Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/77ead86dc18f155aa50c068d59cf7962e98717b7.roa
File:                     77ead86dc18f155aa50c068d59cf7962e98717b7.roa (raw, json)
Hash identifier:          l24zNFa0HoRmCuN8sFv4HXlheatuM7O/t50Vvjh6GsM=
Subject key identifier:   D5:00:1E:CE:7E:4F:B8:EF:29:99:ED:D3:10:0F:A6:A9:4B:9F:E0:D4
Certificate issuer:       /CN=5d6739fb330fec46825943b9c33eaee7782d7827
Certificate serial:       1B7DDB
Authority key identifier: 4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/77ead86dc18f155aa50c068d59cf7962e98717b7.roa
Signing time:             Wed 19 Oct 2022 12:53:51 +0000
ROA not before:           Tue 18 Oct 2022 12:48:38 +0000
ROA not after:            Sat 19 Oct 2024 12:48:38 +0000
asID:                     3816
IP address blocks:        179.42.172.0/22 maxlen: 22
                          2803:ac80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801691 (0x1b7ddb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6739fb330fec46825943b9c33eaee7782d7827
        Validity
            Not Before: Oct 18 12:48:38 2022 GMT
            Not After : Oct 19 12:48:38 2024 GMT
        Subject: CN=77ead86dc18f155aa50c068d59cf7962e98717b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0e:b6:61:60:29:24:ad:6c:a2:7b:78:a4:29:
                    5d:bd:38:6b:2b:27:4c:20:98:ce:2d:56:d2:d1:8a:
                    1c:5f:ee:cb:0a:91:ad:9a:27:35:69:e9:e9:df:7d:
                    a1:fe:44:18:52:98:35:f7:f8:a9:d6:ce:f8:44:c4:
                    2b:04:07:36:2a:4b:20:29:64:8c:a5:2b:7b:c1:5f:
                    1d:b1:90:fd:1a:f9:23:62:8c:07:39:c4:70:34:a6:
                    94:a3:5b:cf:83:41:dd:f1:18:e3:99:12:62:3f:f8:
                    88:87:d4:f8:7b:f1:cd:1c:b4:0e:0d:52:d4:06:d2:
                    0b:8e:06:cc:87:c0:d2:2b:20:a2:0d:80:76:fe:30:
                    d8:c7:69:76:db:8d:f3:b0:2d:93:85:cc:a1:67:6e:
                    c6:72:76:2b:05:74:4d:60:83:49:26:a0:90:ce:51:
                    ee:23:9d:05:66:b2:31:e1:1f:ec:c3:5d:c6:fc:d9:
                    fc:68:de:91:64:07:15:a5:5f:bb:13:e8:40:ca:eb:
                    53:94:b9:05:26:69:ff:79:d3:0c:e8:7d:02:5d:6b:
                    92:3b:0f:32:88:ac:e1:40:72:c5:75:9d:12:ae:1c:
                    ca:d1:64:1e:2e:91:06:60:66:c9:ea:f1:95:46:0f:
                    0b:da:52:44:d7:9d:c0:be:09:e8:df:df:f4:71:20:
                    36:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:00:1E:CE:7E:4F:B8:EF:29:99:ED:D3:10:0F:A6:A9:4B:9F:E0:D4
            X509v3 Authority Key Identifier:
                keyid:4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/77ead86dc18f155aa50c068d59cf7962e98717b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5d6739fb330fec46825943b9c33eaee7782d7827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.172.0/22
                IPv6:
                  2803:ac80::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:93:d6:61:d0:60:cf:da:cd:a6:4f:76:2e:3e:78:15:37:b7:
         6d:9c:70:8d:b7:d1:be:fc:1b:c9:db:06:5b:a1:6f:86:de:c3:
         ac:5b:25:d3:4f:c0:4c:dc:f8:44:f9:7d:99:ce:5c:eb:57:1f:
         ba:6e:de:11:c2:c7:9f:84:dc:8a:de:db:ff:74:7f:6c:9f:05:
         8a:f5:ba:5d:e4:35:40:41:ef:27:6d:dc:95:c1:65:ce:72:be:
         0c:91:19:ce:a5:01:f5:be:1c:d7:ef:53:04:40:20:c3:e9:25:
         07:89:5a:eb:cf:48:61:36:ed:cb:0a:4c:c8:52:98:4b:7d:31:
         a9:82:7a:26:05:8d:87:c1:1d:87:11:39:8c:2f:8e:e9:1c:d5:
         73:25:7a:a5:af:63:dc:72:4c:95:cc:0e:a8:14:8c:16:4e:c5:
         ce:13:7d:c8:2f:03:b9:44:d2:6e:ac:3a:a2:13:10:7c:d2:b7:
         e0:bf:ad:45:ea:11:5b:3f:de:75:96:db:aa:71:3b:f0:38:20:
         35:fe:a8:89:e7:59:07:d9:f8:22:31:e9:9e:e4:2b:2c:8d:48:
         03:ef:d1:37:e2:0d:f0:86:b7:ef:4d:42:c4:f7:45:b3:6d:48:
         35:a9:cc:6e:f9:c9:e4:82:a3:84:42:f4:03:d9:e6:0e:d1:38:
         53:6b:50:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----