Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/cf8d5ef617f75f648c4e19f9062c3d62e399b5a3.roa
File:                     cf8d5ef617f75f648c4e19f9062c3d62e399b5a3.roa (raw, json)
Hash identifier:          DUnPm5vv0x4sHyulZH71jrAHWNlgHv6Cwd9i6fZSQQw=
Subject key identifier:   1C:73:93:1B:E0:59:DE:20:C8:3B:F2:ED:01:B5:C0:A1:60:9D:50:25
Certificate issuer:       /CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
Certificate serial:       0FEE19
Authority key identifier: EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/cf8d5ef617f75f648c4e19f9062c3d62e399b5a3.roa
Signing time:             Thu 27 Oct 2022 11:24:13 +0000
ROA not before:           Mon 28 Jun 2021 03:00:00 +0000
ROA not after:            Thu 29 Jun 2023 03:00:00 +0000
asID:                     27775
IP address blocks:        186.179.128.0/17 maxlen: 24
                          190.98.0.0/19 maxlen: 19
                          190.98.32.0/19 maxlen: 24
                          190.98.64.0/19 maxlen: 19
                          190.98.96.0/19 maxlen: 24
                          200.1.156.0/22 maxlen: 24
                          200.2.160.0/20 maxlen: 24
                          200.2.176.0/20 maxlen: 24
                          2803:a200::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043993 (0xfee19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f073dc50d388f5e4b8416173329e5c9fb55bacc
        Validity
            Not Before: Jun 28 03:00:00 2021 GMT
            Not After : Jun 29 03:00:00 2023 GMT
        Subject: CN=cf8d5ef617f75f648c4e19f9062c3d62e399b5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:31:f7:ee:b3:93:9d:b0:12:2e:11:f9:67:ed:
                    a1:3d:82:df:26:23:b5:1e:38:89:90:7b:8c:be:f0:
                    e1:58:7a:28:fe:57:0e:a9:1d:df:a3:fa:e4:68:11:
                    bc:59:55:c9:47:03:c5:a7:1c:2b:23:1e:a1:8d:2a:
                    c2:32:7e:ff:80:e6:2e:86:81:10:06:dd:fa:e2:07:
                    2a:db:23:10:27:9c:8e:9f:cf:b0:bf:fd:44:88:7a:
                    9c:be:bc:58:5b:ed:c5:3f:44:c3:f8:38:71:e3:f0:
                    4e:ac:7d:f4:1d:e0:f0:82:47:e5:a0:93:06:a0:26:
                    ca:50:e0:54:b1:9b:8c:ae:ec:69:47:a1:4a:c6:e5:
                    29:90:0f:34:bd:64:7e:fd:54:b4:f1:31:0f:61:c1:
                    4b:4b:95:37:02:72:4a:4d:91:b2:52:8d:71:f9:2f:
                    8d:21:6a:15:5e:9d:01:ae:53:71:dc:59:94:91:21:
                    3e:ca:fb:e3:d8:7a:65:33:bb:fe:05:42:fc:1f:c7:
                    51:45:73:f2:70:5c:17:5b:67:f0:fc:05:e9:0b:02:
                    ed:14:48:ae:56:b1:76:6c:1d:5a:a1:e6:0a:41:d3:
                    48:19:ad:98:7f:f2:23:1e:93:cd:70:5d:c7:13:70:
                    e6:34:b2:39:c1:3d:b8:c8:b6:2d:f5:12:6f:2c:96:
                    21:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:73:93:1B:E0:59:DE:20:C8:3B:F2:ED:01:B5:C0:A1:60:9D:50:25
            X509v3 Authority Key Identifier:
                keyid:EF:AB:01:33:53:10:96:46:AD:AC:A4:AD:C5:98:DC:A7:44:43:45:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f073dc50d388f5e4b8416173329e5c9fb55bacc.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/cf8d5ef617f75f648c4e19f9062c3d62e399b5a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ebb71da9-3808-4d00-a943-589240d78385/5f073dc50d388f5e4b8416173329e5c9fb55bacc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.179.128.0/17
                  190.98.0.0/17
                  200.1.156.0/22
                  200.2.160.0/19
                IPv6:
                  2803:a200::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:48:30:cc:9e:c6:92:d0:a1:ed:e8:ea:11:ec:2b:b3:cd:da:
         bf:5e:25:bc:50:13:60:52:9a:05:ac:7f:ca:6f:16:06:d7:dc:
         03:c4:59:ec:63:3d:ce:0c:e4:68:c1:6e:65:34:4c:ec:aa:0e:
         af:48:d1:86:7b:91:87:54:02:86:a4:be:1c:d0:cd:d5:18:b4:
         ca:86:c3:6f:2c:66:42:5a:00:54:a0:3c:52:d5:9f:f0:4f:9d:
         62:89:30:fc:54:5a:5f:13:94:a7:57:a3:fe:21:18:49:48:59:
         33:b1:90:40:9a:25:e2:5d:26:b0:80:37:dc:62:d6:7d:e7:b1:
         ac:53:6d:e7:91:b0:a4:22:56:23:9b:f3:c7:38:e7:bd:58:3a:
         91:9f:7c:b9:30:2e:59:5d:3d:05:d9:a9:6b:95:8c:4d:02:1a:
         ca:f0:e4:78:31:03:00:89:bd:e2:a2:14:34:88:fd:47:f6:18:
         5d:4e:be:dd:ae:d5:81:1a:c2:48:ff:ed:95:d3:9d:5f:e1:52:
         9b:8a:00:64:2d:9a:a9:b2:94:01:64:d5:cc:eb:51:ac:dc:3c:
         6a:c5:1b:8f:79:6b:e0:ed:4d:e3:56:6e:fb:96:74:ad:f7:56:
         0b:e9:79:b6:ca:68:48:04:ac:df:97:13:01:d9:3f:5d:c1:31:
         d4:27:8f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----