Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ed67b551-447e-49a8-86f9-24b79871c56b/968ef7e9c6e40332159e01b83f28279f1867856c.roa
File:                     968ef7e9c6e40332159e01b83f28279f1867856c.roa (raw, json)
Hash identifier:          rCZgl4/dXD6z25PaeNl2KjZnEGNRS/e4fyASSsas5U0=
Subject key identifier:   85:EB:7B:2A:CB:05:AA:C9:28:F8:90:81:33:D6:A8:EC:80:C6:99:0C
Certificate issuer:       /CN=370e9f4dda74e99161b7878bd59c4f9e02ba4af1
Certificate serial:       0BA33A
Authority key identifier: F8:E8:EE:A4:7D:AC:20:74:4E:73:07:96:CC:2E:49:37:95:AF:C6:D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/370e9f4dda74e99161b7878bd59c4f9e02ba4af1.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ed67b551-447e-49a8-86f9-24b79871c56b/968ef7e9c6e40332159e01b83f28279f1867856c.roa
Signing time:             Wed 24 Mar 2021 14:32:29 +0000
ROA not before:           Wed 24 Mar 2021 14:32:29 +0000
ROA not after:            Tue 24 Mar 2026 14:32:29 +0000
asID:                     52352
IP address blocks:        179.51.224.0/20 maxlen: 24
                          190.15.80.0/20 maxlen: 24
                          2803:e480::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762682 (0xba33a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370e9f4dda74e99161b7878bd59c4f9e02ba4af1
        Validity
            Not Before: Mar 24 14:32:29 2021 GMT
            Not After : Mar 24 14:32:29 2026 GMT
        Subject: CN=968ef7e9c6e40332159e01b83f28279f1867856c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a4:a2:6d:33:07:c6:31:eb:f1:71:2a:7d:1f:
                    fb:3f:96:fa:8e:52:c3:97:46:82:56:db:10:61:4d:
                    cb:15:1b:57:d9:99:52:64:0b:c0:f2:bd:08:bc:18:
                    14:29:40:72:39:b9:d2:a7:54:4c:88:0f:01:c9:50:
                    2f:4d:3d:52:75:47:03:75:35:08:ef:ed:12:4e:03:
                    ec:9b:1f:2a:66:23:8c:20:5f:51:fd:07:19:f9:fd:
                    5c:24:c6:49:cf:0f:7a:51:ec:36:1a:b7:5a:06:20:
                    5d:45:20:d5:23:1d:c0:0b:ad:73:2b:ad:22:e0:55:
                    27:b4:ec:09:87:71:09:62:b6:2e:e0:72:8c:e5:d7:
                    e3:ca:9e:06:fe:29:80:16:40:a5:d4:3a:54:5f:98:
                    6d:cf:2c:74:37:a4:94:71:dd:ee:9b:fd:bb:57:49:
                    2e:76:0b:bf:85:87:26:fc:08:98:fc:19:38:94:2b:
                    ca:71:54:43:30:84:0c:cc:d1:90:82:23:92:1a:4e:
                    87:d9:a0:ae:99:39:8d:3e:77:98:7e:d3:35:2b:8a:
                    5f:5e:37:db:63:a1:58:39:53:73:8d:d4:b4:e3:e4:
                    17:ee:51:8e:1c:5c:dd:13:24:25:87:94:79:26:5b:
                    77:4f:98:ad:f4:28:4d:96:5a:86:8a:a7:10:64:ef:
                    36:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EB:7B:2A:CB:05:AA:C9:28:F8:90:81:33:D6:A8:EC:80:C6:99:0C
            X509v3 Authority Key Identifier:
                keyid:F8:E8:EE:A4:7D:AC:20:74:4E:73:07:96:CC:2E:49:37:95:AF:C6:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/370e9f4dda74e99161b7878bd59c4f9e02ba4af1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ed67b551-447e-49a8-86f9-24b79871c56b/968ef7e9c6e40332159e01b83f28279f1867856c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ed67b551-447e-49a8-86f9-24b79871c56b/370e9f4dda74e99161b7878bd59c4f9e02ba4af1.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.224.0/20
                  190.15.80.0/20
                IPv6:
                  2803:e480::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:5e:0f:79:17:79:bc:84:dc:80:26:18:47:5c:71:aa:f0:ff:
         8f:47:8f:0f:fc:bf:d5:22:5e:87:7d:60:c1:e0:65:46:f6:6b:
         47:ce:3d:e0:17:81:91:5d:01:03:4b:01:67:86:04:66:3c:61:
         4a:34:bd:99:3f:38:a8:a1:e1:cb:67:a6:b6:89:cf:e4:51:31:
         ce:32:12:a5:74:2d:54:98:de:30:db:6b:07:63:ab:73:2e:ff:
         d1:71:bb:4c:63:d3:16:d9:99:37:23:5c:f0:48:f1:15:a6:bc:
         ad:fb:39:b0:ab:f2:9e:39:48:e6:87:30:ba:6f:7a:b6:a5:5e:
         9c:29:eb:e9:92:11:f4:a4:c2:b8:61:a8:bd:06:e0:de:68:cc:
         9e:de:ed:3a:19:98:a3:c5:11:81:08:5a:5f:5b:7e:be:e6:16:
         d2:4d:99:a7:91:f9:06:9a:23:23:30:9f:7f:7b:ad:41:74:64:
         fe:fa:c8:f9:bd:35:86:e2:5a:27:98:3d:7f:c6:8a:03:d9:f4:
         39:c9:91:3e:7d:64:3e:79:f6:a2:b3:bb:0d:f9:f2:02:77:16:
         1b:77:a2:aa:94:0c:10:d2:20:8e:a5:5c:df:1c:fe:54:85:15:
         6f:71:fc:9d:63:42:7e:16:84:da:79:25:1e:33:c2:8d:31:b5:
         c8:2e:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----