Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/ac14dc914756fafa2511c0514c50f172d90d6bb7.roa
File:                     ac14dc914756fafa2511c0514c50f172d90d6bb7.roa (raw, json)
Hash identifier:          vUHl6CAxl5XuOmZNHsiIf29RQhRlMUawk0ukoPRWkIU=
Subject key identifier:   67:6E:EC:08:5A:D4:AA:9E:11:9B:A9:AC:AE:E4:89:CC:01:EF:94:D5
Certificate issuer:       /CN=d3c9b57ab9bf19c2b14182899e6b240002a14ff3
Certificate serial:       056A33
Authority key identifier: 6B:2E:0B:22:F5:A7:41:F1:49:B3:A2:97:FC:D6:F7:EA:5C:D5:44:E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c9b57ab9bf19c2b14182899e6b240002a14ff3.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/ac14dc914756fafa2511c0514c50f172d90d6bb7.roa
Signing time:             Wed 30 Nov 2022 00:18:58 +0000
ROA not before:           Tue 29 Nov 2022 00:18:58 +0000
ROA not after:            Tue 30 Nov 2027 00:18:58 +0000
asID:                     271922
IP address blocks:        179.63.52.0/22 maxlen: 24
                          2803:df10::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354867 (0x56a33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c9b57ab9bf19c2b14182899e6b240002a14ff3
        Validity
            Not Before: Nov 29 00:18:58 2022 GMT
            Not After : Nov 30 00:18:58 2027 GMT
        Subject: CN=ac14dc914756fafa2511c0514c50f172d90d6bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c4:e9:ef:0a:30:2f:e3:c6:a5:10:a1:b7:58:
                    ee:93:8c:e4:41:6c:b3:96:10:40:62:1b:94:da:af:
                    2f:b3:8b:dc:bf:cb:c5:be:0e:33:c4:57:0b:f7:96:
                    23:7b:b0:df:0a:a4:7c:15:55:e9:8c:c1:fe:a3:3f:
                    1a:84:6c:12:c5:b5:0d:dd:d1:30:d4:ec:80:ef:37:
                    d5:5f:74:3b:bf:14:52:9b:23:f8:0e:77:76:92:4d:
                    e7:9b:b4:05:aa:69:76:f1:34:6d:2c:c4:96:d5:92:
                    81:19:b7:d5:90:60:e8:36:cf:49:0b:5f:a0:b5:fd:
                    68:94:87:3a:5e:fd:3e:11:b4:c2:7c:6e:65:0d:f5:
                    f5:da:47:26:0d:a3:92:2b:87:27:1d:f2:43:30:e1:
                    30:a7:4f:73:fe:7a:5f:81:ab:95:cb:7f:27:72:16:
                    02:52:be:a3:62:be:88:95:ee:1f:dc:aa:e5:0e:5b:
                    fb:b4:5d:90:36:25:12:07:6c:6a:66:af:8b:9b:71:
                    a9:fb:ba:32:a9:db:53:5e:97:61:f4:ff:0c:14:4b:
                    f4:5f:f9:61:64:31:ea:fa:8c:8b:f5:fe:9b:2d:15:
                    d3:8a:a0:8c:2f:a0:9f:19:a2:ab:7c:d9:e2:cc:9f:
                    08:09:81:41:8e:c7:8b:de:c2:61:c1:63:d3:ac:df:
                    ef:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6E:EC:08:5A:D4:AA:9E:11:9B:A9:AC:AE:E4:89:CC:01:EF:94:D5
            X509v3 Authority Key Identifier:
                keyid:6B:2E:0B:22:F5:A7:41:F1:49:B3:A2:97:FC:D6:F7:EA:5C:D5:44:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3c9b57ab9bf19c2b14182899e6b240002a14ff3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/ac14dc914756fafa2511c0514c50f172d90d6bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/d3c9b57ab9bf19c2b14182899e6b240002a14ff3.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.52.0/22
                IPv6:
                  2803:df10::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:ae:8f:ba:12:df:7a:f1:3b:8c:80:a4:ec:a1:38:e6:01:27:
         d8:ed:99:49:1c:a4:04:57:29:64:2a:df:4b:98:2d:1b:f8:87:
         aa:e7:8a:4a:22:77:b6:aa:57:9f:67:62:9f:87:d7:65:c5:36:
         29:60:ee:62:d2:9d:9a:24:8b:51:79:94:99:77:fd:53:97:23:
         ad:48:2b:e9:8e:69:7a:5b:64:d1:ff:9b:87:48:e4:25:01:79:
         e2:0a:a6:df:df:05:4e:30:7d:f4:70:05:c8:d0:ee:cd:65:62:
         7b:b6:5f:e1:63:e4:b1:45:fe:c2:06:9f:8c:0b:e5:67:8a:9a:
         e6:d2:64:d6:50:5b:42:85:70:be:78:ff:86:58:e0:3f:c1:7e:
         2e:09:12:e7:21:25:cb:0d:c7:3f:ea:e1:a2:95:d4:a5:ae:a5:
         43:34:e7:a4:76:cb:25:5b:38:d1:e9:25:f1:48:05:d2:9b:08:
         15:12:03:00:04:94:0e:57:e7:00:44:e8:53:b8:ca:0d:09:be:
         ff:f9:6b:20:9f:a6:7e:3f:f9:ab:08:b7:6f:32:38:78:e2:b3:
         95:21:9a:d8:70:3f:ba:60:cf:4b:1a:32:dc:9f:56:ce:af:b7:
         5c:8a:d3:dc:72:89:7a:8d:79:fd:93:be:52:7a:12:10:85:9c:
         e5:33:ad:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----