Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/2e099ab5-2631-4644-917e-1370d2134807/27f39933993bcba454bf6e0bdbfca7f8b5bfeb07.roa
File:                     27f39933993bcba454bf6e0bdbfca7f8b5bfeb07.roa (raw, json)
Hash identifier:          0vHMP03dGTayEdB32qjUqOa28QtRxcKWuYRmHaSrmj0=
Subject key identifier:   6E:F9:7F:F4:69:5F:9F:A8:90:52:CA:70:8A:5D:85:C5:8F:A1:CF:D8
Certificate issuer:       /CN=b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4
Certificate serial:       1BD8A4
Authority key identifier: 19:95:C5:7A:15:4A:61:08:E6:A4:70:22:65:2A:81:3F:0D:AF:60:C6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/2e099ab5-2631-4644-917e-1370d2134807/27f39933993bcba454bf6e0bdbfca7f8b5bfeb07.roa
Signing time:             Mon 30 Oct 2023 14:12:47 +0000
ROA not before:           Mon 30 Oct 2023 14:12:47 +0000
ROA not after:            Thu 30 Oct 2025 14:12:47 +0000
asID:                     270095
IP address blocks:        179.51.136.0/22 maxlen: 22
                          2803:87e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1824932 (0x1bd8a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4
        Validity
            Not Before: Oct 30 14:12:47 2023 GMT
            Not After : Oct 30 14:12:47 2025 GMT
        Subject: CN=27f39933993bcba454bf6e0bdbfca7f8b5bfeb07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7a:70:c2:1a:2e:a0:da:2d:96:db:98:7e:25:
                    3f:5a:23:13:ee:fa:ac:87:06:87:14:cc:83:1d:66:
                    fc:e8:f0:c8:1f:e3:27:9a:e6:ff:dd:46:89:b2:c3:
                    ac:22:71:c8:9d:a8:9b:3a:74:39:fd:23:d4:1f:19:
                    0b:59:eb:0f:57:c2:22:07:5c:cd:d1:d0:8f:9a:03:
                    d4:00:3c:4a:88:a4:56:dd:ce:28:51:05:58:a7:6d:
                    7c:0c:7c:d9:11:3b:80:47:a5:a7:7a:f0:3c:8f:ed:
                    6b:ef:7e:e6:f6:5b:67:15:ea:f5:47:70:9c:8d:f4:
                    d1:e0:22:47:50:a2:11:4c:d1:0a:4d:7b:8b:b8:3f:
                    39:23:2a:cf:86:a5:8e:a9:ad:f1:b4:8e:2f:ae:1d:
                    16:cc:f8:7e:d3:b5:1f:99:c1:d2:76:3d:7b:68:6f:
                    13:7f:c9:d0:1b:a7:af:fa:05:f5:ca:01:f2:54:d6:
                    8a:04:e8:c3:44:fd:23:38:2e:b9:f1:93:23:40:49:
                    2e:15:56:bc:dc:de:2d:97:8b:ec:a1:08:1d:2f:49:
                    dc:a8:7c:20:49:46:7a:b4:db:73:ca:f4:3d:16:f4:
                    fd:c3:8a:9b:2e:d3:9f:87:e8:06:d7:2a:0e:1f:f7:
                    fa:6a:2f:d4:3b:7c:94:7d:13:b7:b0:3f:9f:c1:6e:
                    82:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F9:7F:F4:69:5F:9F:A8:90:52:CA:70:8A:5D:85:C5:8F:A1:CF:D8
            X509v3 Authority Key Identifier:
                keyid:19:95:C5:7A:15:4A:61:08:E6:A4:70:22:65:2A:81:3F:0D:AF:60:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/2e099ab5-2631-4644-917e-1370d2134807/27f39933993bcba454bf6e0bdbfca7f8b5bfeb07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/2e099ab5-2631-4644-917e-1370d2134807/b0dafd5cd44e89a7e94431b559bb16bcbca3c3e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.136.0/22
                IPv6:
                  2803:87e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:8a:dc:f8:87:b6:1b:0b:96:ef:b3:94:6c:b1:5a:71:3c:53:
         a0:2f:e8:0c:51:cc:c3:94:c8:57:b9:2e:a9:0f:cc:d5:e1:61:
         0d:3c:50:9b:e6:cb:8d:25:e9:fb:a9:16:ea:18:89:72:d6:ba:
         5f:4d:eb:71:37:43:70:9e:e1:3e:be:1a:d2:b7:43:55:1d:f3:
         62:58:49:3b:62:2e:f9:f8:59:a5:b4:4d:4b:c1:be:35:ae:5a:
         66:d7:89:47:b5:a7:b3:03:40:39:2b:bd:8e:ad:4f:24:42:28:
         b4:e3:41:5f:38:24:dd:15:5b:9f:7c:b9:ab:08:3a:34:34:50:
         0d:b3:02:e9:9a:34:d6:a4:f8:69:16:6f:ef:5b:19:a3:92:43:
         07:d0:4c:97:1a:09:04:5e:1c:c3:e3:1a:73:98:6a:7e:dc:51:
         70:3b:87:54:ae:31:b5:3d:96:33:12:8b:4a:c2:b9:41:b5:9f:
         7e:28:ce:48:9f:00:7a:68:85:10:86:2f:24:a5:55:c8:70:57:
         ce:33:8a:3a:b9:d8:7c:16:d5:a8:d8:df:86:ce:e1:3c:3e:55:
         a7:a3:4a:63:72:5a:ea:69:04:59:9b:3d:b5:52:11:18:8f:6f:
         6d:5b:af:42:64:a5:ff:77:da:f0:9b:51:fd:e6:81:d8:cb:ff:
         b0:aa:c6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----