Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a73917d3-7581-4880-a4fe-1222139e4167/079c6ae5dc9e10c0edfa4be58980cc1ad1801c57.roa
File:                     079c6ae5dc9e10c0edfa4be58980cc1ad1801c57.roa (raw, json)
Hash identifier:          e+ct3n/7rY9t1LKIIFDU8GuS+kRFbiPnX67IIYAsCY8=
Subject key identifier:   A2:D6:D4:4E:95:7C:89:16:8F:A5:2C:AE:A8:8F:1D:16:0D:5F:CA:2F
Certificate issuer:       /CN=c1d902de4502f1d62715799d87d20d2fe6b20d52
Certificate serial:       0D9F49
Authority key identifier: 5D:8A:17:7E:7B:71:01:03:1C:D2:0D:A5:C1:65:44:88:A4:D2:C1:78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1d902de4502f1d62715799d87d20d2fe6b20d52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a73917d3-7581-4880-a4fe-1222139e4167/079c6ae5dc9e10c0edfa4be58980cc1ad1801c57.roa
Signing time:             Sun 11 Apr 2021 18:56:28 +0000
ROA not before:           Sun 11 Apr 2021 03:00:00 +0000
ROA not after:            Tue 11 Apr 2023 03:00:00 +0000
asID:                     28458
IP address blocks:        138.122.96.0/22 maxlen: 22
                          138.122.96.0/24 maxlen: 24
                          138.122.97.0/24 maxlen: 24
                          138.122.98.0/24 maxlen: 24
                          138.122.99.0/24 maxlen: 24
                          170.239.148.0/22 maxlen: 22
                          170.239.148.0/24 maxlen: 24
                          170.239.149.0/24 maxlen: 24
                          170.239.150.0/24 maxlen: 24
                          170.239.151.0/24 maxlen: 24
                          2806:202::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892745 (0xd9f49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d902de4502f1d62715799d87d20d2fe6b20d52
        Validity
            Not Before: Apr 11 03:00:00 2021 GMT
            Not After : Apr 11 03:00:00 2023 GMT
        Subject: CN=079c6ae5dc9e10c0edfa4be58980cc1ad1801c57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:03:16:2a:3f:57:b1:53:e1:a8:0f:d5:60:90:
                    f8:7a:4f:a2:d2:b8:c0:5e:ac:4b:c0:c3:79:18:0d:
                    6f:c1:ee:06:17:83:fe:88:ab:71:61:86:b6:72:90:
                    8e:ca:89:bb:aa:f9:b6:8d:17:cb:ad:d2:2a:35:f2:
                    af:0d:08:25:0e:0d:df:8a:35:8a:dc:5f:ed:79:cc:
                    96:1a:9b:11:f1:9d:90:98:25:d9:91:b2:5f:66:73:
                    6c:5e:97:fb:14:66:32:c7:e0:b1:71:86:f3:77:d1:
                    3f:d0:38:36:c3:9a:25:75:a5:7e:ea:73:c3:34:f3:
                    3d:89:64:e2:24:44:b5:81:db:7c:1c:33:be:60:5f:
                    e6:1c:ad:83:34:58:a3:bb:e2:b9:92:d8:54:8c:da:
                    c6:7b:f1:4f:ed:da:cb:31:93:08:1f:b1:b9:80:39:
                    2f:15:8e:e7:bf:95:c2:97:da:1b:81:2b:b8:38:78:
                    24:01:f4:fc:a3:ad:ae:f3:4c:e1:2e:59:75:84:97:
                    6c:f1:7d:e3:25:bc:f4:a8:19:a7:6a:ed:d5:3c:f8:
                    73:8d:62:3a:1a:42:59:45:5e:15:55:31:6b:00:65:
                    b7:22:32:51:5f:91:ad:0f:b7:9c:3f:48:43:d3:1b:
                    93:c7:0c:ab:51:8c:d3:e2:38:d4:26:24:c3:37:b4:
                    75:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D6:D4:4E:95:7C:89:16:8F:A5:2C:AE:A8:8F:1D:16:0D:5F:CA:2F
            X509v3 Authority Key Identifier:
                keyid:5D:8A:17:7E:7B:71:01:03:1C:D2:0D:A5:C1:65:44:88:A4:D2:C1:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1d902de4502f1d62715799d87d20d2fe6b20d52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a73917d3-7581-4880-a4fe-1222139e4167/079c6ae5dc9e10c0edfa4be58980cc1ad1801c57.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a73917d3-7581-4880-a4fe-1222139e4167/c1d902de4502f1d62715799d87d20d2fe6b20d52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.96.0/22
                  170.239.148.0/22
                IPv6:
                  2806:202::/32

    Signature Algorithm: sha256WithRSAEncryption
         52:3a:07:1c:3f:28:d7:30:40:5a:97:41:15:42:1c:ec:88:7b:
         55:9a:bb:1f:ce:60:e2:cf:82:03:88:cd:07:4b:e5:ad:19:e7:
         ce:c6:e9:a2:3e:ac:3f:fd:bf:71:2e:10:0f:41:d6:f6:33:f4:
         4b:8b:cf:9c:e5:2a:fb:c4:89:5a:e5:43:7a:0b:46:a5:5b:a9:
         14:4e:a0:66:61:ed:1c:fc:aa:a3:58:58:b7:22:86:9e:da:05:
         94:0c:d3:85:e2:ef:6d:41:a1:9b:12:a5:64:e1:6e:0e:0d:60:
         d1:d3:18:9b:09:7d:db:88:b4:50:eb:54:75:a8:3e:90:c1:84:
         5e:cc:55:6e:9c:81:b8:02:4a:55:4e:80:5d:db:96:3c:3f:af:
         9f:c9:a6:be:64:c9:53:51:3f:80:52:6b:d4:a5:52:11:42:a0:
         3c:2b:85:a8:fb:ca:2a:b6:ab:3b:b2:3f:05:a5:5d:ee:64:2f:
         75:c9:d0:9f:e4:74:b8:5d:fa:22:cc:14:e5:0d:6a:da:34:d1:
         2f:37:1f:3a:a4:50:81:f0:1a:a2:a4:14:d2:46:05:31:28:f1:
         cd:27:5d:5c:26:02:06:79:d1:c3:4b:e8:10:75:fe:03:7c:5a:
         2e:e0:5e:b4:66:34:d5:50:d7:4c:e2:e9:c1:0c:f1:b8:6b:0e:
         78:1d:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----