Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1f87d41-2420-4d8b-9b85-3a1e56c5b9a3/78fb0c60c85df5750e2a40a0993e3e04156a4a9b.roa
File:                     78fb0c60c85df5750e2a40a0993e3e04156a4a9b.roa (raw, json)
Hash identifier:          npvf2q6bj8ehwlO5g8v+XBjsSX25kpGh905dgmv06ME=
Subject key identifier:   16:C4:AF:8D:2A:49:49:A6:4A:5A:3C:76:50:53:5A:58:F1:D7:D8:04
Certificate issuer:       /CN=3e20d556cd0f6c69185fe4dde7c18ad09f497048
Certificate serial:       120B36
Authority key identifier: A7:4B:C5:33:CE:1C:D9:68:86:55:69:27:98:7E:4F:6F:6B:99:5A:38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e20d556cd0f6c69185fe4dde7c18ad09f497048.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1f87d41-2420-4d8b-9b85-3a1e56c5b9a3/78fb0c60c85df5750e2a40a0993e3e04156a4a9b.roa
Signing time:             Sat 23 Dec 2023 07:30:00 +0000
ROA not before:           Sat 23 Dec 2023 07:30:00 +0000
ROA not after:            Mon 22 Dec 2025 07:30:00 +0000
asID:                     272028
IP address blocks:        179.189.220.0/23 maxlen: 24
                          2801:1f:1800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1182518 (0x120b36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e20d556cd0f6c69185fe4dde7c18ad09f497048
        Validity
            Not Before: Dec 23 07:30:00 2023 GMT
            Not After : Dec 22 07:30:00 2025 GMT
        Subject: CN=78fb0c60c85df5750e2a40a0993e3e04156a4a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:e4:f4:71:17:22:fe:8d:c3:91:0c:a0:77:33:
                    53:43:c2:59:47:e5:e5:90:5a:d2:ba:ad:e3:6e:be:
                    6e:a6:8b:4c:a3:49:a8:74:99:60:b9:94:24:bc:63:
                    c1:36:d4:c0:c7:59:b6:5f:d5:e0:2c:cc:ef:fa:b5:
                    00:56:b3:ac:b4:98:4f:33:3c:eb:bd:ee:41:f2:c0:
                    c1:ad:1a:53:67:9d:d1:f6:6f:b1:a0:2d:a2:db:23:
                    d7:ee:d7:fb:f1:1f:df:bd:5b:97:ef:0a:99:91:0d:
                    ca:dc:3b:87:b0:02:ce:e2:31:79:e1:b1:1b:5b:64:
                    ea:ae:1a:86:e7:c4:ec:20:dd:7c:89:42:78:54:7a:
                    4a:e3:05:9e:4d:66:5f:af:95:53:04:6d:b8:3b:c5:
                    32:5d:cc:a3:48:93:91:d8:c7:d0:b8:00:e0:b1:54:
                    7f:4c:35:0b:d8:26:1d:0b:eb:50:00:45:8c:1b:3c:
                    7a:7c:50:0c:c6:4e:9a:61:84:21:38:ff:43:9b:fe:
                    4a:87:b6:3f:4d:03:42:f8:dd:35:5d:2a:07:f6:61:
                    0f:a6:dc:bf:30:18:13:fa:0a:e2:34:d7:c9:47:a2:
                    9f:ba:74:03:25:80:d9:54:ca:7a:ad:c4:8e:2e:18:
                    20:17:9e:dc:77:c0:77:13:65:36:46:4f:9c:28:ae:
                    ec:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:C4:AF:8D:2A:49:49:A6:4A:5A:3C:76:50:53:5A:58:F1:D7:D8:04
            X509v3 Authority Key Identifier:
                keyid:A7:4B:C5:33:CE:1C:D9:68:86:55:69:27:98:7E:4F:6F:6B:99:5A:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e20d556cd0f6c69185fe4dde7c18ad09f497048.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1f87d41-2420-4d8b-9b85-3a1e56c5b9a3/78fb0c60c85df5750e2a40a0993e3e04156a4a9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1f87d41-2420-4d8b-9b85-3a1e56c5b9a3/3e20d556cd0f6c69185fe4dde7c18ad09f497048.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.220.0/23
                IPv6:
                  2801:1f:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:64:cf:b9:8b:93:33:54:44:18:dd:26:87:ba:1e:50:d8:89:
         e9:6f:5c:9c:d3:31:8a:a0:66:fb:7a:e0:56:10:47:79:c7:58:
         2b:03:08:c8:b9:78:47:97:88:f0:63:60:07:51:23:c1:de:d2:
         12:99:b1:1b:29:0d:4d:9f:ec:6f:76:68:35:f3:74:1e:45:66:
         f5:a2:cf:03:d4:ae:85:62:d4:70:02:bb:0d:66:91:04:a8:9f:
         58:c6:ac:b2:e0:22:0b:fa:e6:11:ff:c1:be:03:f1:3b:2b:3e:
         a6:a0:ee:50:7d:32:5f:bf:58:86:8e:1a:29:d7:b5:fd:09:96:
         fe:54:a6:21:b5:69:20:61:2b:b6:15:03:d9:b3:81:2c:ae:3d:
         56:09:57:fa:09:e7:6f:7b:8d:e4:83:0b:08:2f:1e:d3:40:07:
         e0:11:aa:b4:5d:e3:0e:e2:05:33:15:c9:71:86:e6:26:d5:18:
         2a:3c:16:6c:61:75:ca:5f:ed:72:e2:55:12:62:e4:e2:bd:94:
         9d:50:f7:fc:18:99:e3:9a:7e:99:5b:b8:cc:24:d6:49:14:46:
         74:ea:35:51:b1:80:43:d3:7e:42:d3:77:6c:2e:17:93:1b:b7:
         5a:51:5f:40:f9:83:39:52:b0:31:b5:21:d1:33:fc:8b:19:72:
         3b:c3:bf:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----