Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/04f18bbfce7cdbc7fc8c5cd092676079e2de9506.roa
File:                     04f18bbfce7cdbc7fc8c5cd092676079e2de9506.roa (raw, json)
Hash identifier:          Q1fVCHUaX4AvJkCfuIE3sadCwbjzcgpNUAvB6WG+OfA=
Subject key identifier:   DA:B1:5E:6A:6E:8D:C8:BD:FF:40:8C:19:29:8D:C6:60:24:36:E6:0F
Certificate issuer:       /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial:       0D4497
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/04f18bbfce7cdbc7fc8c5cd092676079e2de9506.roa
Signing time:             Wed 24 Mar 2021 14:34:08 +0000
ROA not before:           Wed 24 Mar 2021 14:34:07 +0000
ROA not after:            Tue 24 Mar 2026 14:34:07 +0000
asID:                     27901
IP address blocks:        179.60.64.0/19 maxlen: 19
                          190.5.32.0/19 maxlen: 19
                          190.102.224.0/20 maxlen: 20
                          190.102.240.0/20 maxlen: 20
                          190.110.160.0/20 maxlen: 20
                          190.114.32.0/19 maxlen: 19
                          200.73.120.0/21 maxlen: 21
                          2803:c600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 869527 (0xd4497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
        Validity
            Not Before: Mar 24 14:34:07 2021 GMT
            Not After : Mar 24 14:34:07 2026 GMT
        Subject: CN=04f18bbfce7cdbc7fc8c5cd092676079e2de9506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:7f:d4:24:35:0f:1c:4d:08:d0:41:20:87:
                    a5:e1:ff:0a:9b:85:a2:c1:eb:09:a8:79:d8:96:a2:
                    03:75:5d:af:89:c5:1f:f5:4c:c0:4a:9c:3f:6c:a3:
                    87:9d:fe:a0:b2:b0:fd:b5:44:48:f4:cc:5b:40:e5:
                    38:4a:42:09:85:86:21:2c:24:27:d1:7f:b1:27:1d:
                    92:0e:72:79:fd:e4:09:84:39:1e:7b:f4:88:02:75:
                    54:8b:0c:d6:8c:99:5b:0a:93:ec:3f:72:03:d6:a4:
                    bb:a9:84:28:e4:f3:2f:ff:e2:84:46:a6:32:40:93:
                    75:a7:09:8e:e6:bf:a1:53:0b:ac:e3:91:d3:c4:67:
                    fe:f0:c6:36:b2:fa:c4:4c:5e:05:66:92:44:23:4f:
                    5c:4c:4d:70:5d:c9:da:51:44:a3:14:4c:11:3c:68:
                    78:6e:3c:e6:ab:58:f0:af:60:01:fa:45:50:5e:99:
                    a3:6d:1c:62:68:c3:ca:b0:06:66:46:9f:de:9f:06:
                    2e:65:8a:ac:f6:a7:6e:24:aa:cc:dd:67:8f:ae:a8:
                    45:e8:c9:19:eb:0b:97:0b:5b:5f:5c:92:30:b7:df:
                    10:9c:8d:46:21:79:13:d9:f7:ac:d9:47:c6:7c:5d:
                    cb:09:1c:07:aa:37:fc:6f:96:a3:fd:3a:c8:83:1f:
                    b0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B1:5E:6A:6E:8D:C8:BD:FF:40:8C:19:29:8D:C6:60:24:36:E6:0F
            X509v3 Authority Key Identifier:
                keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/04f18bbfce7cdbc7fc8c5cd092676079e2de9506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.64.0/19
                  190.5.32.0/19
                  190.102.224.0/19
                  190.110.160.0/20
                  190.114.32.0/19
                  200.73.120.0/21
                IPv6:
                  2803:c600::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:c5:c7:5b:d9:be:8e:09:96:f9:f1:8c:7e:a4:0c:77:ad:5d:
         8c:bc:f8:db:19:ba:f7:44:66:09:04:40:8e:b8:95:10:35:dd:
         d5:68:04:c5:48:2c:45:9f:96:3c:31:89:15:d3:64:b6:49:b6:
         20:0b:14:4e:05:25:93:77:de:39:83:b3:20:94:15:8e:93:61:
         1c:d2:88:ed:de:d2:28:14:73:82:d3:96:e2:5d:60:2f:a8:68:
         4a:3e:b0:b8:6c:fe:1a:6b:23:f8:ee:26:fd:e7:ab:65:4e:b5:
         9f:a0:9b:07:e7:ce:db:83:54:f3:1c:37:29:a8:a0:64:da:ea:
         45:37:f3:52:ae:ff:25:77:e1:b2:06:ad:4b:f1:4b:bb:76:3f:
         1d:5d:15:d1:70:09:f0:d3:63:21:a5:e7:3d:ae:07:a7:ef:e9:
         48:ea:73:bb:84:ea:26:b3:5a:76:e8:d1:a8:7a:ed:4e:dc:e0:
         fc:c7:34:98:db:29:b4:85:47:e9:7c:b8:19:97:7d:d6:3f:e4:
         ac:5b:3e:45:26:b9:04:7a:49:92:de:59:f4:fe:4a:16:85:2c:
         48:93:a1:21:20:65:c8:28:f7:fd:1f:70:f6:50:b9:83:00:9f:
         00:85:d1:5a:da:1f:08:46:34:29:a0:84:a9:11:e8:a7:9a:21:
         78:94:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----