Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/6cf704b6aee947e3f360b350d7916414fbb563df.roa
File:                     6cf704b6aee947e3f360b350d7916414fbb563df.roa (raw, json)
Hash identifier:          7/gPzA6Rbt6SgXKP3eV1BP4ErnI8DSC+As+dgd+1yFQ=
Subject key identifier:   A4:BF:60:9D:FE:42:B5:2E:98:0B:56:C2:8B:71:4E:BB:1B:C3:71:F5
Certificate issuer:       /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial:       0479E7
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/6cf704b6aee947e3f360b350d7916414fbb563df.roa
Signing time:             Sat 06 Apr 2024 22:30:13 +0000
ROA not before:           Sat 06 Apr 2024 22:30:12 +0000
ROA not after:            Mon 06 Apr 2026 22:30:12 +0000
asID:                     28001
IP address blocks:        2801:165:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293351 (0x479e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
        Validity
            Not Before: Apr  6 22:30:12 2024 GMT
            Not After : Apr  6 22:30:12 2026 GMT
        Subject: CN=6cf704b6aee947e3f360b350d7916414fbb563df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:29:87:fe:94:95:34:af:49:74:0e:0d:f9:1c:
                    c8:98:90:b8:1c:65:5b:86:e0:c1:fb:42:ba:f4:43:
                    17:63:9d:e6:9c:23:81:58:18:e3:ed:ac:db:1d:24:
                    b8:2b:2d:ae:48:ec:df:06:1b:57:34:0d:52:e7:e0:
                    8a:7d:c5:da:5f:af:77:08:78:cb:42:a7:b2:25:1a:
                    d4:b3:26:f9:40:74:b0:ed:4e:64:0e:00:d7:94:44:
                    d3:5b:7a:90:d2:5d:49:7f:2b:2b:b7:0f:cf:4d:0a:
                    5e:dd:70:09:3a:d0:db:a3:0c:52:09:f7:f7:5a:a4:
                    a8:10:3b:84:d6:8a:5c:14:d8:ac:cb:37:82:be:2b:
                    55:0e:b1:b1:a3:e0:9e:26:c8:7b:5d:6f:15:ad:09:
                    11:6e:2c:5b:70:b8:25:53:65:8a:aa:e2:77:27:09:
                    27:f7:a7:22:53:ac:4b:7c:a4:f5:19:7d:79:d6:c1:
                    94:86:b3:6e:29:85:2a:bd:0f:cd:fe:94:e6:0a:ce:
                    bd:d4:20:f1:d8:9a:a3:44:01:83:96:49:29:13:7e:
                    76:76:d9:73:50:ca:fe:7b:70:f3:3f:ee:23:8b:7d:
                    f9:c0:34:96:b1:20:6c:31:c6:10:59:78:b4:d9:75:
                    6c:63:d2:73:ac:ed:a7:cc:8c:49:b7:08:8a:84:d1:
                    fa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:BF:60:9D:FE:42:B5:2E:98:0B:56:C2:8B:71:4E:BB:1B:C3:71:F5
            X509v3 Authority Key Identifier:
                keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/6cf704b6aee947e3f360b350d7916414fbb563df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:08:09:59:46:6d:09:33:f5:11:b0:44:ab:44:d0:66:38:8d:
         99:fb:17:89:44:ee:ad:50:ed:27:51:35:1e:66:58:33:73:4f:
         29:37:af:4c:6f:e8:bb:13:a0:d0:41:60:72:80:6b:60:82:15:
         c8:31:3b:0f:34:30:a3:54:d1:30:00:a1:ec:0c:9a:7e:ad:c0:
         0e:fd:09:01:51:0e:39:72:1f:7d:6f:5d:0f:02:80:c1:a8:73:
         3f:73:80:b5:7f:f1:58:c9:88:eb:30:c3:b8:6f:d2:40:d6:ff:
         25:ed:3d:8a:33:56:42:68:f3:39:db:e8:c6:9e:c9:9c:47:56:
         9f:c7:29:cd:2e:e8:33:20:11:a3:7f:29:05:20:10:05:28:e9:
         6b:ca:6a:9e:bc:83:a9:75:57:a1:da:b5:d8:46:41:a4:71:15:
         d7:cf:8e:6a:4e:8d:0a:24:6c:2b:a2:70:30:5f:18:a6:08:2d:
         cb:4e:3c:f7:ef:66:5c:7b:73:12:13:84:79:a8:05:51:66:32:
         d0:b5:d1:b0:0c:91:83:69:5d:02:79:fa:fb:1e:d6:b8:0d:6f:
         13:91:a1:8d:97:e4:5c:a7:1b:38:eb:7b:83:88:91:8e:7a:a2:
         d2:bc:80:c0:a3:41:59:d5:c5:1d:af:59:e3:79:d0:27:ee:42:
         95:f8:90:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----