Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/15b2c34ff751f45f31c849d65156e174a08ecf10.roa
File:                     15b2c34ff751f45f31c849d65156e174a08ecf10.roa (raw, json)
Hash identifier:          E53Oiu9NwpLko06IdLl2f+KIy4SK4pOolyXsRDAsSwQ=
Subject key identifier:   EE:AD:4C:BE:CB:0D:78:CA:5B:E9:14:DC:52:B3:E7:55:33:00:DC:01
Certificate issuer:       /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial:       03C146
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/15b2c34ff751f45f31c849d65156e174a08ecf10.roa
Signing time:             Tue 05 Mar 2024 18:44:18 +0000
ROA not before:           Tue 05 Mar 2024 18:44:18 +0000
ROA not after:            Thu 05 Mar 2026 18:44:18 +0000
asID:                     28000
IP address blocks:        2801:165::/44 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246086 (0x3c146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
        Validity
            Not Before: Mar  5 18:44:18 2024 GMT
            Not After : Mar  5 18:44:18 2026 GMT
        Subject: CN=15b2c34ff751f45f31c849d65156e174a08ecf10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1c:6a:f7:de:4f:81:df:33:80:29:a7:1b:69:
                    05:31:1d:20:7f:e5:46:6c:8a:54:6a:7a:ee:30:f0:
                    d2:15:e7:3a:a4:0e:9b:ae:ec:63:6d:fe:d1:a7:58:
                    bb:fe:ed:41:8e:6a:49:61:e5:a1:52:71:96:9f:a9:
                    9a:1d:ad:4d:32:23:89:f9:a0:57:37:3f:c3:91:a7:
                    5f:3a:f9:68:e7:84:b9:17:d1:d5:9c:93:0e:bb:52:
                    02:37:1f:96:8f:13:f0:6c:a0:56:f0:65:b6:e6:99:
                    25:db:56:d0:07:e7:17:9f:81:aa:43:4a:a2:f2:b4:
                    62:77:53:cb:97:da:da:08:5a:91:63:7b:38:4d:bc:
                    7a:8c:a2:4e:5c:c6:19:ac:39:62:ac:e7:49:44:06:
                    e5:8d:3b:3f:10:d1:50:1a:6c:b6:e4:78:7a:78:bc:
                    4b:94:16:d8:7a:3d:1d:67:f2:8b:d1:a2:ba:8f:26:
                    c5:23:71:87:94:3c:d1:7f:3f:af:93:0c:e5:93:71:
                    cb:19:9a:b0:ef:8e:3e:bb:f4:2b:da:38:ab:5c:1c:
                    4b:02:5a:08:0e:7e:64:ae:e0:c6:5d:7f:84:87:16:
                    8d:ba:c2:05:14:1d:46:44:c1:37:ea:21:51:27:96:
                    fc:0d:da:a8:96:39:61:57:41:c2:58:a6:87:fb:e1:
                    7e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:AD:4C:BE:CB:0D:78:CA:5B:E9:14:DC:52:B3:E7:55:33:00:DC:01
            X509v3 Authority Key Identifier:
                keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/15b2c34ff751f45f31c849d65156e174a08ecf10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:26:81:07:d3:b5:0c:ee:9b:f4:12:fa:87:2d:ab:b0:03:bc:
         22:f0:d3:5d:42:09:3b:bd:8a:1a:34:2c:22:c7:a1:f9:d1:a5:
         c3:c4:2c:cc:cb:09:15:2d:b0:14:f6:2e:32:e7:b3:4b:61:98:
         5a:98:b0:eb:b2:d9:5a:02:e2:37:37:1d:24:69:c1:32:a2:35:
         89:a9:bc:1d:24:88:f4:e5:52:73:0f:dd:1b:6a:18:24:2e:95:
         b9:ae:c4:9d:61:36:a6:b1:23:a8:d6:5d:aa:80:c8:52:54:5b:
         b5:79:06:3f:6e:0a:8b:81:49:35:f2:be:4a:66:a4:64:e6:84:
         26:31:5c:54:9e:d8:8c:eb:0f:e4:a4:0e:bb:60:34:2f:13:98:
         8c:cc:d8:3f:a6:df:68:f3:af:f0:96:71:46:4a:c5:e5:0f:e9:
         95:c2:16:77:b5:a1:11:99:96:79:05:0e:f3:15:5b:74:af:63:
         1b:88:09:67:62:61:00:bf:b9:d2:72:42:b8:50:7a:22:c2:fb:
         9a:a8:87:a3:a5:66:18:7b:34:05:aa:34:9d:18:09:b0:ce:e7:
         55:74:dd:9f:14:6d:bb:bb:f0:c3:c5:af:99:7a:ac:cd:8d:ee:
         30:e6:3a:a0:97:92:7e:4f:66:96:16:09:fb:0c:f1:35:ab:29:
         e5:b3:e7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----