Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c2e7087-fee7-4bb2-b30e-819a83f266a4/c32d888ad5c6b31b431c3db8596a8cd4babfacd9.roa
File:                     c32d888ad5c6b31b431c3db8596a8cd4babfacd9.roa (raw, json)
Hash identifier:          V2gSv0tbc0s9zOdjJd9+VTSdP2wBCy/M9uavms4PDLU=
Subject key identifier:   61:61:98:1F:66:DF:3C:10:C6:38:20:F9:6A:58:1C:D3:8A:FB:6D:D0
Certificate issuer:       /CN=d5bbaadaa0e97bd0e8a17dfd93ecd873e73aa803
Certificate serial:       1225A5
Authority key identifier: 1D:68:F6:91:0D:61:F6:36:50:AA:03:D2:40:6A:C6:FE:D3:A8:5A:BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5bbaadaa0e97bd0e8a17dfd93ecd873e73aa803.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c2e7087-fee7-4bb2-b30e-819a83f266a4/c32d888ad5c6b31b431c3db8596a8cd4babfacd9.roa
Signing time:             Thu 27 Apr 2023 08:30:00 +0000
ROA not before:           Wed 26 Apr 2023 08:30:00 +0000
ROA not after:            Fri 25 Apr 2025 08:30:00 +0000
asID:                     262248
IP address blocks:        179.63.192.0/21 maxlen: 21
                          2803:fb00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1189285 (0x1225a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5bbaadaa0e97bd0e8a17dfd93ecd873e73aa803
        Validity
            Not Before: Apr 26 08:30:00 2023 GMT
            Not After : Apr 25 08:30:00 2025 GMT
        Subject: CN=c32d888ad5c6b31b431c3db8596a8cd4babfacd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c2:c3:bf:9c:27:b3:40:9c:ec:b9:51:09:87:
                    1d:e0:7b:a2:da:e9:cf:52:9e:23:37:69:3f:46:09:
                    f3:27:4b:75:66:db:32:b9:26:db:c2:21:5e:00:a3:
                    e4:e5:34:6b:79:f2:67:80:5f:21:0c:82:93:b0:33:
                    13:b7:5d:0c:ee:7d:27:b1:c0:37:70:95:f6:da:b6:
                    aa:34:8d:f9:60:48:69:93:71:f1:e3:03:08:d7:44:
                    dd:de:06:eb:45:60:de:d4:7e:35:e8:f6:d9:47:3a:
                    56:08:d6:30:9f:d3:78:71:39:17:b5:a9:8b:e5:11:
                    0e:6c:a4:fc:a4:46:63:c6:82:78:7d:d1:b4:ce:f4:
                    a2:d5:2c:c6:5e:b2:97:1d:f7:90:5d:3b:8d:c7:fd:
                    93:0f:1f:1b:75:44:00:e3:88:7d:d8:70:2d:66:fe:
                    41:71:fe:2a:57:3d:1c:dc:48:c5:b5:46:da:43:6e:
                    c3:4a:a9:8d:bd:fb:37:4c:4c:a9:f1:da:94:12:4e:
                    e4:73:4b:47:af:a1:5f:05:bb:97:b5:16:b8:b6:7f:
                    99:99:84:be:b0:a1:47:06:9d:e9:56:23:b3:e1:39:
                    96:fa:c1:06:3d:50:22:7f:90:50:c9:b1:fe:e9:c2:
                    5e:f8:e4:d9:b0:03:f3:1f:21:b1:ee:ef:01:b7:de:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:61:98:1F:66:DF:3C:10:C6:38:20:F9:6A:58:1C:D3:8A:FB:6D:D0
            X509v3 Authority Key Identifier:
                keyid:1D:68:F6:91:0D:61:F6:36:50:AA:03:D2:40:6A:C6:FE:D3:A8:5A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5bbaadaa0e97bd0e8a17dfd93ecd873e73aa803.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c2e7087-fee7-4bb2-b30e-819a83f266a4/c32d888ad5c6b31b431c3db8596a8cd4babfacd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c2e7087-fee7-4bb2-b30e-819a83f266a4/d5bbaadaa0e97bd0e8a17dfd93ecd873e73aa803.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.192.0/21
                IPv6:
                  2803:fb00::/32

    Signature Algorithm: sha256WithRSAEncryption
         af:03:d6:40:19:f7:af:70:d1:f0:a2:24:c3:78:43:fc:f5:0f:
         02:08:b0:de:b8:74:22:a1:13:69:62:f0:48:a2:71:6e:e9:dc:
         7c:fa:16:d1:bb:5c:14:29:fc:8d:ed:df:14:2a:f1:ee:3e:a3:
         b1:9c:aa:56:22:16:fa:48:ae:47:db:99:b4:d4:ce:d1:d2:5b:
         d7:45:a9:38:ba:3b:48:4a:3a:5e:78:af:4a:ba:d2:73:87:6c:
         23:5a:42:b4:66:24:59:f7:c5:29:42:f6:3a:44:1c:14:14:8b:
         fc:4d:81:37:0b:3f:80:2a:05:61:47:1c:34:01:b2:2b:21:28:
         9d:e6:cb:78:86:73:3f:b6:6f:bc:c3:7a:87:c6:8c:15:30:a0:
         4c:82:14:f9:2a:71:e1:80:39:84:4e:f1:1d:5c:3c:7f:a3:23:
         40:70:aa:d9:ff:dc:58:74:f6:2b:0a:41:ca:1b:82:2f:d1:9f:
         4c:9f:73:d2:75:c3:60:8e:36:ef:f8:b0:a4:20:fe:ef:49:7b:
         18:c0:ff:1c:0b:2f:91:51:fd:43:7d:3d:2d:7c:cd:ec:13:20:
         fc:50:fd:d1:92:dd:3d:eb:a0:c2:60:2d:a2:26:62:47:09:01:
         5d:0b:df:50:e2:61:ea:3a:4a:33:e7:92:c5:0a:32:64:3e:6e:
         1c:ed:b8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----