Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/82cd28b0-e8d2-4807-96bc-c195baa5a4e0/c47ff8598451ad9df8fcdd02298c3a789ca6a07c.roa
File:                     c47ff8598451ad9df8fcdd02298c3a789ca6a07c.roa (raw, json)
Hash identifier:          FLDNy5PCfcj9dANCXYE1v9oSJa5tI+50S5PiWSJFo90=
Subject key identifier:   34:8E:BB:80:63:B6:B4:9F:E8:20:43:E4:15:4C:29:8C:A9:F5:FE:2F
Certificate issuer:       /CN=c7a7fe124be23600f4dc050bfc4848190cf90309
Certificate serial:       04756C
Authority key identifier: 9E:6C:90:04:24:B4:D8:2C:E7:BE:7D:7D:98:EA:20:0B:EB:44:48:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7a7fe124be23600f4dc050bfc4848190cf90309.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/82cd28b0-e8d2-4807-96bc-c195baa5a4e0/c47ff8598451ad9df8fcdd02298c3a789ca6a07c.roa
Signing time:             Wed 16 Aug 2023 17:23:01 +0000
ROA not before:           Tue 15 Aug 2023 17:23:01 +0000
ROA not after:            Sat 16 Aug 2025 17:23:01 +0000
asID:                     262589
IP address blocks:        179.63.188.0/24 maxlen: 24
                          2803:ae90:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292204 (0x4756c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a7fe124be23600f4dc050bfc4848190cf90309
        Validity
            Not Before: Aug 15 17:23:01 2023 GMT
            Not After : Aug 16 17:23:01 2025 GMT
        Subject: CN=c47ff8598451ad9df8fcdd02298c3a789ca6a07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:df:5b:df:2a:18:c7:df:c6:18:2d:0a:ff:fa:
                    e1:68:1a:74:5b:3e:71:9e:29:54:c7:c2:76:48:bc:
                    ea:7b:7b:0a:e4:f1:bc:6c:b5:35:cd:f0:34:52:c7:
                    18:f2:38:54:81:e4:83:89:18:c7:9a:90:c7:6a:a5:
                    45:c5:55:1f:4b:b4:05:0d:76:a5:f9:dd:80:c9:d5:
                    cc:0e:5f:7a:89:c2:fe:87:54:87:c7:c9:45:5e:8b:
                    84:ea:f5:52:3b:0d:7f:19:40:21:85:41:e4:09:c9:
                    09:f4:3d:bc:25:36:6d:80:d4:07:bb:9e:2e:7b:98:
                    29:97:bd:5c:a9:85:f9:0a:a6:47:b5:8b:04:1e:66:
                    7e:3c:1b:78:66:c4:b4:cc:ef:d9:67:a6:a9:4e:1e:
                    81:ee:e7:40:f3:1a:43:09:5a:a5:7c:0f:1b:bc:21:
                    a9:3d:22:60:45:5a:3d:ed:81:5d:ad:11:cb:80:ef:
                    83:20:53:50:90:74:c1:ce:50:4d:28:86:35:47:fe:
                    1f:78:18:e6:03:0d:96:60:4e:3f:dd:f9:91:18:52:
                    3f:a3:cd:36:84:56:03:ac:a4:ba:3d:4e:80:e4:60:
                    4c:af:65:0b:03:ef:ce:f8:06:af:5b:d4:8c:25:71:
                    db:c2:88:42:8f:03:7f:d3:f2:da:2e:10:78:19:3d:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8E:BB:80:63:B6:B4:9F:E8:20:43:E4:15:4C:29:8C:A9:F5:FE:2F
            X509v3 Authority Key Identifier:
                keyid:9E:6C:90:04:24:B4:D8:2C:E7:BE:7D:7D:98:EA:20:0B:EB:44:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7a7fe124be23600f4dc050bfc4848190cf90309.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/82cd28b0-e8d2-4807-96bc-c195baa5a4e0/c47ff8598451ad9df8fcdd02298c3a789ca6a07c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/82cd28b0-e8d2-4807-96bc-c195baa5a4e0/c7a7fe124be23600f4dc050bfc4848190cf90309.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.188.0/24
                IPv6:
                  2803:ae90:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:87:97:06:43:b0:83:84:b4:92:0b:d4:43:48:7c:d5:7f:ab:
         a5:b7:9e:2a:ad:00:0e:5e:e2:a6:d9:df:a7:5f:a0:42:d1:ca:
         be:f7:11:7a:cb:64:ae:8d:61:80:fe:33:a6:0e:4f:74:fa:b8:
         51:49:7d:a9:f9:55:bd:1e:10:15:c5:0a:b5:0c:ad:f6:29:98:
         08:99:ce:16:67:13:21:a6:fb:49:fc:8f:0f:41:bf:d8:81:28:
         67:d2:8e:d8:4b:ac:20:13:d6:ce:46:9c:f9:e0:c4:2c:55:d6:
         08:32:0c:b4:4e:c4:d6:e2:fe:52:76:73:b7:cd:be:68:8b:91:
         94:30:3a:13:4a:f6:3d:0e:a2:47:c3:b1:e0:16:bc:8b:c2:c1:
         69:f0:4a:96:df:23:42:07:f6:74:5e:64:18:42:f1:cd:67:19:
         ad:0f:6b:b8:6e:03:a4:7b:3b:23:5b:41:2d:8f:31:6b:48:28:
         af:e6:8e:c7:a5:9e:b5:a4:09:f2:ac:78:f0:12:c5:e0:25:6b:
         d2:ce:96:11:9e:30:ec:be:6a:51:55:e3:11:e5:93:0f:a8:37:
         68:52:1b:b3:07:84:cb:4c:46:c3:6b:95:77:59:aa:26:c7:a1:
         8d:b3:c0:8c:b2:15:42:d2:31:80:7e:5a:f5:76:1f:a1:59:4c:
         6d:7a:7e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----