Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/2d83f1b36deca2567f1d0c29eb577c22b622c1fb.roa
File:                     2d83f1b36deca2567f1d0c29eb577c22b622c1fb.roa (raw, json)
Hash identifier:          COIdK4gYGm0AgUcz+YHZUIXZWboogTDX9KoLu3GaBvE=
Subject key identifier:   E6:56:B6:76:8F:CD:6B:40:B5:27:07:99:A6:A6:3C:00:E2:88:4F:18
Certificate issuer:       /CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
Certificate serial:       149262
Authority key identifier: 45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/2d83f1b36deca2567f1d0c29eb577c22b622c1fb.roa
Signing time:             Tue 08 Feb 2022 14:41:20 +0000
ROA not before:           Fri 02 Jul 2021 03:00:00 +0000
ROA not after:            Sun 02 Jul 2023 03:00:00 +0000
asID:                     23031
IP address blocks:        179.0.40.0/22 maxlen: 23
                          2803:fc10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348194 (0x149262)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
        Validity
            Not Before: Jul  2 03:00:00 2021 GMT
            Not After : Jul  2 03:00:00 2023 GMT
        Subject: CN=2d83f1b36deca2567f1d0c29eb577c22b622c1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1f:59:86:12:69:f0:27:bb:81:8e:5a:86:a5:
                    5b:81:87:54:e8:a2:70:28:99:89:cf:fb:e8:c0:7c:
                    fc:79:04:07:4d:8a:b6:76:ee:d7:68:52:ef:10:bd:
                    06:45:fd:48:dd:0b:e2:97:b2:31:84:58:0b:03:96:
                    9e:0d:91:02:f1:24:36:1d:64:03:b2:e9:bf:76:3b:
                    b9:91:7e:19:27:09:56:18:63:55:46:e6:09:1b:ab:
                    52:f7:95:b2:70:87:f4:bd:0e:78:c5:11:8f:21:64:
                    b0:2c:70:7e:bd:d5:73:ab:b2:31:49:24:a6:b2:b5:
                    3e:9c:77:3d:58:d2:a7:14:d6:1e:80:1b:c3:89:7e:
                    27:23:84:1d:84:93:26:ba:d9:51:a7:fb:fb:51:9b:
                    66:d8:12:42:83:86:6e:04:63:aa:26:27:86:64:ca:
                    d4:2e:95:1c:3c:99:36:28:f7:57:c7:1d:65:98:ae:
                    39:cf:8d:59:2f:ed:7e:1e:dc:02:ec:50:a2:8d:b2:
                    37:f2:d3:66:8b:6e:75:37:27:48:27:84:7f:6d:01:
                    0b:5e:80:7a:f7:d5:18:76:72:77:83:99:2e:70:10:
                    1f:71:63:d7:39:e5:3c:60:0d:2e:c3:12:b4:6e:66:
                    5c:3f:ba:a4:eb:ab:f3:50:f6:a3:6c:9b:61:96:55:
                    ab:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:56:B6:76:8F:CD:6B:40:B5:27:07:99:A6:A6:3C:00:E2:88:4F:18
            X509v3 Authority Key Identifier:
                keyid:45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/2d83f1b36deca2567f1d0c29eb577c22b622c1fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.40.0/22
                IPv6:
                  2803:fc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         63:46:04:30:83:1d:71:59:d7:6f:9e:0d:d8:42:ac:eb:e7:87:
         a3:aa:39:c7:01:be:ae:05:82:09:77:e7:c2:32:37:93:ca:73:
         af:29:4d:aa:33:96:9d:ca:ae:49:8f:c2:4e:dd:16:e2:db:67:
         62:6e:4c:67:55:5b:64:da:ee:98:81:14:ac:08:94:f1:b8:11:
         6f:92:7d:8e:0b:b7:d3:4b:1f:4a:a0:41:7b:4b:ec:cf:a1:f9:
         bd:08:b4:0d:92:c6:3e:f5:a4:42:bb:69:f8:59:24:d6:bc:00:
         f2:fe:c2:3b:17:ce:f5:33:5a:da:38:08:d3:23:e0:2b:fd:2a:
         d9:73:52:75:c4:ef:1f:46:b4:b2:e7:8a:23:6f:cb:01:fe:ac:
         9e:ad:f8:4d:0a:a4:75:bc:a3:24:52:c7:1b:a4:cb:25:f4:4a:
         52:0d:60:29:95:1b:fc:92:5a:de:0e:00:bb:c9:ef:81:5a:97:
         48:b7:a1:02:86:4e:61:0b:d1:fe:0c:d9:8f:ad:1e:f7:1f:f5:
         7b:af:cd:bd:65:bc:ee:30:e5:46:98:ec:e5:c9:fd:55:53:1c:
         c7:14:e6:de:73:34:71:e5:a0:f3:40:1d:aa:cc:65:6e:bc:a6:
         a0:25:2a:4e:e2:1b:7d:b1:cd:17:00:e8:ac:a9:17:69:38:8f:
         0e:bc:0e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----