Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/4a0e96edc86a2f20aff6a262072c91206743bdc6.roa
File:                     4a0e96edc86a2f20aff6a262072c91206743bdc6.roa (raw, json)
Hash identifier:          /aA1fUu7DoINPcR/Y/9kqcpCOiI1bSVPQ5I9kAvrcV8=
Subject key identifier:   67:54:DA:53:9E:72:C2:4D:32:BF:F9:E9:CB:E1:D8:6E:1E:10:D8:D5
Certificate issuer:       /CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
Certificate serial:       19CD0E
Authority key identifier: 45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/4a0e96edc86a2f20aff6a262072c91206743bdc6.roa
Signing time:             Wed 31 Aug 2022 13:39:57 +0000
ROA not before:           Wed 03 Aug 2022 03:00:00 +0000
ROA not after:            Fri 02 Aug 2024 03:00:00 +0000
asID:                     271929
IP address blocks:        179.0.42.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1690894 (0x19cd0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
        Validity
            Not Before: Aug  3 03:00:00 2022 GMT
            Not After : Aug  2 03:00:00 2024 GMT
        Subject: CN=4a0e96edc86a2f20aff6a262072c91206743bdc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fd:86:25:21:1f:f2:d6:ed:37:54:c6:61:10:
                    f3:56:2d:bd:12:b3:1b:86:d0:2a:ea:6e:b9:cc:eb:
                    8f:82:56:1d:19:99:b3:c4:3f:f3:58:0d:5f:cc:d5:
                    7c:ee:b6:48:29:a7:56:fe:3d:4c:20:5b:3d:e9:39:
                    7f:dc:c7:4c:b7:b5:17:70:c9:2b:9e:5a:71:92:b4:
                    35:02:3f:9a:78:3f:3b:e9:8f:0e:93:84:a4:21:82:
                    ba:ad:7b:8a:26:ab:75:28:b7:c4:d9:9d:76:16:83:
                    68:69:bb:d1:63:38:e9:95:b6:4a:7d:0f:2e:12:2c:
                    53:16:47:d7:27:cf:ac:9b:d1:3b:f7:a4:ac:67:a9:
                    b8:a4:20:d9:28:ae:b8:75:f2:5e:46:a2:47:18:a5:
                    af:96:b0:fd:09:d2:35:e0:4f:55:ec:b4:34:01:66:
                    98:22:db:3d:38:99:84:35:c0:fa:9f:bb:42:30:09:
                    bc:9a:8e:98:db:39:c2:53:27:62:03:18:d5:c2:ee:
                    96:de:d1:9d:bd:73:7a:5b:48:81:be:a2:8d:b2:ff:
                    7d:dc:3e:bb:d0:6c:22:58:16:8c:cf:ae:f6:5a:78:
                    7a:0d:db:ea:af:9f:44:b4:39:2c:d6:2d:35:77:33:
                    26:37:57:42:fe:97:83:24:6b:10:c5:6d:17:18:d7:
                    7f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:54:DA:53:9E:72:C2:4D:32:BF:F9:E9:CB:E1:D8:6E:1E:10:D8:D5
            X509v3 Authority Key Identifier:
                keyid:45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/4a0e96edc86a2f20aff6a262072c91206743bdc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:43:ad:d0:8c:9a:f6:7b:1e:5b:4b:ee:f3:4c:13:d5:73:d6:
         45:ab:69:1c:a8:a0:22:3c:38:40:c8:a3:6b:e7:a6:f7:08:5b:
         0a:35:db:8a:5a:34:63:51:a4:b3:86:6d:2b:e7:87:09:f4:43:
         8e:30:1c:39:82:06:fd:30:06:59:eb:db:9b:b3:7c:3e:9c:64:
         ac:14:ab:d6:1a:b9:b3:1f:da:0e:2f:ea:c3:ae:9c:a6:d0:7c:
         26:4c:57:17:26:aa:a2:d4:96:15:4c:c9:95:4c:68:90:b8:a5:
         88:cc:4c:d6:65:00:99:bd:8e:a3:69:e3:84:80:f5:04:dc:53:
         c5:b4:0b:42:0e:ec:d2:a5:aa:f2:0f:ce:ab:ad:3c:e9:05:bb:
         62:12:a3:7b:18:62:90:8c:7b:33:31:34:32:82:d6:c2:8a:8f:
         39:4f:d2:4a:3b:9a:d6:7a:0e:95:bf:88:1a:7a:67:d7:b7:c8:
         3a:a0:dc:15:11:fb:f2:61:dd:be:a2:65:9d:b4:55:d5:c8:80:
         f5:9c:62:7a:c6:46:0d:3e:c4:ec:65:02:24:46:88:fe:f1:ad:
         83:ab:c5:1a:3a:ec:be:80:57:cf:a9:8c:cc:9f:04:f0:1c:e3:
         d6:d5:8a:bd:d3:0d:ad:3b:5c:f2:48:2f:6f:b9:7a:d0:1e:93:
         d8:dc:a2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----