Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/e78db325f21c282d8885fbcffa1e9ba7a800c699.roa
File:                     e78db325f21c282d8885fbcffa1e9ba7a800c699.roa (raw, json)
Hash identifier:          C0dhFdgOPSCw17ksFOC48Am7k95w2mbcAsuN8deNA8k=
Subject key identifier:   54:90:01:92:D8:F5:96:3D:72:A6:D4:98:72:1A:93:43:7E:ED:FB:BF
Certificate issuer:       /CN=5d6739fb330fec46825943b9c33eaee7782d7827
Certificate serial:       21FF4F
Authority key identifier: 4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/e78db325f21c282d8885fbcffa1e9ba7a800c699.roa
Signing time:             Tue 27 Jun 2023 16:47:05 +0000
ROA not before:           Mon 26 Jun 2023 16:47:05 +0000
ROA not after:            Fri 27 Jun 2025 16:47:05 +0000
asID:                     263195
IP address blocks:        179.42.172.0/22 maxlen: 24
                          2803:ac80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2228047 (0x21ff4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d6739fb330fec46825943b9c33eaee7782d7827
        Validity
            Not Before: Jun 26 16:47:05 2023 GMT
            Not After : Jun 27 16:47:05 2025 GMT
        Subject: CN=e78db325f21c282d8885fbcffa1e9ba7a800c699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:df:69:80:4a:b3:4d:4b:31:a4:9e:18:05:e1:
                    f6:d2:56:3b:a2:ac:77:62:3d:bc:5a:97:17:15:d7:
                    e8:99:00:e7:49:3e:b4:5e:d6:e0:ce:1a:18:9a:52:
                    81:1e:0e:61:37:4b:44:eb:ba:2d:25:b2:2b:9c:d2:
                    d5:3b:d0:5f:de:f6:33:7d:ac:40:ed:e5:21:95:98:
                    b2:c4:49:ce:cb:64:b4:95:ea:38:75:58:38:64:88:
                    4a:36:6c:d5:d7:4a:50:fb:a4:51:b0:55:e8:e8:dd:
                    4f:01:8e:95:71:9f:4a:35:0a:ce:72:96:f6:8b:4c:
                    a7:a5:2f:2c:21:a7:9f:73:a7:83:04:49:88:ce:0b:
                    48:e3:d0:7c:1c:42:f7:47:26:24:0e:1c:b4:e1:0d:
                    f8:37:93:6d:55:56:20:6b:c5:88:46:ab:a7:52:cb:
                    7d:ce:37:ff:86:05:05:90:d2:e3:7e:30:a8:3c:fc:
                    32:fc:c6:59:07:2e:be:68:04:94:14:43:e8:77:f9:
                    65:84:20:ad:33:44:ca:e7:38:ff:0e:0c:8f:84:c2:
                    5a:2f:22:ea:3c:2b:3c:7c:4c:93:2b:b2:93:a5:06:
                    cb:ed:ac:e1:4c:ee:32:44:65:30:01:b3:6c:43:4e:
                    2c:e0:15:7b:81:ae:30:e9:26:66:60:6c:0d:54:02:
                    3f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:90:01:92:D8:F5:96:3D:72:A6:D4:98:72:1A:93:43:7E:ED:FB:BF
            X509v3 Authority Key Identifier:
                keyid:4B:02:C6:39:A5:76:D4:A0:43:40:5D:E7:8D:AA:61:84:06:69:2F:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d6739fb330fec46825943b9c33eaee7782d7827.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/e78db325f21c282d8885fbcffa1e9ba7a800c699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5e386385-22c9-44ed-8205-5c29a69500a6/5d6739fb330fec46825943b9c33eaee7782d7827.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.172.0/22
                IPv6:
                  2803:ac80::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:a6:0d:26:a4:fc:8e:85:ac:d9:28:fd:dc:ea:85:2c:dd:94:
         06:ba:4f:47:54:cd:d7:3c:ed:13:3e:43:7c:78:e3:c9:20:24:
         d9:7c:2c:82:8a:f1:33:3a:10:75:53:ea:51:4a:c3:7f:a5:9a:
         c7:00:d7:d3:c8:50:55:d4:a8:3f:ac:57:cd:48:48:f5:c0:41:
         b7:b8:33:93:f4:dd:97:35:38:87:69:1b:fc:3a:f7:30:de:05:
         91:88:d4:f8:08:f0:cc:49:56:11:80:a4:da:55:68:84:bd:98:
         eb:78:fc:a0:04:a0:0f:96:1f:52:ed:ca:c9:5d:48:8b:99:d7:
         7b:c7:1b:63:0c:ed:d3:a8:f4:ca:64:14:ee:31:a0:40:f8:6c:
         06:1d:06:22:d4:28:8a:41:c6:8c:bb:5b:e6:f6:6c:31:27:5b:
         dc:10:fe:85:67:2d:37:ba:68:43:f1:75:28:57:c5:4c:9f:c7:
         a9:d3:30:2b:a6:30:bc:dc:c5:19:e1:62:31:19:57:75:7d:a9:
         72:09:bb:38:96:44:f6:dd:21:8b:44:6e:f5:7f:0c:12:f5:dd:
         e6:2a:7f:4d:dc:1f:b1:05:bd:07:65:0b:bb:4d:e5:20:b5:9d:
         f2:57:0a:bb:c8:d6:53:63:a7:fb:8a:15:0e:b8:f0:1d:58:b8:
         a9:15:ac:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----