Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/bcf0dd462b21adfd1f01142f2e53f09f40750d7b.roa
File:                     bcf0dd462b21adfd1f01142f2e53f09f40750d7b.roa (raw, json)
Hash identifier:          LqrsSq1Ibnjzzq29dBIujr4bgNnKwXZo49xdOUVTSW8=
Subject key identifier:   62:55:8D:57:78:9F:06:82:41:15:20:5D:D9:8D:87:C7:9F:93:C5:7D
Certificate issuer:       /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial:       0D4CB1
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/bcf0dd462b21adfd1f01142f2e53f09f40750d7b.roa
Signing time:             Wed 24 Mar 2021 14:34:08 +0000
ROA not before:           Wed 24 Mar 2021 14:34:07 +0000
ROA not after:            Tue 24 Mar 2026 14:34:07 +0000
asID:                     27901
IP address blocks:        179.60.64.0/19 maxlen: 19
                          190.5.32.0/19 maxlen: 19
                          190.102.224.0/20 maxlen: 20
                          190.102.240.0/20 maxlen: 20
                          190.110.160.0/20 maxlen: 20
                          190.114.32.0/19 maxlen: 19
                          200.73.120.0/21 maxlen: 21
                          2803:c600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871601 (0xd4cb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
        Validity
            Not Before: Mar 24 14:34:07 2021 GMT
            Not After : Mar 24 14:34:07 2026 GMT
        Subject: CN=bcf0dd462b21adfd1f01142f2e53f09f40750d7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:80:51:9c:80:37:f1:90:e3:af:de:15:9c:8e:
                    33:e8:a9:2f:28:d0:36:4e:e2:f4:26:32:10:31:7a:
                    c1:e9:56:09:bc:5b:c1:0e:12:37:31:55:be:8f:cc:
                    4a:97:22:6e:b6:6a:36:5b:53:d1:6f:f6:84:8d:37:
                    84:d0:fd:17:74:28:83:dc:fa:8c:1f:07:f8:5b:14:
                    e2:a2:d2:79:8e:8f:27:3e:40:d8:8a:50:f9:b5:63:
                    93:f2:0f:be:49:ec:6c:ee:48:ec:09:ec:3d:d2:76:
                    4c:c8:31:dc:50:69:a9:8f:58:91:53:3f:2a:fb:c2:
                    6f:a2:7e:46:8c:47:8d:da:b4:14:2a:57:db:1f:51:
                    95:ea:f7:09:bd:6d:32:75:e1:3d:42:38:1b:3c:4f:
                    c1:12:9d:52:eb:29:00:72:77:fd:bc:7d:71:fe:e1:
                    32:bc:5b:de:84:9b:67:6f:12:ba:ee:06:e6:de:e6:
                    5d:8a:1c:fe:bd:ad:36:9e:ee:54:96:67:85:ca:57:
                    ea:5b:ce:3f:50:59:72:13:9d:4a:65:bd:6c:63:f2:
                    72:d0:86:cb:f9:75:95:ef:23:92:8c:1e:89:26:cf:
                    4a:2c:d8:ac:98:e2:e0:4b:3a:e0:ea:ac:58:05:23:
                    b6:2b:e5:77:ff:f8:b5:70:49:aa:c9:b2:92:0b:7a:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:55:8D:57:78:9F:06:82:41:15:20:5D:D9:8D:87:C7:9F:93:C5:7D
            X509v3 Authority Key Identifier:
                keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/bcf0dd462b21adfd1f01142f2e53f09f40750d7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.64.0/19
                  190.5.32.0/19
                  190.102.224.0/19
                  190.110.160.0/20
                  190.114.32.0/19
                  200.73.120.0/21
                IPv6:
                  2803:c600::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:bd:7e:8a:2b:48:66:80:be:12:f3:61:e3:f6:8e:14:a3:d2:
         b3:2f:69:e5:b2:5c:53:27:b5:08:8d:d0:a0:bb:dc:a6:26:cb:
         ea:9e:52:82:3d:22:a3:6c:b1:10:c0:c2:6a:56:22:44:45:bd:
         8d:11:74:1e:2e:98:83:ef:da:5b:f4:cd:c3:9a:9e:0f:84:a5:
         32:1e:a4:45:66:c1:42:66:f1:1c:b6:fb:73:1c:9b:ab:13:f5:
         9f:e7:90:aa:f2:91:ad:d2:7c:fd:10:b8:bf:25:8b:13:df:b5:
         df:26:36:97:f2:b1:c6:da:e7:fb:c5:6e:37:00:9c:f6:1e:42:
         e8:d0:24:db:8d:b2:02:4f:71:6b:02:5f:f2:d5:06:13:80:36:
         bf:f5:f9:da:ec:ab:40:f6:99:6c:e4:4a:f4:c1:ad:be:56:fe:
         17:20:32:ba:9e:e8:e3:79:d2:81:74:26:70:54:47:59:e9:bd:
         8e:a8:c9:21:41:00:64:5b:6c:bc:c7:8f:63:2d:cd:00:6e:8a:
         8d:6f:d0:1a:9e:0f:0a:6c:58:40:29:d8:55:61:58:0e:db:6e:
         35:cb:15:97:0a:b7:a5:f4:78:44:8d:c6:ea:c5:39:25:c2:c2:
         88:62:00:1b:1f:8a:9b:8e:dc:04:42:db:17:df:6b:27:28:76:
         aa:74:cc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----