Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3930cb5c-6adb-423c-97b4-af3afbe59205/86459d841b3f4afc791e470703e150a8e68d00af.roa
File:                     86459d841b3f4afc791e470703e150a8e68d00af.roa (raw, json)
Hash identifier:          wv5ZINpveLhIyznKG5OMipAwlJqQYxHhznJDLnyLIuY=
Subject key identifier:   8A:2D:5F:2E:3B:F5:82:98:17:0D:93:9F:19:31:9C:10:85:9B:7E:24
Certificate issuer:       /CN=455a0128ffd8e326e1f151fa1ad8365768d0e332
Certificate serial:       0FA5BA
Authority key identifier: B1:D1:95:2A:9B:2E:3A:06:3F:48:2F:2B:5A:36:1D:EA:EE:D9:C9:B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/455a0128ffd8e326e1f151fa1ad8365768d0e332.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3930cb5c-6adb-423c-97b4-af3afbe59205/86459d841b3f4afc791e470703e150a8e68d00af.roa
Signing time:             Thu 23 Nov 2023 11:14:39 +0000
ROA not before:           Thu 23 Nov 2023 11:14:38 +0000
ROA not after:            Sun 23 Nov 2025 11:14:38 +0000
asID:                     272021
IP address blocks:        179.63.8.0/22 maxlen: 24
                          2801:1a1::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025466 (0xfa5ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a0128ffd8e326e1f151fa1ad8365768d0e332
        Validity
            Not Before: Nov 23 11:14:38 2023 GMT
            Not After : Nov 23 11:14:38 2025 GMT
        Subject: CN=86459d841b3f4afc791e470703e150a8e68d00af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:3e:1e:15:4a:cd:fa:48:e3:05:9b:52:b2:
                    0a:fc:9b:2e:66:7c:d7:e1:58:8f:1e:52:eb:17:f0:
                    a9:01:84:0e:47:a6:6b:54:12:84:0f:62:5f:92:6e:
                    57:3a:8a:c6:15:d9:56:36:d4:43:79:f8:40:68:d3:
                    48:c7:b8:17:1a:c0:6d:e7:7e:b4:2c:96:b9:8e:88:
                    f9:c2:ac:7d:14:5f:f0:be:ab:f9:23:9d:f4:16:1c:
                    be:8f:b4:ee:95:f4:05:74:06:10:72:94:f9:57:15:
                    62:6c:a0:b3:b9:3f:dd:a9:47:11:9e:a3:00:ac:c4:
                    61:91:9b:5e:8e:c6:ad:48:ca:d8:a8:d5:71:ca:37:
                    47:93:91:21:cd:24:05:23:53:e3:f0:5d:bc:75:9b:
                    6b:7b:46:61:ef:5a:61:a3:5d:35:57:4b:c5:aa:b5:
                    50:47:be:a1:4a:02:36:9a:69:00:22:63:bf:ef:de:
                    2c:b7:5e:c1:64:ee:a8:7d:50:b3:6e:67:b1:41:1e:
                    cc:08:ac:9f:7d:9d:85:57:94:ee:bd:ef:1f:ee:8a:
                    d4:d5:e7:11:85:98:87:06:7f:8b:56:13:86:92:d0:
                    ff:60:4a:8e:e5:c6:5f:cf:90:d0:3a:f4:d3:bc:85:
                    18:cc:04:ae:de:c5:df:da:4c:95:b6:4d:d6:5d:b2:
                    06:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2D:5F:2E:3B:F5:82:98:17:0D:93:9F:19:31:9C:10:85:9B:7E:24
            X509v3 Authority Key Identifier:
                keyid:B1:D1:95:2A:9B:2E:3A:06:3F:48:2F:2B:5A:36:1D:EA:EE:D9:C9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/455a0128ffd8e326e1f151fa1ad8365768d0e332.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3930cb5c-6adb-423c-97b4-af3afbe59205/86459d841b3f4afc791e470703e150a8e68d00af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3930cb5c-6adb-423c-97b4-af3afbe59205/455a0128ffd8e326e1f151fa1ad8365768d0e332.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.8.0/22
                IPv6:
                  2801:1a1::/44

    Signature Algorithm: sha256WithRSAEncryption
         37:b9:ee:e6:ad:79:5d:47:06:c8:05:8c:a7:6e:b5:7d:06:bf:
         e7:5a:5d:9f:46:83:6f:22:c2:fc:2a:c2:2b:63:e5:89:66:48:
         8e:18:52:75:1b:df:7e:93:35:7e:41:f8:18:f8:5f:c5:d2:69:
         f6:c2:db:31:d6:3e:37:e6:5a:c5:47:74:c3:b7:8c:44:13:8a:
         c5:66:69:0e:77:dd:87:41:2a:a6:85:1f:fd:c5:9f:c1:10:89:
         1b:73:c6:d6:cc:94:89:6a:2f:23:3b:18:7c:23:47:dc:48:b1:
         00:66:7f:7d:9f:4b:f0:04:72:6c:65:54:d2:92:2e:59:1a:cb:
         82:68:19:c5:dd:c5:ee:e4:ca:c6:20:b7:d9:9c:37:a3:86:db:
         c1:f0:15:c2:bf:6d:14:0c:d8:1b:4f:a5:cd:8f:5a:ce:5c:7f:
         e7:39:6c:de:69:02:18:96:df:65:f1:dd:d8:dd:cd:f8:31:6b:
         3a:09:c9:5b:fa:29:48:5e:14:84:d5:b4:39:98:a8:3a:1e:f2:
         b2:28:01:82:86:73:ee:95:86:a7:56:1e:97:eb:8f:4b:0f:69:
         f1:fa:5c:b8:05:fb:bd:d4:ba:15:09:f2:27:52:f9:97:32:db:
         15:b7:01:c8:d6:5a:0f:7d:c5:e9:34:14:6d:44:ee:e8:d5:c2:
         f9:bf:7f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----