Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/8e5e177106e9a366e18fa2ddfce9c60b796bedf5.roa
File:                     8e5e177106e9a366e18fa2ddfce9c60b796bedf5.roa (raw, json)
Hash identifier:          Bz2Kb09XYAzC0jo46ISxixnLKVcXl4jBSs0LzvJxIwQ=
Subject key identifier:   64:ED:7C:A0:FF:EF:31:AA:50:44:03:29:0D:73:C6:EE:09:88:FA:B5
Certificate issuer:       /CN=3fd7e91493678e5c49e72c20d07d4a277e63f224
Certificate serial:       1931FB
Authority key identifier: 53:47:76:B6:35:82:22:3D:B7:70:E1:E7:C8:FC:AB:13:24:64:75:A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fd7e91493678e5c49e72c20d07d4a277e63f224.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/8e5e177106e9a366e18fa2ddfce9c60b796bedf5.roa
Signing time:             Tue 12 Jul 2022 12:32:50 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Sun 24 Mar 2030 03:00:00 +0000
asID:                     27960
IP address blocks:        179.60.96.0/20 maxlen: 23
                          190.122.32.0/20 maxlen: 23
                          190.122.48.0/20 maxlen: 23
                          200.49.120.0/21 maxlen: 23
                          2803:d080::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1651195 (0x1931fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fd7e91493678e5c49e72c20d07d4a277e63f224
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2030 GMT
        Subject: CN=8e5e177106e9a366e18fa2ddfce9c60b796bedf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d0:b9:a7:48:26:6d:21:d4:7e:bb:14:26:2a:
                    d1:59:a4:ba:80:04:b0:93:bc:97:35:6c:23:30:40:
                    01:b0:21:48:14:0d:34:40:27:fb:9c:89:ce:ba:56:
                    14:6e:68:a2:d2:18:99:3f:99:6c:1c:69:b2:8c:cc:
                    e8:81:f2:5d:a7:83:da:8c:bf:0c:c5:95:01:ee:92:
                    9e:bb:df:25:d6:2c:d7:f1:06:cb:40:72:f1:e4:8e:
                    48:e7:e9:88:a9:cd:dd:31:73:c3:25:96:8e:b5:08:
                    6b:88:ad:76:e8:f6:fd:ec:7f:ca:ec:49:cf:5e:29:
                    97:bd:ce:44:3f:0f:e4:d0:e0:9a:1d:6d:48:7c:73:
                    25:c7:4b:8c:c3:25:53:8b:f2:17:0e:73:9c:de:d4:
                    c9:fd:0d:94:3a:19:52:05:66:c5:05:99:2b:c4:19:
                    b1:7e:12:47:98:00:09:dd:1f:7d:c2:45:a9:dd:ac:
                    e0:9c:35:c6:3d:dd:e0:6b:7d:93:06:b7:7c:16:d1:
                    ec:56:72:e6:71:ec:57:51:d0:b0:a6:6f:3b:46:51:
                    fc:8a:66:d0:b4:8c:8d:e7:33:cb:34:5c:26:67:42:
                    71:5f:43:2c:61:ca:b1:0c:e1:90:5f:58:ba:6d:71:
                    3c:d4:ee:78:72:3e:24:3e:1c:a6:e3:2b:a3:98:8c:
                    5d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:ED:7C:A0:FF:EF:31:AA:50:44:03:29:0D:73:C6:EE:09:88:FA:B5
            X509v3 Authority Key Identifier:
                keyid:53:47:76:B6:35:82:22:3D:B7:70:E1:E7:C8:FC:AB:13:24:64:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fd7e91493678e5c49e72c20d07d4a277e63f224.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/8e5e177106e9a366e18fa2ddfce9c60b796bedf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bb98b792-3f0b-40af-bc01-a504db88531c/3fd7e91493678e5c49e72c20d07d4a277e63f224.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.96.0/20
                  190.122.32.0/19
                  200.49.120.0/21
                IPv6:
                  2803:d080::/32

    Signature Algorithm: sha256WithRSAEncryption
         66:31:ad:ab:75:1f:41:fc:c8:45:68:ed:bd:d7:67:69:1f:5c:
         2c:9d:dc:9f:39:a3:17:d0:2c:07:c1:89:e4:4d:de:ca:b8:03:
         9c:17:94:b0:d5:bc:ee:1e:3b:5c:f6:b3:8e:49:9c:a7:68:84:
         0e:bb:be:9d:56:30:ed:c2:75:2d:a1:3c:6d:68:82:ac:f8:eb:
         e4:43:6d:19:bb:5f:19:80:80:f8:2f:5c:ed:d6:11:ef:cb:b1:
         c0:27:78:7c:f2:47:11:b2:f9:37:f3:54:14:0f:40:87:44:22:
         c8:3c:72:66:89:ff:43:3e:26:8d:9c:a5:e5:6a:77:f6:f2:22:
         c5:a5:40:25:71:2c:fe:dc:48:6f:da:73:af:00:8c:9d:3b:7e:
         54:7a:5f:4f:64:da:be:5a:06:91:af:1c:be:41:e9:13:b0:b4:
         3c:36:d3:a2:21:d9:67:20:4e:fd:f9:c2:21:2e:a3:31:5a:c8:
         44:01:7b:6e:e8:89:86:dd:c6:16:e8:48:c3:d3:1d:4f:c3:6d:
         6b:6e:f2:ff:36:40:49:20:dd:c4:c1:78:55:1c:ef:84:e3:1e:
         17:aa:78:52:98:e6:f4:dd:69:6a:25:67:f9:63:85:e7:ff:ce:
         0f:b5:52:02:69:ff:4f:d0:0c:8b:53:24:f9:4e:6c:86:bb:a1:
         b1:be:6d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----