Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/b39576efe1776ada0964ac150a440c2924ebba30.roa
File:                     b39576efe1776ada0964ac150a440c2924ebba30.roa (raw, json)
Hash identifier:          yTzosxsTgfgqGjo58juJxMotCrl191juByGBMGSJN6w=
Subject key identifier:   29:59:4D:EB:17:87:D5:C8:77:96:CB:FE:0E:45:51:A7:3C:B9:F9:87
Certificate issuer:       /CN=5d6739fb330fec46825943b9c33eaee7782d7827
Certificate serial:       1AF2ED
Authority key identifier: 4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/b39576efe1776ada0964ac150a440c2924ebba30.roa
Signing time:             Mon 03 Oct 2022 16:56:18 +0000
ROA not before:           Thu 16 Sep 2021 03:00:00 +0000
ROA not after:            Sat 16 Sep 2023 03:00:00 +0000
asID:                     27951
IP address blocks:        179.42.172.0/22 maxlen: 22
                          2803:ac80::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1766125 (0x1af2ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6739fb330fec46825943b9c33eaee7782d7827
        Validity
            Not Before: Sep 16 03:00:00 2021 GMT
            Not After : Sep 16 03:00:00 2023 GMT
        Subject: CN=b39576efe1776ada0964ac150a440c2924ebba30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:81:ac:28:aa:b8:fe:1f:97:4c:ca:79:6f:fd:
                    0a:cb:de:a5:74:79:07:45:0b:96:24:6e:18:47:21:
                    b2:e8:d7:90:b4:b0:c8:1f:e3:09:03:18:2e:fc:21:
                    20:b7:da:3b:6e:37:bb:58:69:a4:55:d0:bb:3c:6d:
                    5d:91:ee:63:89:d1:2b:cd:af:c2:00:9a:be:22:9e:
                    b6:67:90:a7:90:1e:fe:2f:2a:37:79:1b:97:fa:97:
                    7a:6c:02:5d:b6:fa:d9:34:5a:a7:f1:71:8f:83:66:
                    27:b3:56:68:ca:95:67:70:df:77:89:b1:11:8a:64:
                    ef:56:3d:80:ba:49:ce:01:c6:db:29:29:e0:e0:e2:
                    92:e6:b2:76:59:fb:1d:b9:8a:b9:18:8c:c8:00:9f:
                    1c:d6:f8:41:9a:4d:02:fb:eb:e2:90:dd:38:ab:80:
                    4b:84:23:eb:32:96:9f:91:d6:ea:b9:f6:69:98:4e:
                    fb:dc:de:20:78:7f:ea:e3:66:00:bd:a8:fe:c3:a2:
                    df:e4:f5:c3:c6:c2:50:db:a2:28:c0:ac:44:d0:83:
                    56:fd:5c:8b:a8:16:53:dd:02:e5:ff:a2:30:85:ee:
                    4f:7e:c0:af:2a:96:fb:47:bb:36:84:dd:2e:23:7c:
                    a4:a0:60:20:52:46:32:57:6c:68:d3:dc:af:d5:cb:
                    39:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:59:4D:EB:17:87:D5:C8:77:96:CB:FE:0E:45:51:A7:3C:B9:F9:87
            X509v3 Authority Key Identifier:
                keyid:4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/b39576efe1776ada0964ac150a440c2924ebba30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5d6739fb330fec46825943b9c33eaee7782d7827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.172.0/22
                IPv6:
                  2803:ac80::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:d9:79:3c:3a:e9:b5:f3:a0:8f:05:12:f5:fc:b9:ee:f9:ff:
         17:c5:ed:8b:6a:75:53:30:e8:c3:0e:98:26:c8:b4:9a:b1:5e:
         5a:e2:cb:2d:25:e5:9e:0c:d1:67:3d:af:3a:01:24:98:0e:85:
         c1:14:1a:66:ea:2d:53:90:ee:0b:14:47:cb:9f:dd:a7:a7:55:
         54:31:7d:60:a0:9c:25:e5:99:c1:2c:7f:32:22:c0:57:a1:09:
         3c:8a:6b:7f:7b:b5:18:55:d8:a7:e2:b3:fb:ea:e4:44:a8:24:
         1e:f3:a4:fc:c4:5d:20:f4:86:45:46:19:88:74:81:3c:43:9b:
         c3:cd:80:d6:31:b2:08:a7:90:a7:6b:22:17:3d:63:07:35:46:
         51:75:5a:69:cc:95:2d:f0:50:c8:ec:6f:47:a1:61:19:2c:7d:
         fc:1d:49:4e:dc:a8:9a:fa:bb:70:20:b1:db:5a:d5:22:38:dd:
         28:f8:6b:ae:3b:b4:79:4c:9b:64:7f:84:38:7a:cf:64:5e:00:
         d5:06:cf:7e:29:d7:f1:e5:86:d4:2b:58:cf:69:e4:84:be:d3:
         fd:60:4a:5f:bd:14:4e:dd:fa:a1:7f:bc:a9:2e:3d:9a:33:76:
         64:45:fa:2d:a3:ee:98:26:83:f2:47:df:ca:48:b0:d6:44:18:
         1f:ac:4c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----