Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/79e82a1f2427a81e418bfa6037100cd326350a88.roa
File:                     79e82a1f2427a81e418bfa6037100cd326350a88.roa (raw, json)
Hash identifier:          D+5+CbBnxoFJKpTzXGIingBTq3P7KnjQnPQSqu3UAaM=
Subject key identifier:   80:8A:3C:94:A8:8F:6B:59:12:BD:33:0F:9B:A9:13:79:D9:C4:24:01
Certificate issuer:       /CN=47ff109e1e2041257e445750def18c70c17d1e60
Certificate serial:       0D7103
Authority key identifier: 75:8D:8E:4D:EB:36:D6:6A:C8:EA:EC:36:78:7E:18:CF:FD:B4:45:27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47ff109e1e2041257e445750def18c70c17d1e60.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/79e82a1f2427a81e418bfa6037100cd326350a88.roa
Signing time:             Wed 24 Mar 2021 14:32:30 +0000
ROA not before:           Wed 24 Mar 2021 14:32:29 +0000
ROA not after:            Tue 24 Mar 2026 14:32:29 +0000
asID:                     27865
IP address blocks:        170.239.28.0/22 maxlen: 24
                          2803:4a80::/34 maxlen: 35
                          2803:4a80:8000::/34 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880899 (0xd7103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ff109e1e2041257e445750def18c70c17d1e60
        Validity
            Not Before: Mar 24 14:32:29 2021 GMT
            Not After : Mar 24 14:32:29 2026 GMT
        Subject: CN=79e82a1f2427a81e418bfa6037100cd326350a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f8:2c:75:99:af:9b:03:59:8a:d0:3e:8e:43:
                    b2:64:64:c3:31:ae:2e:91:2a:1d:e2:36:72:8d:be:
                    54:37:6f:19:b0:98:05:df:f1:9f:4b:ad:e4:fb:c8:
                    88:4f:b3:ae:bb:54:80:bf:51:b8:81:26:ca:35:99:
                    b6:2d:57:ba:f6:38:5c:db:ab:8b:2a:89:35:17:db:
                    33:c9:de:2d:87:26:65:cc:cd:ee:f9:d1:af:5d:f3:
                    10:cd:f7:9e:af:17:a8:9d:e0:c9:a7:4d:03:d4:ab:
                    87:3c:51:66:5f:4b:dc:82:7c:76:a7:b1:6e:29:3a:
                    86:9d:11:1f:d9:c8:9b:08:f5:e4:ec:e9:21:45:38:
                    c1:91:bb:96:95:e9:4a:bc:1e:e6:4d:7a:08:78:78:
                    3f:b5:5f:1d:10:dd:96:47:b0:6d:56:15:12:f9:2c:
                    73:a2:43:58:68:73:b0:10:92:b2:74:ec:0c:94:31:
                    49:8d:d8:48:51:7f:7e:6f:48:68:1c:35:01:6f:95:
                    24:fa:ea:6c:f9:53:48:24:3b:63:58:64:f4:e5:86:
                    ab:d2:22:ed:ba:a7:ac:d9:71:b2:43:b2:6a:15:19:
                    7e:7e:66:b5:ef:27:58:62:5b:36:df:73:a9:d9:56:
                    0c:c9:c3:ac:60:e5:a8:cb:dc:a5:e3:e9:9b:5b:be:
                    e9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8A:3C:94:A8:8F:6B:59:12:BD:33:0F:9B:A9:13:79:D9:C4:24:01
            X509v3 Authority Key Identifier:
                keyid:75:8D:8E:4D:EB:36:D6:6A:C8:EA:EC:36:78:7E:18:CF:FD:B4:45:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47ff109e1e2041257e445750def18c70c17d1e60.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/79e82a1f2427a81e418bfa6037100cd326350a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/e8647f29-b541-4070-a10d-51c969a68008/47ff109e1e2041257e445750def18c70c17d1e60.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.28.0/22
                IPv6:
                  2803:4a80::/34
                  2803:4a80:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         06:fd:9f:19:4b:97:cb:7c:9c:5e:ee:ac:9d:f3:43:1c:89:be:
         fe:1a:4f:3a:02:16:06:9d:5e:4c:4d:e0:93:a3:3d:dd:87:4f:
         77:2c:cf:40:22:57:27:d9:6f:be:8b:26:a3:f5:0d:5f:60:61:
         f2:0d:75:b6:d8:3e:8e:6f:ed:f0:ec:5f:1d:8f:65:b2:9d:8c:
         97:83:f7:6f:82:60:a1:45:22:aa:17:db:c9:56:0e:36:63:e0:
         0b:77:d1:69:0e:4e:8b:1c:af:f2:73:b0:0c:30:cf:a2:06:a3:
         68:3c:67:4f:94:e7:0a:0f:8a:c4:ca:ed:6c:52:93:17:1d:80:
         43:35:87:44:09:ce:15:b3:2f:8a:40:68:51:4e:19:a0:2b:8a:
         14:0a:6e:f1:13:3c:bc:a9:b2:f2:f2:cc:7f:a4:42:8d:43:16:
         24:c6:9b:c4:dc:41:9c:be:c4:f6:1e:29:c8:29:1a:8a:e7:a9:
         72:c6:0d:17:bf:d1:e6:c6:e8:23:23:99:6b:ad:b1:7a:bb:ca:
         85:e2:67:10:ed:87:97:43:9d:4c:83:f8:3d:2b:3c:90:fe:fe:
         b0:f3:0b:06:b1:39:81:3d:fc:16:fa:04:cc:06:3f:44:dc:12:
         26:67:80:92:91:ae:7d:7f:45:bd:b9:97:1b:8d:e7:c0:98:02:
         be:57:4b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----