Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d1ebc4f5-e7c5-4d89-bba6-d863fabee327/cfece86a2c9d5f958bbc97d22c309a7393569aec.roa
File:                     cfece86a2c9d5f958bbc97d22c309a7393569aec.roa (raw, json)
Hash identifier:          CIEZNThoU4qhb3IR6TsfLmMrf8/4zoOYL5I2BGE2a9M=
Subject key identifier:   CC:F5:09:90:4F:2C:FD:72:FC:D1:F0:58:32:A5:F3:1F:CA:82:91:33
Certificate issuer:       /CN=2ee5ba9ce95bb2271a7520e09f6f4bc10a439d7a
Certificate serial:       0458
Authority key identifier: 26:71:7E:35:56:91:1C:E1:6E:3E:FD:DC:A6:1C:DF:74:9A:4B:28:60
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee5ba9ce95bb2271a7520e09f6f4bc10a439d7a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d1ebc4f5-e7c5-4d89-bba6-d863fabee327/cfece86a2c9d5f958bbc97d22c309a7393569aec.roa
Signing time:             Fri 20 May 2022 22:49:40 +0000
ROA not before:           Fri 20 May 2022 03:00:00 +0000
ROA not after:            Sat 20 May 2034 03:00:00 +0000
asID:                     263194
IP address blocks:        179.43.100.0/22 maxlen: 24
                          2803:c480::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1112 (0x458)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ee5ba9ce95bb2271a7520e09f6f4bc10a439d7a
        Validity
            Not Before: May 20 03:00:00 2022 GMT
            Not After : May 20 03:00:00 2034 GMT
        Subject: CN=cfece86a2c9d5f958bbc97d22c309a7393569aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:21:73:11:5f:80:dc:a7:26:a6:33:07:f1:
                    91:34:86:3d:2e:bd:a9:f7:a6:c7:c1:d8:8b:ca:8f:
                    fd:b0:22:95:4f:9f:81:2c:75:8e:8d:eb:ce:38:18:
                    54:0a:8f:0a:47:60:26:69:10:5a:e3:49:b8:d7:da:
                    36:64:0f:91:0d:88:c6:7f:31:f9:a7:57:84:cf:39:
                    b7:2d:bc:81:51:24:a2:cb:c0:98:64:4e:42:39:be:
                    4a:7f:da:a0:4f:56:db:5b:8d:31:3a:96:d6:30:84:
                    48:21:9c:86:a3:8d:8a:73:b3:e2:d1:92:4a:db:5a:
                    54:9d:79:f1:32:8b:cc:53:3c:71:1e:ff:f4:df:75:
                    3c:df:cf:11:dd:0a:55:cc:3b:08:cd:22:b7:2e:0e:
                    e9:d6:59:61:c5:cd:08:19:7b:ac:9b:f5:00:c7:93:
                    5b:ad:a6:33:93:91:35:01:f9:1e:d5:7c:df:e2:90:
                    15:f3:e1:4f:00:d9:5b:16:d6:7e:3c:37:6d:ac:57:
                    2b:ae:9b:00:2e:1c:5f:d0:26:14:35:02:69:93:23:
                    23:f6:29:6e:d0:30:4a:78:31:1d:0b:e0:15:ca:d1:
                    49:c7:36:d1:b3:7f:20:a3:0e:0a:28:31:53:1a:c6:
                    5d:b4:40:fe:b7:55:e0:10:e9:56:99:ec:a6:1c:df:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F5:09:90:4F:2C:FD:72:FC:D1:F0:58:32:A5:F3:1F:CA:82:91:33
            X509v3 Authority Key Identifier:
                keyid:26:71:7E:35:56:91:1C:E1:6E:3E:FD:DC:A6:1C:DF:74:9A:4B:28:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ee5ba9ce95bb2271a7520e09f6f4bc10a439d7a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d1ebc4f5-e7c5-4d89-bba6-d863fabee327/cfece86a2c9d5f958bbc97d22c309a7393569aec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d1ebc4f5-e7c5-4d89-bba6-d863fabee327/2ee5ba9ce95bb2271a7520e09f6f4bc10a439d7a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.100.0/22
                IPv6:
                  2803:c480::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:68:74:2d:ca:4d:9b:1a:04:2c:06:97:11:17:70:70:62:fc:
         cc:e1:e0:67:06:bc:0b:9d:a0:8b:3f:1f:43:47:2f:6a:02:8b:
         57:99:7f:f4:e5:10:e8:b1:67:01:da:ae:d8:f9:db:d6:b8:10:
         da:4f:59:61:b7:de:5e:21:20:91:51:6e:af:ff:a4:eb:cc:11:
         15:bd:0a:81:69:b2:30:2d:a1:d9:58:ba:02:bf:9e:34:41:78:
         98:eb:49:13:fe:cb:57:d2:ed:cd:14:a8:41:84:74:7c:e9:8f:
         c0:d9:2b:45:c2:03:a0:0b:a2:17:4b:37:81:65:ef:73:47:4b:
         bb:6a:f9:b2:8a:32:90:bc:73:de:b5:dd:ac:b3:fd:b6:10:77:
         e9:6e:ed:d7:fd:e7:3f:36:55:65:eb:77:da:18:b1:4a:8b:5b:
         ec:50:4a:c4:eb:49:b7:e1:b3:fc:b4:26:9b:6e:16:fd:65:fa:
         d9:56:0d:ac:2f:66:a3:ed:ec:b1:a6:41:82:c2:40:3a:ee:20:
         6b:08:b2:24:3c:26:4f:7a:c0:73:b6:2f:05:5f:2e:12:2d:53:
         a1:28:7b:86:d9:14:2a:0a:9a:eb:ce:60:56:80:4a:9a:26:54:
         dc:d8:ed:92:af:60:f7:af:42:80:22:9f:5c:9e:ff:04:93:b1:
         27:83:2d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----