Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/ceeb260d0fb5c3ed07d3317c1541174e9b8459a2.roa
File:                     ceeb260d0fb5c3ed07d3317c1541174e9b8459a2.roa (raw, json)
Hash identifier:          m+pLCDAbzL4deNNWcTtc8LWcaPtXc+AJJw1BJKJ6PT8=
Subject key identifier:   9D:93:0E:5B:B6:D2:DB:C7:DA:F6:A1:F8:CD:29:05:18:7D:44:2D:6B
Certificate issuer:       /CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
Certificate serial:       1D524C
Authority key identifier: 62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/ceeb260d0fb5c3ed07d3317c1541174e9b8459a2.roa
Signing time:             Wed 09 Nov 2022 15:25:16 +0000
ROA not before:           Mon 22 Mar 2021 14:35:22 +0000
ROA not after:            Tue 24 Mar 2026 14:35:22 +0000
asID:                     18678
IP address blocks:        179.1.0.0/17 maxlen: 17
                          190.90.0.0/16 maxlen: 16
                          179.1.72.0/24 maxlen: 24
                          179.1.78.0/24 maxlen: 24
                          2800:310::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1921612 (0x1d524c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3300a6efb5b34c79125fce5dc4afa6977a46744f
        Validity
            Not Before: Mar 22 14:35:22 2021 GMT
            Not After : Mar 24 14:35:22 2026 GMT
        Subject: CN=ceeb260d0fb5c3ed07d3317c1541174e9b8459a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d2:77:28:13:0b:89:22:f9:4a:9b:ee:47:03:
                    e7:7d:53:87:67:e1:e5:30:c7:53:d6:33:57:9f:26:
                    8b:ec:2c:1c:a6:6b:b6:ff:97:69:17:f2:bf:81:b8:
                    b6:92:aa:c5:11:d4:a4:cf:09:28:4c:8d:2a:c6:45:
                    6a:84:43:8c:0c:a3:0f:dd:62:4a:28:ca:13:95:6b:
                    3f:22:a0:7f:ef:43:ed:12:f6:4d:68:01:22:50:cc:
                    bd:fe:94:af:62:1a:84:4e:2f:d2:97:41:46:b4:6f:
                    51:48:8d:72:5e:d4:d2:80:13:c2:01:07:5f:1c:42:
                    15:a8:92:c8:77:4f:98:09:85:39:34:bb:95:30:16:
                    a9:61:10:95:42:e8:92:40:15:c6:e0:35:a5:6e:4b:
                    df:6a:81:cc:bf:55:d8:84:5d:72:48:1b:de:a5:ca:
                    15:44:b6:dd:1a:1f:f0:96:90:93:3a:fd:45:51:5e:
                    88:29:51:e8:19:cf:43:dd:e4:08:d0:22:23:f2:c9:
                    8c:c0:50:c4:7b:04:8e:81:9a:ed:f8:6d:43:2d:20:
                    84:c7:20:7f:c6:29:2e:9f:5b:65:77:75:3e:c7:a0:
                    bc:be:77:ec:6e:7a:46:63:06:2e:19:ed:a6:fd:bf:
                    20:6e:2e:3c:8a:d5:7c:2d:11:85:88:6a:c8:cf:1e:
                    fb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:93:0E:5B:B6:D2:DB:C7:DA:F6:A1:F8:CD:29:05:18:7D:44:2D:6B
            X509v3 Authority Key Identifier:
                keyid:62:AA:07:2A:74:5B:AE:77:82:D2:D9:44:76:20:4C:0C:A5:4E:ED:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3300a6efb5b34c79125fce5dc4afa6977a46744f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/ceeb260d0fb5c3ed07d3317c1541174e9b8459a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/aa69a975-83a3-4532-a779-5ffb87580309/3300a6efb5b34c79125fce5dc4afa6977a46744f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.1.0.0/17
                  190.90.0.0/16
                IPv6:
                  2800:310::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:5f:0c:50:19:27:a6:e2:2a:2f:56:0d:d9:4f:e4:a9:34:8c:
         91:1a:0a:72:cb:c5:e9:ed:3e:1c:79:71:3d:a9:35:14:43:0f:
         42:6e:ca:be:35:9b:04:23:22:ab:b5:3b:01:13:5e:26:c6:26:
         45:54:29:a2:22:b1:3e:f2:3f:3d:fd:05:70:35:1a:6b:6a:26:
         ee:70:94:04:ea:96:e7:bc:47:c7:56:bb:9f:35:42:72:bd:07:
         12:04:93:7f:0a:5d:7b:22:ad:4a:6e:e9:07:1e:5c:aa:db:67:
         b3:57:4b:0e:71:6c:d4:2a:d8:17:b0:d5:9a:76:2f:94:9e:51:
         2a:32:3b:17:83:f2:8c:5c:15:c6:91:66:9a:e6:5b:8c:f1:d8:
         a8:36:4e:d3:96:d2:56:50:51:bd:37:8f:e2:87:e1:b2:98:cd:
         50:9e:08:f9:ce:f7:3e:60:77:d1:28:7b:1b:05:8e:bd:03:b4:
         30:fb:35:76:db:ae:d8:86:ad:b3:c7:7d:1b:72:01:15:b7:f6:
         3a:a9:63:ce:e3:9f:a5:21:bb:8d:3b:93:37:66:ad:80:86:05:
         a5:ba:64:25:a0:5e:78:68:62:f7:6c:ec:1c:0c:ee:88:4d:3f:
         5a:98:89:ca:74:03:ba:82:fa:64:12:ac:f5:8d:10:a8:1c:24:
         c4:cf:5e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----