Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/dba98f36-155e-492a-a2b3-57bde203c502/497279cb739f477b67c1b69c1a6d8e5954e2558c.roa
File:                     497279cb739f477b67c1b69c1a6d8e5954e2558c.roa (raw, json)
Hash identifier:          QZlSrNzZ2DlrrrXh3afQ8HF1uH2ft49aRgw2v3LyAGA=
Subject key identifier:   25:E2:38:C7:76:7B:75:35:76:AE:15:36:AB:AA:BE:02:F1:08:BC:33
Certificate issuer:       /CN=d539eaadb795a2b830e947ce29c5c90c539093c4
Certificate serial:       1235EC
Authority key identifier: 7C:A7:41:69:B4:08:61:69:A2:52:39:8A:11:90:E9:5C:5C:0D:5E:17
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d539eaadb795a2b830e947ce29c5c90c539093c4.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/dba98f36-155e-492a-a2b3-57bde203c502/497279cb739f477b67c1b69c1a6d8e5954e2558c.roa
Signing time:             Sat 11 Nov 2023 07:30:00 +0000
ROA not before:           Sat 11 Nov 2023 07:30:00 +0000
ROA not after:            Mon 10 Nov 2025 07:30:00 +0000
asID:                     27751
IP address blocks:        179.49.168.0/22 maxlen: 24
                          2803:97e0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1193452 (0x1235ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d539eaadb795a2b830e947ce29c5c90c539093c4
        Validity
            Not Before: Nov 11 07:30:00 2023 GMT
            Not After : Nov 10 07:30:00 2025 GMT
        Subject: CN=497279cb739f477b67c1b69c1a6d8e5954e2558c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:f2:2e:a9:79:61:5b:03:1f:21:4a:32:bd:ce:
                    2c:1e:7c:a1:49:ec:05:33:a3:1a:96:c5:d2:fb:19:
                    4a:4c:27:af:04:3b:db:1b:44:a4:54:98:a4:ce:12:
                    a5:d4:9d:1f:64:87:fd:fe:76:67:97:53:03:dd:9f:
                    ca:e5:5c:5e:aa:d4:fe:7b:66:49:8b:55:75:ec:11:
                    4f:71:fa:2c:65:57:c9:9f:7d:62:7b:63:6b:63:7e:
                    18:65:de:cc:08:1d:6a:fa:20:80:3b:02:70:0f:35:
                    40:e7:d5:71:9a:d5:62:f3:a6:f9:61:12:1c:36:ab:
                    6a:8a:98:eb:97:cc:ea:e8:61:47:12:dc:e8:a7:b9:
                    5d:6e:a0:4c:97:47:97:bd:71:b0:87:56:9e:49:06:
                    7a:71:ea:bf:de:9c:e0:74:ec:69:64:1b:25:66:3f:
                    16:6f:77:02:e9:cb:c9:3a:8c:a1:68:11:14:27:e2:
                    5b:39:df:72:96:4e:8a:f7:68:df:5f:ce:68:32:97:
                    fa:bb:a7:09:65:bd:8b:7c:3a:96:f8:b8:cf:76:39:
                    0e:0f:83:07:c0:16:42:6b:a8:5a:f0:04:09:64:e1:
                    1a:14:8a:74:92:d1:e6:7f:bb:b2:20:68:b7:3c:af:
                    7e:6b:91:15:b3:bb:55:42:fd:42:92:e8:68:e4:d0:
                    e6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E2:38:C7:76:7B:75:35:76:AE:15:36:AB:AA:BE:02:F1:08:BC:33
            X509v3 Authority Key Identifier:
                keyid:7C:A7:41:69:B4:08:61:69:A2:52:39:8A:11:90:E9:5C:5C:0D:5E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d539eaadb795a2b830e947ce29c5c90c539093c4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/dba98f36-155e-492a-a2b3-57bde203c502/497279cb739f477b67c1b69c1a6d8e5954e2558c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/dba98f36-155e-492a-a2b3-57bde203c502/d539eaadb795a2b830e947ce29c5c90c539093c4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.49.168.0/22
                IPv6:
                  2803:97e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         13:fc:c0:8d:c2:f5:b6:f8:0e:8c:33:b7:1d:60:a1:16:03:c8:
         30:19:6d:55:14:07:16:24:36:a0:1d:36:cf:d6:8f:11:42:bd:
         fa:e7:06:b1:5e:70:85:72:f1:08:07:86:45:76:b7:b3:82:09:
         b1:a2:6e:0c:c5:e1:0f:4a:28:e1:59:7b:bb:ac:c7:6e:1b:8e:
         29:77:bf:ef:5f:bf:66:8f:76:72:d6:3b:4f:a5:ec:1b:ba:68:
         48:8b:16:38:e3:0b:27:8e:c1:97:8d:d0:80:be:71:6d:db:84:
         72:6f:59:0d:52:30:9d:8d:ab:aa:b7:18:86:50:97:69:85:d6:
         a5:a5:0f:25:b9:ad:a4:ab:92:f7:d4:49:a5:de:f1:b8:50:a8:
         bd:a0:c3:1a:06:3a:52:3a:e1:a6:8b:ca:15:7c:01:d0:2c:84:
         d0:32:a4:ff:ee:44:1c:2a:65:3c:0c:75:7e:f3:a6:2e:77:db:
         9a:22:e9:3d:18:7a:d3:7d:77:58:74:e4:d4:f5:24:a9:24:15:
         f5:24:e8:c3:0f:3c:9c:02:db:d0:fc:2b:2e:41:b4:91:62:39:
         a8:b2:d6:cf:0a:3b:26:d8:fd:99:ee:8c:7b:7b:a1:0c:e8:52:
         3f:77:89:ef:4f:da:12:eb:81:62:c1:8a:a7:99:da:97:47:49:
         94:bc:1a:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIDEjXsMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKGQ1
MzllYWFkYjc5NWEyYjgzMGU5NDdjZTI5YzVjOTBjNTM5MDkzYzQwHhcNMjMxMTEx
MDczMDAwWhcNMjUxMTEwMDczMDAwWjAzMTEwLwYDVQQDEyg0OTcyNzljYjczOWY0
NzdiNjdjMWI2OWMxYTZkOGU1OTU0ZTI1NThjMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAg/IuqXlhWwMfIUoyvc4sHnyhSewFM6MalsXS+xlKTCevBDvb
G0SkVJikzhKl1J0fZIf9/nZnl1MD3Z/K5VxeqtT+e2ZJi1V17BFPcfosZVfJn31i
e2NrY34YZd7MCB1q+iCAOwJwDzVA59VxmtVi86b5YRIcNqtqipjrl8zq6GFHEtzo
p7ldbqBMl0eXvXGwh1aeSQZ6ceq/3pzgdOxpZBslZj8Wb3cC6cvJOoyhaBEUJ+Jb
Od9ylk6K92jfX85oMpf6u6cJZb2LfDqW+LjPdjkOD4MHwBZCa6ha8AQJZOEaFIp0
ktHmf7uyIGi3PK9+a5EVs7tVQv1Ckuho5NDmPQIDAQABo4ICajCCAmYwHQYDVR0O
BBYEFCXiOMd2e3U1dq4VNquqvgLxCLwzMB8GA1UdIwQYMBaAFHynQWm0CGFpolI5
ihGQ6VxcDV4XMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZDUzOWVh
YWRiNzk1YTJiODMwZTk0N2NlMjljNWM5MGM1MzkwOTNjNC5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZGJhOThmMzYtMTU1ZS00OTJhLWEyYjMtNTdiZGUy
MDNjNTAyLzQ5NzI3OWNiNzM5ZjQ3N2I2N2MxYjY5YzFhNmQ4ZTU5NTRlMjU1OGMu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9kYmE5OGYzNi0xNTVlLTQ5MmEtYTJiMy01N2Jk
ZTIwM2M1MDIvZDUzOWVhYWRiNzk1YTJiODMwZTk0N2NlMjljNWM5MGM1MzkwOTNj
NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEArMxqDANBAIAAjAHAwUAKAOX4DANBgkqhkiG9w0BAQsFAAOC
AQEAE/zAjcL1tvgOjDO3HWChFgPIMBltVRQHFiQ2oB02z9aPEUK9+ucGsV5whXLx
CAeGRXa3s4IJsaJuDMXhD0oo4Vl7u6zHbhuOKXe/71+/Zo92ctY7T6XsG7poSIsW
OOMLJ47Bl43QgL5xbduEcm9ZDVIwnY2rqrcYhlCXaYXWpaUPJbmtpKuS99RJpd7x
uFCovaDDGgY6UjrhpovKFXwB0CyE0DKk/+5EHCplPAx1fvOmLnfbmiLpPRh60313
WHTk1PUkqSQV9SToww88nALb0PwrLkG0kWI5qLLWzwo7Jtj9me6Me3uhDOhSP3eJ
70/aEuuBYsGKp5nal0dJlLwa8g==
-----END CERTIFICATE-----