Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/d3a4209d-95af-4ba4-b6d9-f197735f8228/94bcb7d41ca4d799fcb79091f49b315f13284b2d.roa
File:                     94bcb7d41ca4d799fcb79091f49b315f13284b2d.roa (raw, json)
Hash identifier:          tNCQ4xUwU+/dJG3dklTJKMw2cVqTQMltL0iC4LSn9No=
Subject key identifier:   33:F2:C7:29:D1:85:EA:6D:A7:56:90:56:E4:17:7D:6F:32:88:5E:54
Certificate issuer:       /CN=5975b61013804d0b5c77d3a24e365daaa3c78573
Certificate serial:       11A2A7
Authority key identifier: A8:D7:72:13:9E:71:41:A0:43:36:62:50:F2:51:4D:78:4D:68:65:4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5975b61013804d0b5c77d3a24e365daaa3c78573.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/d3a4209d-95af-4ba4-b6d9-f197735f8228/94bcb7d41ca4d799fcb79091f49b315f13284b2d.roa
Signing time:             Thu 02 Sep 2021 21:43:07 +0000
ROA not before:           Wed 24 Mar 2021 03:00:00 +0000
ROA not after:            Tue 24 Mar 2026 03:00:00 +0000
asID:                     52279
IP address blocks:        179.51.247.0/24 maxlen: 24
                          181.224.96.0/19 maxlen: 24
                          186.148.128.0/19 maxlen: 24
                          2803:900::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155751 (0x11a2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5975b61013804d0b5c77d3a24e365daaa3c78573
        Validity
            Not Before: Mar 24 03:00:00 2021 GMT
            Not After : Mar 24 03:00:00 2026 GMT
        Subject: CN=94bcb7d41ca4d799fcb79091f49b315f13284b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:d5:70:2d:7c:9e:e0:8a:e0:55:63:ab:b7:
                    b6:49:87:db:69:e9:8e:8c:c5:59:e2:79:51:c0:f5:
                    01:45:97:f2:7f:67:48:6e:7a:74:b6:8f:cb:0e:a2:
                    8a:36:07:c4:31:2e:85:c0:85:36:f8:f3:54:f0:46:
                    61:47:94:03:9c:54:c2:1d:69:3a:6c:e4:b9:5f:74:
                    8b:91:de:5f:bb:8b:12:85:29:f0:0d:9d:62:e7:5f:
                    11:f0:92:a4:52:ae:13:6d:34:16:95:87:1b:e2:ba:
                    51:74:f8:ca:64:b1:77:55:0c:de:48:61:5a:70:67:
                    31:c4:ca:00:dd:7f:53:eb:7f:27:de:04:6e:b2:4b:
                    8f:70:7f:82:89:a8:0a:ea:25:3a:ea:30:1c:61:2a:
                    17:34:b2:99:62:53:ff:20:d3:7d:02:9f:a4:3f:00:
                    2b:42:26:c8:49:c0:a9:8a:a8:0c:8d:12:a8:24:50:
                    5a:c2:79:30:d7:a9:58:a1:ab:da:4d:e0:b0:ab:d9:
                    02:6b:47:6a:79:21:c7:a0:a1:77:42:f6:f9:09:d4:
                    5a:fc:03:ec:a3:4c:98:ae:1f:54:34:38:91:fb:7f:
                    5e:9b:c8:24:fc:2e:7b:5e:2b:b8:41:ba:36:e8:8b:
                    7a:c2:0d:7c:f2:4d:87:00:5f:b1:b5:cb:35:c4:03:
                    12:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:F2:C7:29:D1:85:EA:6D:A7:56:90:56:E4:17:7D:6F:32:88:5E:54
            X509v3 Authority Key Identifier:
                keyid:A8:D7:72:13:9E:71:41:A0:43:36:62:50:F2:51:4D:78:4D:68:65:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5975b61013804d0b5c77d3a24e365daaa3c78573.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/d3a4209d-95af-4ba4-b6d9-f197735f8228/94bcb7d41ca4d799fcb79091f49b315f13284b2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/d3a4209d-95af-4ba4-b6d9-f197735f8228/5975b61013804d0b5c77d3a24e365daaa3c78573.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.247.0/24
                  181.224.96.0/19
                  186.148.128.0/19
                IPv6:
                  2803:900::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:14:89:b7:43:61:18:b0:82:d2:91:ca:6f:ef:93:6f:18:84:
         d9:8b:cc:97:14:a8:52:76:3a:9e:2d:49:9f:30:c7:9a:5e:13:
         ca:0e:f6:54:df:1e:79:1c:83:ce:58:17:ac:ea:15:0e:3a:57:
         7c:1a:81:71:d0:39:fa:d0:fa:14:5a:ee:b7:1c:d6:dd:39:86:
         a7:16:95:26:53:72:1e:e5:60:83:48:cc:65:d6:21:25:55:55:
         1f:ad:d2:91:5a:26:68:33:2e:9c:87:b8:66:d2:77:d3:12:e7:
         68:5c:a2:0a:6f:bf:46:53:35:c2:a4:8a:51:8c:bc:af:7c:69:
         d5:73:b7:36:51:48:7b:cd:be:76:55:8e:b0:f8:ea:16:82:c5:
         2c:36:44:86:a1:d6:56:6c:a4:ac:21:33:89:ba:30:cc:5c:e7:
         5c:0f:34:d9:40:66:fa:56:2e:04:e7:bf:13:7f:b6:37:0c:64:
         5b:0e:bb:a8:09:a9:07:25:9a:90:f1:22:03:e3:cb:68:02:31:
         a6:cc:f3:32:55:47:7b:d0:1d:be:79:77:6a:c4:f5:07:4e:45:
         ae:60:ce:39:63:08:90:29:3a:6c:37:67:fe:38:46:74:42:c6:
         00:1a:48:8d:1b:47:b3:34:a0:5c:43:1f:d2:1f:e4:67:0a:0b:
         7c:b8:cd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----