Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e55f40b0-8130-421a-ad91-1e91c950fd62/61370d2e66b2a69b05eb7bcef92657f17b87547e.roa
File:                     61370d2e66b2a69b05eb7bcef92657f17b87547e.roa (raw, json)
Hash identifier:          ZoFjbOHjkKCXBGXMTg+vTLocAtx9VVCmDuCvM8bDOPU=
Subject key identifier:   CC:DF:D0:C9:6B:25:EE:7C:56:F7:1C:9D:B4:64:D3:F3:6C:E9:B9:74
Certificate issuer:       /CN=bb5a270d24e9a7e70b31e2a8022272af60ae7030
Certificate serial:       202A5F
Authority key identifier: E7:65:F2:16:DD:BC:8E:9C:31:A4:C6:2E:6D:98:E2:27:7F:C0:B9:AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb5a270d24e9a7e70b31e2a8022272af60ae7030.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e55f40b0-8130-421a-ad91-1e91c950fd62/61370d2e66b2a69b05eb7bcef92657f17b87547e.roa
Signing time:             Fri 26 May 2023 08:30:00 +0000
ROA not before:           Thu 25 May 2023 08:30:00 +0000
ROA not after:            Sat 24 May 2025 08:30:00 +0000
asID:                     27817
IP address blocks:        179.0.29.0/24 maxlen: 24
                          2801:0:480::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2107999 (0x202a5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb5a270d24e9a7e70b31e2a8022272af60ae7030
        Validity
            Not Before: May 25 08:30:00 2023 GMT
            Not After : May 24 08:30:00 2025 GMT
        Subject: CN=61370d2e66b2a69b05eb7bcef92657f17b87547e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c1:97:0d:f7:ea:6e:89:05:9b:76:9d:fd:8c:
                    32:a4:6a:61:7e:62:4e:41:77:4a:89:9b:40:21:a4:
                    94:c3:5e:0d:05:13:fa:23:7f:89:a7:97:63:f0:6b:
                    aa:6f:be:ea:2d:4a:04:f2:93:f2:b9:a8:e9:7f:85:
                    d4:b6:fa:2f:1a:40:c3:b9:18:96:81:41:68:35:15:
                    11:e0:c7:20:46:6f:1b:2b:b1:3a:9a:45:1f:5c:d4:
                    8c:ac:74:5e:03:05:32:aa:46:ea:db:ab:05:d4:36:
                    13:d2:2f:e9:11:5f:a2:f4:ff:54:ea:5a:28:5e:e6:
                    56:62:de:ae:5b:63:01:3d:3c:39:e7:bb:43:94:33:
                    8f:d4:55:34:a4:df:b4:0a:07:2a:06:a2:83:05:49:
                    f5:70:5c:55:a3:9c:95:fc:3a:45:bd:0b:2f:93:f3:
                    86:57:4c:7c:1a:38:9a:0e:97:79:6a:c8:cc:46:90:
                    7d:82:95:52:bf:63:bd:bf:04:55:33:6b:06:b3:6f:
                    91:88:26:9c:c0:08:6b:18:b9:9a:53:19:5c:8f:24:
                    d0:3f:3c:a5:d7:71:47:49:27:9d:f3:a0:99:25:22:
                    ee:18:90:cb:6c:ca:a2:00:0e:43:d0:40:fd:ab:d9:
                    3c:c8:47:e2:34:41:00:f1:ba:e7:d6:33:9c:0f:f3:
                    40:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DF:D0:C9:6B:25:EE:7C:56:F7:1C:9D:B4:64:D3:F3:6C:E9:B9:74
            X509v3 Authority Key Identifier:
                keyid:E7:65:F2:16:DD:BC:8E:9C:31:A4:C6:2E:6D:98:E2:27:7F:C0:B9:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb5a270d24e9a7e70b31e2a8022272af60ae7030.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e55f40b0-8130-421a-ad91-1e91c950fd62/61370d2e66b2a69b05eb7bcef92657f17b87547e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e55f40b0-8130-421a-ad91-1e91c950fd62/bb5a270d24e9a7e70b31e2a8022272af60ae7030.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.29.0/24
                IPv6:
                  2801:0:480::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:c4:3f:7f:f1:55:4e:c0:03:b3:96:46:5a:98:51:b8:87:91:
         9d:e2:cd:10:c3:68:2a:3d:4f:b4:36:72:a7:47:5b:b5:ab:06:
         6d:6e:73:61:c0:92:df:15:ac:76:ad:02:dd:de:71:9b:c1:b6:
         73:34:aa:21:fe:b8:17:34:7e:1d:81:90:28:47:86:eb:5a:8a:
         58:65:20:56:ff:50:10:74:4e:37:a6:ab:5b:61:6c:e8:5b:00:
         7a:08:1c:dd:f3:7c:c1:ef:9b:b8:7d:56:12:e8:61:70:20:d3:
         68:c1:d9:24:61:1c:e2:a5:06:a3:c4:f2:bb:08:61:ba:6d:44:
         96:30:46:ab:79:c7:b7:08:6e:55:e7:5e:c5:33:28:5b:a9:26:
         8f:cf:15:8c:84:e6:9a:47:12:3f:12:df:02:95:71:34:94:08:
         8f:80:c3:18:f7:c3:c7:46:95:c2:0d:d8:fd:08:62:d3:0c:cc:
         51:8d:a7:80:ca:96:61:d6:c4:ed:e2:1b:9a:fe:63:eb:a9:f7:
         cb:61:c6:45:23:16:2a:62:6f:02:ff:00:88:37:0f:ea:e3:41:
         43:70:e7:1b:fd:81:ea:e1:c2:75:5f:08:2f:d5:bf:93:cc:76:
         23:00:b9:f6:27:51:a2:9d:31:e0:47:7c:97:48:2e:94:45:0e:
         59:8a:58:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----