Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/31ebb9108857c421bd6aa494e6cdd45a6bbb5809.roa
File:                     31ebb9108857c421bd6aa494e6cdd45a6bbb5809.roa (raw, json)
Hash identifier:          2K+wuRrzkgcDNeODltekI3qk58gFL5BhnNJmXTR7VKE=
Subject key identifier:   5B:EA:14:8E:90:78:89:23:72:25:38:E0:49:25:9E:1E:FC:FD:43:52
Certificate issuer:       /CN=4714a8fc89277634ae57cdaf4d814514cd61f656
Certificate serial:       1592FE
Authority key identifier: 25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/31ebb9108857c421bd6aa494e6cdd45a6bbb5809.roa
Signing time:             Tue 24 May 2022 15:46:12 +0000
ROA not before:           Tue 24 May 2022 03:00:00 +0000
ROA not after:            Mon 24 May 2027 03:00:00 +0000
asID:                     26619
IP address blocks:        179.50.120.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1413886 (0x1592fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4714a8fc89277634ae57cdaf4d814514cd61f656
        Validity
            Not Before: May 24 03:00:00 2022 GMT
            Not After : May 24 03:00:00 2027 GMT
        Subject: CN=31ebb9108857c421bd6aa494e6cdd45a6bbb5809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f5:5c:cb:94:23:8c:20:c7:2d:53:77:7d:bf:
                    a3:88:ce:ca:eb:7a:53:ef:6f:8c:d1:7c:f3:1a:55:
                    09:8e:08:d6:6d:21:c3:cf:91:10:45:32:2d:db:c4:
                    d6:b1:06:68:5d:d5:e5:16:28:79:c0:c9:23:3b:56:
                    be:e9:f6:ab:36:23:b1:75:8c:f4:42:f9:a0:7c:bd:
                    99:c0:8c:3c:39:06:1c:47:ee:e5:3e:d9:b5:a8:02:
                    f2:01:91:0d:d1:88:11:26:e5:96:ff:4e:62:ad:6d:
                    84:35:ca:93:0c:1b:40:1a:2b:df:ab:18:49:da:3d:
                    56:84:de:dc:f4:f7:cc:c9:db:f2:4d:b0:c3:f6:fd:
                    24:75:b7:3e:6c:94:ae:58:5e:76:25:8d:73:ae:06:
                    50:74:de:62:1d:91:29:74:f2:64:8c:73:65:57:33:
                    d2:c5:f6:8f:e0:05:a4:86:c9:5d:cd:14:9d:98:63:
                    5e:04:d6:5c:6a:8b:96:3d:cc:06:eb:77:18:68:47:
                    99:40:4b:b0:54:28:f3:af:59:96:cb:7d:70:b4:6c:
                    69:85:17:08:c7:e3:3f:e6:af:fe:9d:70:4c:2b:c7:
                    e5:15:c5:43:ad:7a:ef:92:f5:8b:c5:e2:1d:7a:c4:
                    96:3e:0a:7f:ef:71:5d:f1:62:93:70:c0:cb:67:54:
                    fb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EA:14:8E:90:78:89:23:72:25:38:E0:49:25:9E:1E:FC:FD:43:52
            X509v3 Authority Key Identifier:
                keyid:25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/31ebb9108857c421bd6aa494e6cdd45a6bbb5809.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:40:63:e4:a7:dd:a4:7a:41:10:0c:1d:c1:ad:c0:19:76:97:
         ae:d6:d9:3f:db:0c:94:e4:50:6c:67:29:f7:c7:6e:36:31:5c:
         a9:ff:c9:d6:bc:9b:42:9c:98:30:ff:27:51:e4:e9:80:0b:90:
         d0:a3:ba:3b:99:a6:a1:84:7c:f6:31:01:be:5f:dc:a8:c9:d4:
         55:d6:39:63:63:cf:a7:9e:79:84:48:58:17:8b:b2:c8:a4:fd:
         cd:bc:a9:c9:e1:b4:d5:41:be:e3:55:55:3c:bf:61:0f:61:a0:
         6d:6a:66:a0:f6:8b:71:61:87:50:fc:2d:0f:41:1b:9c:aa:d6:
         d5:f4:fc:d6:14:34:3f:75:d7:8f:2b:dc:5c:c2:8e:50:7b:de:
         91:f7:60:bb:dc:b5:d2:18:89:5e:ea:ee:a7:d0:3f:a3:8a:de:
         74:ea:94:d6:56:55:df:53:5b:9a:e9:fa:8d:71:6d:cb:49:71:
         48:b2:58:06:a7:fa:d2:44:00:b0:32:90:f9:d0:6f:11:fa:7a:
         63:cf:ed:bc:e2:ba:78:98:8b:67:2f:61:a7:37:d0:ef:ce:93:
         d6:6c:ff:95:15:45:fc:f2:e5:7a:d0:e9:92:09:15:36:f6:66:
         c4:b3:16:61:59:05:c4:8b:0c:38:e6:f3:23:92:d5:18:bc:c5:
         8a:26:b3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----