff361c0652f53a84176b58120cc629164dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         98:e1:8d:a6:b3:ff:9a:78:67:9d:a7:4a:fe:9f:79:09:e3:af:
         cd:16:42:44:79:84:92:88:6f:14:fc:b1:83:cf:1f:14:ea:fb:
         6e:78:fe:41:d9:be:16:63:37:e4:29:46:76:93:c3:a2:e7:ad:
         1f:f5:b9:ea:fd:00:ba:a1:8f:86:ed:62:3f:d4:86:47:d1:92:
         65:4c:2e:58:c3:46:d0:2c:8b:fc:dd:0c:63:ad:66:44:cd:ab:
         7d:b3:2d:48:d2:63:53:d0:eb:70:2b:c3:df:ce:68:54:30:5e:
         15:d5:51:3b:04:e3:3a:3b:ad:55:9b:6b:6d:8e:08:a4:44:0f:
         c0:32:3d:70:e5:33:bf:bc:96:a9:0b:5c:6b:c1:db:d7:55:69:
         40:a6:4f:7f:dc:93:29:c9:02:f1:02:48:a6:9a:b3:94:cc:1e:
         a0:aa:28:db:f6:6d:ac:43:b2:5d:d7:a4:d7:d6:7b:4b:1d:1b:
         f8:1d:df:d9:23:06:77:ee:90:9d:e4:c8:ee:c2:60:f9:17:09:
         28:23:91:4b:c9:a6:d0:28:df:16:ea:93:b4:51:65:e2:52:73:
         a3:1f:da:cc:37:1d:a8:7b:d2:bf:06:aa:69:22:c6:47:41:be:
         d2:8a:15:f3:f8:fc:9e:9c:21:2e:a0:1d:c8:d9:ab:cc:9b:15:
         10:fa:17:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----