Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6722e58c-2795-4405-a363-f2b9680c5bfa/528c9d0b6e420f7fcf4ea3578e5e8151f6f89bcb.roa
File:                     528c9d0b6e420f7fcf4ea3578e5e8151f6f89bcb.roa (raw, json)
Hash identifier:          aRHKISr1Re1aLBh8/YoG5DwySww5TP2m0WbfWbyxgxQ=
Subject key identifier:   12:19:3A:4C:44:C8:1F:1F:0A:3B:80:08:D8:22:6F:44:3E:3C:EB:8A
Certificate issuer:       /CN=e13cfa3a6843d3fdafb53e35b08289855a9db126
Certificate serial:       1D48A5
Authority key identifier: 8E:23:CF:0A:04:A0:D4:70:37:97:9F:1F:19:4B:E0:DD:8A:8A:65:AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e13cfa3a6843d3fdafb53e35b08289855a9db126.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6722e58c-2795-4405-a363-f2b9680c5bfa/528c9d0b6e420f7fcf4ea3578e5e8151f6f89bcb.roa
Signing time:             Wed 29 Nov 2023 20:38:46 +0000
ROA not before:           Wed 29 Nov 2023 20:38:45 +0000
ROA not after:            Sat 29 Nov 2025 20:38:45 +0000
asID:                     263792
IP address blocks:        179.51.140.0/22 maxlen: 24
                          2803:7e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1919141 (0x1d48a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e13cfa3a6843d3fdafb53e35b08289855a9db126
        Validity
            Not Before: Nov 29 20:38:45 2023 GMT
            Not After : Nov 29 20:38:45 2025 GMT
        Subject: CN=528c9d0b6e420f7fcf4ea3578e5e8151f6f89bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:6e:53:a4:92:c5:ab:e0:82:a6:7b:89:4b:c9:
                    7a:a3:40:dd:7b:9b:1b:96:53:af:bc:f8:e8:ae:cd:
                    a9:fa:79:c1:3d:33:0b:59:bb:c3:dd:30:e5:8c:7d:
                    c8:47:17:7c:7b:e7:a5:84:f6:85:92:42:eb:79:e4:
                    24:bd:dc:14:69:38:b1:5a:d3:b9:e5:cb:ed:51:ad:
                    84:a8:a5:7b:95:cd:1e:6d:ce:16:e8:79:cc:e0:d0:
                    c2:a5:88:c3:cd:a2:22:d0:02:6a:6e:a3:0c:b6:5b:
                    2b:e7:54:85:c0:87:93:a9:45:fd:8a:87:8c:77:1c:
                    fe:74:b8:6a:03:02:39:e7:b5:ca:86:4d:27:90:9a:
                    af:ad:5d:1a:ec:00:f9:2f:f0:8c:5c:bc:78:12:90:
                    5f:0c:da:41:74:a5:df:60:81:f6:b5:7e:c7:f3:c9:
                    8e:24:5e:ea:c0:9b:b6:46:c4:ea:55:a8:9c:2b:89:
                    7d:f6:c2:0b:f2:16:9f:88:86:65:8f:a0:0f:f0:f0:
                    1d:1a:be:1c:1d:cc:de:17:94:46:0d:73:34:08:54:
                    be:15:09:77:2d:4a:49:d7:32:a2:7b:a6:cc:c5:a3:
                    38:97:f8:93:b3:27:b5:c2:56:d3:07:0f:6e:77:77:
                    77:af:5d:45:94:f9:71:1d:07:e3:84:68:73:37:81:
                    02:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:19:3A:4C:44:C8:1F:1F:0A:3B:80:08:D8:22:6F:44:3E:3C:EB:8A
            X509v3 Authority Key Identifier:
                keyid:8E:23:CF:0A:04:A0:D4:70:37:97:9F:1F:19:4B:E0:DD:8A:8A:65:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e13cfa3a6843d3fdafb53e35b08289855a9db126.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6722e58c-2795-4405-a363-f2b9680c5bfa/528c9d0b6e420f7fcf4ea3578e5e8151f6f89bcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6722e58c-2795-4405-a363-f2b9680c5bfa/e13cfa3a6843d3fdafb53e35b08289855a9db126.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.140.0/22
                IPv6:
                  2803:7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:92:6e:04:81:1b:ac:89:d8:6e:0d:5c:ad:ca:cb:dc:f8:82:
         ee:73:61:c6:74:03:01:88:bc:22:9e:c4:4d:a7:6e:0a:9e:bf:
         02:a5:71:0a:1b:77:9c:ff:dd:c5:44:8c:c3:f8:4e:ec:60:32:
         82:84:64:66:d3:2d:28:ce:93:5f:21:88:27:0b:6f:37:f1:4d:
         68:23:30:53:3e:31:60:3b:2d:e0:95:3f:eb:e5:a3:c2:d5:80:
         65:f1:e9:e6:93:c1:9e:f2:d0:72:6f:af:fa:b3:c5:07:45:60:
         48:4f:36:58:00:c2:af:a2:65:2f:72:ee:74:d1:7a:68:a6:62:
         8a:47:80:61:d4:7e:df:5a:4f:78:86:76:26:1e:69:23:8e:77:
         fc:f3:30:b6:65:12:23:6a:fd:f8:1f:04:5b:f4:ce:cc:69:ca:
         9a:70:49:2a:6f:77:65:bd:21:54:53:57:03:ea:84:bc:cb:55:
         00:8e:b4:cd:af:10:64:a2:2a:9e:d2:c2:8b:bb:4b:45:46:ed:
         5a:8c:99:a6:dc:35:dd:4d:b7:2c:2f:55:d5:a7:03:8f:a7:cb:
         c0:5d:a1:e4:8a:c7:48:4b:40:65:b2:89:ae:b2:11:c0:8e:1c:
         b9:63:c8:af:9a:32:92:fb:9d:13:8a:5b:1b:ef:a8:43:24:86:
         f9:e8:26:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----