Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e4525e20-39aa-4efe-ae15-d00e680ea224/e2d77a9d1030cd4cea4e82a0cee5ffdf2ed2e80d.roa
File:                     e2d77a9d1030cd4cea4e82a0cee5ffdf2ed2e80d.roa (raw, json)
Hash identifier:          6vX1Kq01wkiaLEYDjEwgbQe/2kiH5T5E/PdGAjhWLhA=
Subject key identifier:   CD:0B:D3:B7:44:B5:9F:8F:3B:62:66:37:30:3A:2E:B6:AA:76:3D:3D
Certificate issuer:       /CN=28f10c441369c1387ed2084a1a987d9f4016969d
Certificate serial:       0D79D0
Authority key identifier: 05:3A:DA:DC:9E:42:28:2A:68:70:16:C8:C0:84:EA:94:6A:A6:0E:50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28f10c441369c1387ed2084a1a987d9f4016969d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e4525e20-39aa-4efe-ae15-d00e680ea224/e2d77a9d1030cd4cea4e82a0cee5ffdf2ed2e80d.roa
Signing time:             Wed 24 Mar 2021 14:34:25 +0000
ROA not before:           Wed 24 Mar 2021 14:34:25 +0000
ROA not after:            Tue 24 Mar 2026 14:34:25 +0000
asID:                     29802
IP address blocks:        179.61.12.0/22 maxlen: 24
                          2803:5c80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883152 (0xd79d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28f10c441369c1387ed2084a1a987d9f4016969d
        Validity
            Not Before: Mar 24 14:34:25 2021 GMT
            Not After : Mar 24 14:34:25 2026 GMT
        Subject: CN=e2d77a9d1030cd4cea4e82a0cee5ffdf2ed2e80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6d:28:96:c3:13:04:f1:50:8b:95:c4:3d:f6:
                    a0:03:77:11:9d:06:26:2d:cc:41:a2:0e:b6:48:8b:
                    4d:fe:09:b1:5e:7d:d9:9a:a9:d4:2a:72:e7:33:ac:
                    21:78:f1:ad:d8:2b:86:74:88:6f:b4:a8:5a:26:59:
                    10:5b:92:00:1e:d5:f7:69:64:0f:3c:b5:a8:cc:41:
                    48:77:5b:76:bd:59:00:9f:35:f8:a2:45:b2:97:0c:
                    86:ed:b3:d8:ef:39:aa:c3:97:53:5f:07:31:ba:34:
                    f3:ff:6b:65:c4:d6:82:f1:4b:24:81:15:9b:92:68:
                    05:bf:c3:54:f8:62:a4:4f:16:54:9f:0f:7a:1f:e0:
                    f7:5e:69:18:f0:76:24:37:85:dd:cd:d4:6d:2b:a8:
                    20:2c:d4:1d:f6:18:79:d4:ef:b3:4a:63:29:e2:eb:
                    10:42:1a:ca:20:58:92:b0:48:a7:73:79:1a:32:f0:
                    24:af:9c:81:a5:02:1c:b9:5a:74:5d:3c:fd:f0:39:
                    22:8a:58:4b:8f:62:2f:77:d4:5c:c0:96:63:bb:f3:
                    9b:93:bc:54:5d:83:46:fa:84:2c:e4:87:1a:d5:f6:
                    95:1a:04:c8:4f:fa:06:ee:94:90:c0:9a:0b:69:29:
                    4c:79:e7:c8:cc:36:43:eb:98:74:1d:85:f1:77:3a:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0B:D3:B7:44:B5:9F:8F:3B:62:66:37:30:3A:2E:B6:AA:76:3D:3D
            X509v3 Authority Key Identifier:
                keyid:05:3A:DA:DC:9E:42:28:2A:68:70:16:C8:C0:84:EA:94:6A:A6:0E:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28f10c441369c1387ed2084a1a987d9f4016969d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e4525e20-39aa-4efe-ae15-d00e680ea224/e2d77a9d1030cd4cea4e82a0cee5ffdf2ed2e80d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e4525e20-39aa-4efe-ae15-d00e680ea224/28f10c441369c1387ed2084a1a987d9f4016969d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.12.0/22
                IPv6:
                  2803:5c80::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:36:3c:71:be:bc:c2:1d:ff:b0:18:fc:f0:24:f7:52:b9:85:
         a1:64:db:47:ef:07:82:1a:88:b7:de:57:7f:51:b3:e3:c3:97:
         18:ae:ef:75:18:fe:b9:b9:77:cf:fb:8f:25:21:64:34:c1:1e:
         d7:8f:38:f0:ec:0e:4b:83:06:af:ac:31:d1:a4:dc:08:31:fe:
         d0:02:8b:cc:85:c3:cd:ad:7d:dd:ad:fa:5c:b5:07:22:59:02:
         eb:86:c0:f4:63:2f:fd:54:c8:f9:6e:35:fa:d8:18:6f:68:0c:
         d2:21:a9:58:ad:a6:67:dd:97:ad:e4:7a:a2:d1:64:60:47:f7:
         d5:92:ae:69:b7:b4:de:f5:aa:32:1a:69:94:e2:80:e0:42:43:
         99:f2:6d:83:d7:55:68:ad:42:e2:f8:1c:81:3e:01:c1:b7:da:
         51:01:e8:9b:3e:72:17:11:70:5b:31:8e:cd:26:1f:36:1b:66:
         5d:2b:6c:6c:1f:cb:49:67:bb:9e:8c:16:a4:fd:4e:bb:78:b9:
         fd:d9:0a:38:b5:5f:a7:25:ec:96:4d:ce:94:34:40:f9:03:ba:
         ba:d7:68:19:65:2c:36:fe:77:33:d2:06:ee:dc:b1:95:d8:44:
         94:c8:34:8a:60:01:59:b3:ba:72:59:f6:6a:80:46:35:a3:1d:
         36:ec:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----