Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/cb062a9e432cf13eac4b0eeb1d9e72145b43474d.roa
File:                     cb062a9e432cf13eac4b0eeb1d9e72145b43474d.roa (raw, json)
Hash identifier:          x+ndlcMg2/nNbNEpzuhuBrWnFiKrHCaA50Fu5VA6sAQ=
Subject key identifier:   D8:0E:76:92:BE:B9:55:80:FF:1E:15:59:9D:11:32:65:20:B9:F2:25
Certificate issuer:       /CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
Certificate serial:       10CDE5
Authority key identifier: 45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/cb062a9e432cf13eac4b0eeb1d9e72145b43474d.roa
Signing time:             Fri 17 Sep 2021 00:23:27 +0000
ROA not before:           Fri 02 Jul 2021 03:00:00 +0000
ROA not after:            Sun 02 Jul 2023 03:00:00 +0000
asID:                     23031
IP address blocks:        179.0.40.0/22 maxlen: 22
                          179.0.40.0/23 maxlen: 24
                          2803:fc10::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101285 (0x10cde5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e
        Validity
            Not Before: Jul  2 03:00:00 2021 GMT
            Not After : Jul  2 03:00:00 2023 GMT
        Subject: CN=cb062a9e432cf13eac4b0eeb1d9e72145b43474d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:48:7e:51:54:bd:a5:a6:58:6c:2d:42:da:55:
                    4b:2a:b4:66:a2:b9:47:79:a6:81:2f:f7:1f:eb:08:
                    d0:a4:91:52:1a:be:14:3c:5c:9f:3b:e4:cd:7c:dd:
                    30:7a:c6:49:09:fc:c1:d1:30:a5:8d:82:e8:50:fa:
                    89:e9:a8:a5:0e:49:fb:0f:74:e9:c4:16:01:b2:8a:
                    4f:b8:34:50:fd:81:8b:8c:fa:46:8e:00:6a:59:d3:
                    eb:94:4b:d4:aa:1d:c5:26:4c:1f:1e:a5:58:b9:c2:
                    29:d7:9d:00:b6:30:ee:51:ea:2b:a2:32:6e:39:92:
                    67:23:de:57:57:f9:e2:23:70:a2:b4:d1:e0:6d:13:
                    2c:9f:36:f7:54:db:85:fc:f3:88:36:75:2e:1c:ba:
                    93:89:02:d0:72:43:0b:6f:a2:60:47:ca:29:e1:f2:
                    b6:f8:89:b7:f9:61:9c:bd:06:47:e7:51:c6:e6:f6:
                    ca:5d:4a:02:38:95:8b:09:47:3d:7e:fe:f0:dc:a3:
                    c6:df:25:9d:09:d7:02:8f:84:63:37:13:df:14:85:
                    b5:9a:8f:8a:8e:81:0c:25:6f:28:de:99:19:e6:f5:
                    e6:b9:59:49:aa:5e:38:37:ab:ec:b7:b6:73:4c:42:
                    97:e7:ad:0b:39:2f:3a:32:dc:7b:17:ef:3e:8b:16:
                    28:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0E:76:92:BE:B9:55:80:FF:1E:15:59:9D:11:32:65:20:B9:F2:25
            X509v3 Authority Key Identifier:
                keyid:45:22:19:56:5B:11:3A:66:5D:FF:02:39:C9:DC:4F:9B:B4:95:26:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/cb062a9e432cf13eac4b0eeb1d9e72145b43474d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c9495aac-8547-4b9e-bc5e-63c37d1dcd48/5f57fa7e0ee183ac7ff6c526aed3e9ede0d1482e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.40.0/22
                IPv6:
                  2803:fc10::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:c5:20:dc:d5:82:97:dc:8d:f8:01:ee:cb:52:ee:5c:75:4a:
         55:30:ee:b4:c2:eb:9e:2f:da:0e:31:7f:64:ce:2c:1e:b6:4b:
         a6:1d:c3:9b:33:94:79:82:67:c9:dd:88:9d:d8:d6:a9:65:f3:
         95:24:ae:c2:52:6e:a1:9b:af:3e:35:de:3f:8c:22:3d:eb:3c:
         b7:6c:b0:a9:3c:80:e7:1a:f6:35:0d:ad:bb:c3:a2:de:5d:ce:
         e7:09:d9:6c:57:af:6c:d4:90:33:61:7f:e9:de:fd:44:2b:db:
         be:2e:e1:f9:b2:94:7b:19:28:cb:5c:83:23:8e:9c:ed:63:b3:
         06:2b:33:2c:51:ee:1a:09:c2:4a:f5:39:23:62:08:0c:e2:00:
         ac:04:d4:1b:5b:04:64:8b:c0:0c:0f:85:54:cd:f3:11:d7:e4:
         e2:8d:08:6f:9c:6e:a2:54:86:ab:ec:36:51:07:05:34:23:ec:
         d5:4d:a4:7a:38:b3:4d:00:4d:3f:e8:fe:ba:2c:55:f2:ed:46:
         86:44:13:a4:38:95:69:4e:8a:8c:e6:da:8c:27:36:ce:e1:88:
         de:da:f5:98:93:e3:34:b1:12:20:c0:bb:43:09:da:d4:b4:e7:
         c2:60:73:a6:fd:06:69:cc:e5:ef:37:f2:ee:de:69:6c:3d:a4:
         a5:f8:94:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----