Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/71c4f017198fc0b282b17eb3c243ae3e83e90a8e.roa
File:                     71c4f017198fc0b282b17eb3c243ae3e83e90a8e.roa (raw, json)
Hash identifier:          dATMxs4fnox0xHHHC83EvhBq87lQQNGO2BhykB2/z1Q=
Subject key identifier:   F8:39:85:E4:3D:F1:AF:90:BE:74:92:58:76:74:E1:0E:0A:EA:BB:01
Certificate issuer:       /CN=4714a8fc89277634ae57cdaf4d814514cd61f656
Certificate serial:       159A48
Authority key identifier: 25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/71c4f017198fc0b282b17eb3c243ae3e83e90a8e.roa
Signing time:             Tue 24 May 2022 15:47:17 +0000
ROA not before:           Tue 24 May 2022 03:00:00 +0000
ROA not after:            Mon 24 May 2027 03:00:00 +0000
asID:                     26619
IP address blocks:        179.50.112.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1415752 (0x159a48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4714a8fc89277634ae57cdaf4d814514cd61f656
        Validity
            Not Before: May 24 03:00:00 2022 GMT
            Not After : May 24 03:00:00 2027 GMT
        Subject: CN=71c4f017198fc0b282b17eb3c243ae3e83e90a8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:76:7c:66:92:b3:98:31:e8:1c:18:f5:9b:
                    62:68:59:bc:02:6d:a4:ef:19:d4:e7:1e:21:7f:68:
                    91:30:16:b7:8c:df:30:c4:b4:b5:cc:9f:af:12:c3:
                    c2:d2:00:3b:8e:fa:00:ae:37:0b:f0:ff:97:3c:d3:
                    ea:a8:0a:46:f2:1f:ca:30:22:3e:ac:bd:60:f9:18:
                    f7:3b:9f:12:a9:37:da:2b:c3:c7:b0:0a:39:09:f4:
                    5c:a6:5e:5a:b2:71:34:0d:e9:44:b8:b4:6a:ec:b5:
                    ed:1b:d7:bf:f4:27:6a:41:b4:ba:80:67:2d:28:cf:
                    e0:0a:41:c9:5f:e3:97:b7:05:44:7a:f7:a6:76:0c:
                    2f:89:dc:8b:22:36:05:3d:47:02:54:08:e6:b0:3d:
                    91:f5:71:e5:69:c6:8a:66:7f:63:86:99:f9:4e:64:
                    08:e5:f8:d9:28:ee:30:9e:07:a9:bd:19:5c:0a:a2:
                    f7:a2:54:4e:8a:5f:e0:a1:45:a2:89:97:b7:d5:81:
                    46:da:9c:dd:a3:9a:4d:7b:5e:34:9c:87:03:0c:c0:
                    b0:8e:03:71:2f:67:b4:30:7b:a4:ce:87:7e:d6:c6:
                    d7:66:a1:e1:d8:8c:65:e4:87:82:85:5a:ec:a2:7a:
                    ef:09:5b:fa:70:f3:16:ca:a5:3d:a3:8e:ac:68:56:
                    d2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:39:85:E4:3D:F1:AF:90:BE:74:92:58:76:74:E1:0E:0A:EA:BB:01
            X509v3 Authority Key Identifier:
                keyid:25:F3:6F:92:FF:31:91:9D:EA:9D:E8:18:EE:46:83:9A:1E:6E:17:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4714a8fc89277634ae57cdaf4d814514cd61f656.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/71c4f017198fc0b282b17eb3c243ae3e83e90a8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/241b5edd-68e5-4ea0-b535-52ecf99a0891/4714a8fc89277634ae57cdaf4d814514cd61f656.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.50.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8e:85:23:2a:39:2e:24:1e:20:ea:0d:3a:be:cb:a2:36:66:94:
         ad:7f:b4:70:e9:e8:d6:d4:d5:d9:8d:b5:71:b9:4c:15:1c:68:
         8f:b6:73:ca:af:d4:6e:1e:dc:53:b0:37:0c:4b:e6:b6:c0:1c:
         d0:05:4f:83:39:f5:74:e3:06:08:d7:5d:6c:92:83:00:3a:dd:
         dd:3e:42:c9:da:ac:b7:04:8e:14:67:4c:a1:25:30:51:9e:2b:
         66:fe:f1:6d:64:7c:a6:a4:c8:52:66:8e:9c:a6:37:c0:06:19:
         77:93:bd:d6:24:31:ae:e8:07:ad:de:c0:72:ad:07:4e:e3:99:
         04:dc:50:9a:c8:5c:d6:e2:0f:de:93:90:3c:6c:fd:b1:cc:b1:
         45:5c:8d:88:93:50:18:df:0c:5d:55:c5:92:f1:66:9b:c2:17:
         16:09:95:63:f9:ee:59:9d:61:72:12:52:13:62:7e:7c:d6:06:
         e2:3c:89:bc:50:f1:61:6c:26:04:5f:f5:46:4b:f5:f9:cf:f0:
         f6:0f:ff:d3:5e:c5:52:fc:ed:27:a2:bd:97:66:8f:e3:16:6e:
         65:8d:0c:4d:6f:30:e3:01:b8:be:4c:9d:1b:41:fa:aa:85:a5:
         f2:de:11:f3:f3:2d:ab:6e:b2:7d:f3:2e:57:3a:f7:ab:a8:8e:
         d1:24:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----