Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ba8b1829-2400-4831-8f7a-2852f5ee0403/b501df27279d161643696563df27f2978b4663d7.roa
File:                     b501df27279d161643696563df27f2978b4663d7.roa (raw, json)
Hash identifier:          zG/S/OiGf4JC6rZYgje7aNULY/Yz16LDRPxxI2jDo1Y=
Subject key identifier:   F4:AF:20:91:E6:34:65:68:38:47:B4:55:23:A3:8E:3E:60:F8:AE:AB
Certificate issuer:       /CN=df62f212d9864f0fbcb2d200ea003b0bf1fc632f
Certificate serial:       038BAF
Authority key identifier: AA:74:FB:80:CB:EB:D9:4E:0E:38:A1:6E:77:14:71:04:D1:59:80:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df62f212d9864f0fbcb2d200ea003b0bf1fc632f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ba8b1829-2400-4831-8f7a-2852f5ee0403/b501df27279d161643696563df27f2978b4663d7.roa
Signing time:             Wed 24 Mar 2021 14:33:56 +0000
ROA not before:           Wed 24 Mar 2021 14:33:56 +0000
ROA not after:            Tue 24 Mar 2026 14:33:56 +0000
asID:                     270102
IP address blocks:        179.49.208.0/22 maxlen: 24
                          2803:e7e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232367 (0x38baf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df62f212d9864f0fbcb2d200ea003b0bf1fc632f
        Validity
            Not Before: Mar 24 14:33:56 2021 GMT
            Not After : Mar 24 14:33:56 2026 GMT
        Subject: CN=b501df27279d161643696563df27f2978b4663d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:ad:be:d4:f6:95:71:cd:8f:4d:6c:52:5a:
                    0f:43:39:c8:f6:37:b0:e6:db:c0:92:9d:8b:10:8b:
                    e2:3d:d1:13:63:53:ad:58:10:54:e6:cd:45:03:a7:
                    a7:b9:5e:4f:b1:3a:bf:07:c4:bb:8a:fb:b0:24:e8:
                    d8:84:af:db:10:fe:96:8b:2a:bb:42:ff:e8:7b:ab:
                    bf:09:7a:b5:1c:cc:91:89:db:26:2f:f3:23:ab:0f:
                    2c:4d:45:2d:dc:0d:e3:f1:37:ee:3e:aa:77:3a:90:
                    e7:98:55:8d:62:d1:c4:30:ff:2a:21:fa:4e:90:dc:
                    a8:8d:d7:5a:5c:19:24:df:3e:5f:21:b8:3d:26:78:
                    e9:fb:20:11:58:f9:ca:8c:36:e7:11:11:ed:ae:83:
                    12:20:08:19:1b:07:e8:bd:5e:26:d3:0f:59:0a:7d:
                    bf:4b:69:82:b3:e3:5e:77:d8:e2:de:0a:c6:21:a7:
                    84:e1:c4:62:f6:7e:01:22:d2:3c:cc:5d:89:96:d9:
                    be:ca:dc:f1:ea:bc:f3:f7:d6:1e:70:ad:2d:af:5e:
                    0f:95:9e:25:71:14:29:65:38:91:79:f1:25:3e:f4:
                    48:c8:65:c4:84:b6:46:29:2a:fd:73:a7:67:b5:0c:
                    14:12:df:0f:d9:ae:d6:01:26:10:74:62:29:f4:15:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:AF:20:91:E6:34:65:68:38:47:B4:55:23:A3:8E:3E:60:F8:AE:AB
            X509v3 Authority Key Identifier:
                keyid:AA:74:FB:80:CB:EB:D9:4E:0E:38:A1:6E:77:14:71:04:D1:59:80:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df62f212d9864f0fbcb2d200ea003b0bf1fc632f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ba8b1829-2400-4831-8f7a-2852f5ee0403/b501df27279d161643696563df27f2978b4663d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ba8b1829-2400-4831-8f7a-2852f5ee0403/df62f212d9864f0fbcb2d200ea003b0bf1fc632f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.208.0/22
                IPv6:
                  2803:e7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:3c:da:2f:9c:6d:a0:e6:7a:41:85:76:73:0d:db:aa:f8:ba:
         4b:8c:49:79:c8:56:a0:da:5e:fa:c0:1f:dc:64:8e:40:7e:f1:
         6e:07:9b:83:68:b4:72:04:95:ee:db:ab:35:b4:1a:d4:d9:69:
         c0:3f:af:d0:9b:fa:e1:35:18:e6:31:f0:37:1c:69:75:fc:54:
         8a:eb:80:89:d8:30:6e:52:c9:30:f6:cf:ba:e0:e6:b2:b2:62:
         cd:a6:5d:b7:a3:08:19:e4:36:8e:bc:bf:cb:4c:68:4a:9b:c7:
         99:fc:57:24:83:3b:25:70:a6:75:9e:9b:a4:35:fb:25:c1:9c:
         f8:50:b4:d2:56:56:dc:c8:12:eb:ef:d4:74:16:2b:9a:59:d8:
         38:25:c9:81:9c:f5:c0:31:3b:b1:b8:6a:59:46:5e:a1:58:c0:
         f8:00:ba:ac:a9:73:b8:26:36:95:3a:ae:69:47:39:86:aa:14:
         2b:a9:25:83:85:9b:e6:e6:63:9a:4c:31:e4:95:ea:2e:a6:8f:
         83:30:9c:a1:27:77:6c:a2:ea:92:6e:13:95:ec:dc:46:ac:03:
         92:ff:b5:06:f6:f2:8d:1e:37:46:2a:69:37:9d:db:b9:f4:01:
         53:3e:32:46:7d:c0:bd:25:1c:c9:77:ec:61:ce:e0:d9:05:07:
         8f:3a:6b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----