Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/b5afb63578ff72fd2525333cef4d8c50f2d8cce7.roa
File:                     b5afb63578ff72fd2525333cef4d8c50f2d8cce7.roa (raw, json)
Hash identifier:          3KSvwYvw/Wv4zkqJLTZs1HtmnSf0XBeCI1n1s6ezaB4=
Subject key identifier:   99:38:7C:91:E0:B1:2C:19:A2:8F:15:4D:24:2C:2C:1B:EA:DD:5B:36
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1B24E2
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/b5afb63578ff72fd2525333cef4d8c50f2d8cce7.roa
Signing time:             Mon 05 Sep 2022 15:08:13 +0000
ROA not before:           Wed 24 Mar 2021 14:35:22 +0000
ROA not after:            Tue 24 Mar 2026 14:35:22 +0000
asID:                     18678
IP address blocks:        179.1.0.0/17 maxlen: 17
                          190.90.0.0/16 maxlen: 16
                          2800:310::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1778914 (0x1b24e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 24 14:35:22 2021 GMT
            Not After : Mar 24 14:35:22 2026 GMT
        Subject: CN=b5afb63578ff72fd2525333cef4d8c50f2d8cce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:30:41:d6:7d:08:a1:a3:66:70:28:ee:f6:
                    e9:b9:bc:33:d9:ed:e8:24:d0:17:44:22:76:9b:ea:
                    33:5d:b3:08:d4:3b:b7:d2:15:57:15:be:6b:f3:0d:
                    07:5d:88:e1:8c:b1:06:3b:9c:bc:08:b3:69:7d:22:
                    78:30:90:14:43:72:2c:52:dc:e8:11:ed:df:5b:7a:
                    43:af:82:3f:5a:11:c6:83:64:e7:e3:48:99:5d:ef:
                    db:f5:fb:ca:b3:bd:41:d8:6a:d0:75:3c:51:c3:69:
                    21:f2:92:df:bf:5b:6e:d2:a8:ae:63:01:f3:ca:29:
                    ea:fc:12:39:08:5f:23:1b:1c:e6:2b:fd:d2:c1:73:
                    b0:fe:60:ba:8c:e6:84:28:fb:9c:7f:b5:95:7c:e8:
                    10:eb:c6:00:84:6a:c2:9f:56:05:d3:59:78:07:5e:
                    79:49:7e:e6:fe:4b:64:93:52:6b:69:79:0e:e3:d6:
                    f9:69:3f:b3:1f:85:7f:a4:9d:cb:dc:ca:45:6b:c1:
                    5a:46:a4:dd:94:63:1a:f7:25:30:23:99:7d:49:98:
                    77:48:5d:e7:e0:1b:22:9e:64:93:ed:d8:8a:48:d0:
                    55:71:5f:b3:6a:e9:d7:96:3d:7a:6b:72:5a:9a:58:
                    10:b2:b0:78:c9:04:7e:2f:a5:9e:d9:d3:f5:3e:4d:
                    08:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:38:7C:91:E0:B1:2C:19:A2:8F:15:4D:24:2C:2C:1B:EA:DD:5B:36
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/b5afb63578ff72fd2525333cef4d8c50f2d8cce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.0.0/17
                  190.90.0.0/16
                IPv6:
                  2800:310::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:5e:9f:e2:4b:2b:f1:1c:f2:ad:99:67:e9:38:f4:94:8e:dd:
         56:73:19:70:10:20:e1:aa:33:e5:35:b0:3b:a4:f4:9b:a7:9f:
         b4:e0:bb:f2:60:9f:56:01:63:fa:6c:ad:45:81:85:fc:e9:d3:
         61:9c:79:ce:1c:b8:25:4f:6d:0f:c0:f7:90:81:f5:47:29:27:
         5d:47:14:fa:e6:72:69:92:8b:ad:83:ba:9e:c0:53:86:61:0c:
         3a:8b:db:9c:7d:de:e3:ff:e8:5b:30:ca:e7:7a:1e:f5:2c:2a:
         eb:3e:48:ab:2b:7c:18:87:b5:05:e3:20:88:45:9b:03:ab:49:
         ef:2a:43:0f:dd:dc:ee:8b:96:79:d4:ce:e2:e4:13:ef:35:1f:
         03:02:6f:68:c5:4a:80:e4:a3:9c:ec:17:d2:4a:a8:98:5b:96:
         a3:55:a6:b9:d8:6b:59:06:c4:d4:b0:0c:04:f0:25:45:8a:e1:
         8b:13:45:63:20:2a:6b:e6:c7:bc:87:99:78:2e:c5:c4:4c:60:
         81:56:95:26:6f:9e:2a:9f:7f:dc:96:a1:62:af:83:c8:81:d7:
         8c:50:df:9d:81:2f:5c:c5:c6:f0:a8:ba:09:6a:13:f2:06:6e:
         57:5b:42:3b:4a:45:82:d9:ee:de:6d:75:7a:fd:7a:de:62:40:
         4d:ed:ce:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----