Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dba98f36-155e-492a-a2b3-57bde203c502/46645759aef7524b2be030d2603a117b0bd0bf48.roa
File:                     46645759aef7524b2be030d2603a117b0bd0bf48.roa (raw, json)
Hash identifier:          0RWWhwOTzoMcvvf+LqkBRli7FM/2Qr/bsuzZyXofUoA=
Subject key identifier:   16:42:69:C6:A2:0B:47:55:C9:1C:D7:5D:49:B4:21:36:7B:A2:B6:63
Certificate issuer:       /CN=d539eaadb795a2b830e947ce29c5c90c539093c4
Certificate serial:       0652
Authority key identifier: 7C:A7:41:69:B4:08:61:69:A2:52:39:8A:11:90:E9:5C:5C:0D:5E:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d539eaadb795a2b830e947ce29c5c90c539093c4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dba98f36-155e-492a-a2b3-57bde203c502/46645759aef7524b2be030d2603a117b0bd0bf48.roa
Signing time:             Fri 12 Nov 2021 15:40:34 +0000
ROA not before:           Fri 12 Nov 2021 03:00:00 +0000
ROA not after:            Sun 12 Nov 2023 03:00:00 +0000
asID:                     27751
IP address blocks:        179.49.168.0/22 maxlen: 24
                          2803:97e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1618 (0x652)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d539eaadb795a2b830e947ce29c5c90c539093c4
        Validity
            Not Before: Nov 12 03:00:00 2021 GMT
            Not After : Nov 12 03:00:00 2023 GMT
        Subject: CN=46645759aef7524b2be030d2603a117b0bd0bf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:7b:f4:4a:88:8d:c0:06:63:59:e3:55:4c:
                    80:78:00:35:fe:51:f8:70:0d:66:e3:f5:42:7a:8b:
                    78:c7:b8:57:9d:0c:27:1f:e3:23:3b:c4:96:ba:99:
                    4f:a5:42:e7:bc:e8:e5:29:41:b3:63:12:17:ed:89:
                    94:26:72:23:e4:e5:8c:f7:2f:45:ba:94:99:34:e1:
                    ce:42:c4:70:17:06:92:1c:05:4a:69:2d:d4:20:ad:
                    75:fe:45:95:f4:c0:87:b1:06:49:3d:3e:09:2c:96:
                    d5:b2:36:5f:bd:4c:2b:1c:b4:a8:04:7d:68:69:58:
                    f0:50:36:d5:a8:c9:7b:f0:d5:76:96:47:db:a6:19:
                    06:62:48:52:4f:06:bc:a8:3c:32:c2:e0:23:57:87:
                    cd:19:f5:ec:c4:65:45:f6:60:da:66:33:2b:ac:91:
                    4c:07:7b:98:41:0c:9d:9c:04:cb:a6:ae:94:34:52:
                    fc:28:89:01:d1:bb:ba:6d:21:13:6f:f2:19:e3:d4:
                    d1:13:8b:44:c8:1f:43:4b:16:2d:d8:54:ce:86:46:
                    86:8d:de:8f:cf:f7:33:2d:72:02:c0:2f:f5:6b:9c:
                    e8:06:05:54:3a:99:47:bc:72:c6:85:24:8f:62:a0:
                    d7:12:8b:ef:e9:3b:14:d0:83:a0:25:66:1b:da:dd:
                    2c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:42:69:C6:A2:0B:47:55:C9:1C:D7:5D:49:B4:21:36:7B:A2:B6:63
            X509v3 Authority Key Identifier:
                keyid:7C:A7:41:69:B4:08:61:69:A2:52:39:8A:11:90:E9:5C:5C:0D:5E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d539eaadb795a2b830e947ce29c5c90c539093c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dba98f36-155e-492a-a2b3-57bde203c502/46645759aef7524b2be030d2603a117b0bd0bf48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dba98f36-155e-492a-a2b3-57bde203c502/d539eaadb795a2b830e947ce29c5c90c539093c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.168.0/22
                IPv6:
                  2803:97e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:83:c6:28:e0:40:3c:c8:6e:fb:fd:d1:3c:47:9e:a9:21:b4:
         62:a4:89:a0:5b:e3:29:28:3f:52:4a:33:c9:48:76:5e:d6:f0:
         7f:6d:db:7c:3f:5d:30:b8:48:34:86:83:76:1e:86:39:02:f0:
         ca:f9:67:0f:a6:f8:ac:87:3a:ba:48:71:a1:35:ae:ca:04:98:
         d6:55:1f:1b:9c:be:58:c4:f5:86:54:7b:91:ef:80:c7:ea:7d:
         94:86:b4:71:b1:a7:32:dc:2d:e5:2a:65:c7:5e:8b:27:3a:a3:
         ed:62:b4:99:1c:b7:6e:35:c3:84:e4:9b:f3:6a:9f:c8:03:19:
         6a:fc:4d:48:8a:c1:1c:c2:55:89:3f:db:77:e8:8b:8d:24:5d:
         49:1c:6f:54:31:1d:eb:89:59:89:5a:09:0f:ee:c6:83:11:03:
         8e:4a:83:c0:b6:f9:dc:dc:e7:bb:07:33:b3:3c:32:0f:4b:bd:
         2d:c5:89:db:0f:2e:9a:ba:46:bb:ba:1a:df:2e:2d:d2:c1:21:
         66:02:0b:89:8f:21:a3:b0:f8:12:63:c2:8a:20:27:ae:37:fa:
         b8:ca:50:fa:37:6b:02:26:ac:d8:fd:13:2b:2e:41:23:2f:56:
         83:1a:b5:34:32:3f:39:37:7f:e9:ca:fc:0d:55:ed:10:1f:1d:
         d2:f1:72:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----