Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/d4fb23d1df728dbac80bd2adb7b4e69dc0d3ba4f.roa
File:                     d4fb23d1df728dbac80bd2adb7b4e69dc0d3ba4f.roa (raw, json)
Hash identifier:          KAd2tImnskGdJxGQh5T8haGxH5l4I3HY1lMfkjNc+C4=
Subject key identifier:   26:F9:09:35:07:A6:E6:18:1E:9C:D4:9F:D6:2C:DF:71:D4:B3:AB:95
Certificate issuer:       /CN=79aa997c3add235597a12ab7bfcd7908569d5f30
Certificate serial:       0D4D7B
Authority key identifier: 79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/d4fb23d1df728dbac80bd2adb7b4e69dc0d3ba4f.roa
Signing time:             Wed 24 Mar 2021 14:34:08 +0000
ROA not before:           Wed 24 Mar 2021 14:34:07 +0000
ROA not after:            Tue 24 Mar 2026 14:34:07 +0000
asID:                     27901
IP address blocks:        179.60.64.0/19 maxlen: 19
                          190.5.32.0/19 maxlen: 19
                          190.102.224.0/20 maxlen: 20
                          190.102.240.0/20 maxlen: 20
                          190.110.160.0/20 maxlen: 20
                          190.114.32.0/19 maxlen: 19
                          200.73.120.0/21 maxlen: 21
                          2803:c600::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871803 (0xd4d7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79aa997c3add235597a12ab7bfcd7908569d5f30
        Validity
            Not Before: Mar 24 14:34:07 2021 GMT
            Not After : Mar 24 14:34:07 2026 GMT
        Subject: CN=d4fb23d1df728dbac80bd2adb7b4e69dc0d3ba4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:e2:bd:1c:f7:8c:45:c9:1b:19:df:9b:39:
                    a7:e2:f3:cb:5f:2f:8e:f9:30:dd:21:2d:59:6d:f4:
                    8a:a4:ab:13:c8:92:12:45:54:cc:c0:6a:fa:b6:2f:
                    ae:f7:c0:1c:df:b1:d6:3d:ff:bd:3f:67:76:23:df:
                    5d:1d:da:24:63:7f:b9:19:1e:89:48:9d:53:6f:a2:
                    9e:92:e5:9d:68:c2:72:7a:ae:d0:3d:2a:03:e0:39:
                    4c:c1:b1:86:a1:df:af:58:0c:c8:fc:fd:5c:d8:5f:
                    3c:3b:7e:65:18:fd:d3:3b:c7:1d:ad:4a:12:ed:24:
                    75:e3:a8:f8:02:d6:e5:8a:8c:be:28:71:ea:cb:35:
                    d9:ff:01:b8:1e:30:0a:57:cb:95:32:a0:5b:70:c1:
                    75:78:dd:11:10:2a:04:84:22:b4:6d:9a:30:58:3b:
                    85:6a:38:cc:bb:7e:61:39:59:48:03:84:06:2e:2c:
                    27:55:93:f5:56:aa:04:d8:de:9d:99:83:dc:e9:ad:
                    93:d4:24:2f:20:70:6f:c7:30:44:9f:c4:4e:64:60:
                    56:4b:e9:79:e7:36:12:34:fa:be:50:8d:16:e1:49:
                    84:30:60:b9:bd:24:55:21:5d:9d:ea:23:82:c3:71:
                    b4:65:15:9a:80:5c:57:f3:c2:4f:01:32:22:ab:24:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F9:09:35:07:A6:E6:18:1E:9C:D4:9F:D6:2C:DF:71:D4:B3:AB:95
            X509v3 Authority Key Identifier:
                keyid:79:57:67:3E:6A:82:19:69:11:89:9E:C0:97:BB:FF:E6:51:A1:02:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79aa997c3add235597a12ab7bfcd7908569d5f30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/d4fb23d1df728dbac80bd2adb7b4e69dc0d3ba4f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7d48c231-5123-4237-96c2-e2e3b41b58aa/79aa997c3add235597a12ab7bfcd7908569d5f30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.64.0/19
                  190.5.32.0/19
                  190.102.224.0/19
                  190.110.160.0/20
                  190.114.32.0/19
                  200.73.120.0/21
                IPv6:
                  2803:c600::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:20:cf:11:b7:76:dd:85:de:d2:83:a0:c6:04:79:f6:e3:d7:
         fa:6c:2a:76:34:2c:34:92:0a:50:a5:85:07:d7:b2:23:70:17:
         46:1f:b3:b7:fd:0c:be:02:20:5b:20:80:12:29:78:7c:9c:95:
         22:5a:68:74:ba:fc:8f:cf:cc:6f:a0:99:38:29:24:e3:28:e7:
         9c:c6:ce:6a:23:ec:de:f3:a8:7e:e8:fa:60:e6:40:84:e5:9a:
         fe:96:76:40:83:9f:13:18:f1:b0:f4:29:0a:70:8b:92:d7:60:
         37:22:32:9d:4f:0c:49:01:2b:a6:b2:f9:34:d8:a9:f6:e4:d3:
         29:4a:37:31:41:fc:97:3f:27:6c:23:c1:e3:64:68:f0:8b:ab:
         40:b6:ed:75:4c:7b:ee:26:53:cd:2f:b5:0f:ed:a0:4e:a3:d7:
         5d:77:00:5b:a9:f4:3d:d6:09:9c:d3:50:02:d6:01:f7:e7:5b:
         0e:21:8e:bd:a6:e4:5d:0e:8b:13:d3:9b:c4:01:0e:bb:77:7e:
         c9:49:a7:98:b5:d6:17:2a:be:11:2a:a5:73:21:8b:9e:81:a5:
         a4:a9:ef:a7:40:2c:93:b1:d8:19:54:ac:ec:91:1a:73:de:55:
         e2:e7:43:de:ff:ea:cf:5a:d7:e0:47:ae:80:b7:ac:7c:46:81:
         14:5d:b5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----