Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/0ecb10ee620270598c26f375bc09a7f24555a80c.roa
File:                     0ecb10ee620270598c26f375bc09a7f24555a80c.roa (raw, json)
Hash identifier:          xHioj1a9A8onVRn99ZXo2baU/gM7+nvhRHwL3zJI1Qg=
Subject key identifier:   ED:4E:1F:19:1F:39:F9:18:6E:DE:7C:F4:30:DC:EC:90:E7:C0:F1:64
Certificate issuer:       /CN=d3c9b57ab9bf19c2b14182899e6b240002a14ff3
Certificate serial:       0534B0
Authority key identifier: 6B:2E:0B:22:F5:A7:41:F1:49:B3:A2:97:FC:D6:F7:EA:5C:D5:44:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c9b57ab9bf19c2b14182899e6b240002a14ff3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/0ecb10ee620270598c26f375bc09a7f24555a80c.roa
Signing time:             Tue 22 Nov 2022 21:13:22 +0000
ROA not before:           Mon 21 Nov 2022 21:12:58 +0000
ROA not after:            Fri 22 Nov 2024 21:12:58 +0000
asID:                     271922
IP address blocks:        179.63.52.0/22 maxlen: 24
                          2803:df10::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341168 (0x534b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c9b57ab9bf19c2b14182899e6b240002a14ff3
        Validity
            Not Before: Nov 21 21:12:58 2022 GMT
            Not After : Nov 22 21:12:58 2024 GMT
        Subject: CN=0ecb10ee620270598c26f375bc09a7f24555a80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:ca:4d:13:b0:46:ca:0d:3c:6c:9c:87:c0:
                    fb:5c:8e:65:a3:04:ff:54:7c:18:9a:fc:d8:82:33:
                    e4:3f:b1:36:c4:00:c1:f1:70:46:73:cf:ba:f5:1b:
                    af:e8:6d:4a:60:b6:5b:25:4b:1b:df:3b:1c:9a:c0:
                    13:a6:c5:23:eb:d5:88:2f:95:12:86:10:9e:d6:aa:
                    d9:c7:c8:24:c8:57:bd:bd:41:5d:ae:52:c1:f9:a7:
                    83:84:03:65:3c:e2:70:89:be:d3:ce:59:91:eb:22:
                    31:39:f1:93:c3:6f:4e:cd:8c:0d:88:33:a9:95:7a:
                    45:99:cc:f3:69:30:0a:6f:c3:95:53:73:a7:5e:c4:
                    63:3a:e3:d2:61:e9:14:f5:2c:09:df:10:88:0c:c6:
                    74:59:80:bb:fa:b0:1a:a1:96:60:80:a3:81:c8:a0:
                    63:4e:9a:eb:c2:2f:65:03:d5:6f:fa:d0:d5:9e:a6:
                    c2:39:31:45:fd:be:f5:14:2a:ee:a0:8d:e5:73:d0:
                    2c:c3:2a:16:34:02:03:61:8a:46:be:8b:c3:68:1c:
                    6b:8c:e8:ce:30:c4:f9:81:44:fa:c0:9b:38:d0:f0:
                    21:82:a9:ef:04:7d:e5:15:7f:7d:b2:4b:86:d5:67:
                    4b:26:71:ee:6a:6f:35:6f:10:25:b0:d1:ba:43:7f:
                    61:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4E:1F:19:1F:39:F9:18:6E:DE:7C:F4:30:DC:EC:90:E7:C0:F1:64
            X509v3 Authority Key Identifier:
                keyid:6B:2E:0B:22:F5:A7:41:F1:49:B3:A2:97:FC:D6:F7:EA:5C:D5:44:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c9b57ab9bf19c2b14182899e6b240002a14ff3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/0ecb10ee620270598c26f375bc09a7f24555a80c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/d3c9b57ab9bf19c2b14182899e6b240002a14ff3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.52.0/22
                IPv6:
                  2803:df10::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:10:24:06:60:93:c3:47:d8:89:cf:de:0d:fe:f3:08:b9:d1:
         33:12:8c:51:a4:35:32:7c:3c:e8:fc:1c:42:17:24:e6:ba:d2:
         98:5b:00:60:da:e7:5c:a4:06:42:3c:e8:0c:5e:b4:2c:42:53:
         0e:f9:19:65:1c:a8:20:2c:3e:2b:1f:b3:e1:70:d1:17:be:4d:
         05:65:b5:5b:37:52:14:27:48:c2:1c:15:fc:96:1c:e4:e2:6e:
         65:7a:95:dd:6b:87:b2:b5:7f:51:39:49:41:26:1f:6d:fa:f6:
         cf:72:74:9e:dd:62:63:34:95:ea:c3:58:1c:72:0a:3c:4f:1c:
         25:1d:c2:de:77:73:b6:84:2b:70:96:c5:93:5f:b7:60:5b:24:
         29:81:f8:b0:5e:8b:39:e9:69:44:08:d4:cf:9b:91:f5:71:8c:
         de:87:e5:17:bc:94:06:74:6d:89:de:36:f7:d5:46:d2:2b:e0:
         53:b6:1a:50:3d:22:70:f8:3a:b3:3b:a0:9b:e1:72:19:cd:b9:
         e0:92:e7:ec:8c:87:01:d7:54:7a:55:7a:47:81:cc:0e:35:e4:
         a7:c9:fc:bc:4e:d1:17:30:52:43:b4:27:e0:62:4f:46:9f:b9:
         c0:c9:5c:ff:a0:46:c0:4b:09:b8:91:9c:d6:ea:17:06:4d:e2:
         74:5d:15:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----