Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/20cffaf55a87db53f035be3b7b859dd8a8e608f8.roa
File:                     20cffaf55a87db53f035be3b7b859dd8a8e608f8.roa (raw, json)
Hash identifier:          xTt+AgDzdqfxfq0vSF6AAVvJgKCCvnAfUNWTNWpl2WQ=
Subject key identifier:   2C:AF:54:11:8F:53:17:45:AB:06:C0:0E:12:57:4F:08:AF:69:49:8D
Certificate issuer:       /CN=a7f9ed94b559a4db41aea1589c5195ae51090fc5
Certificate serial:       6F82
Authority key identifier: 8C:06:AE:3D:3B:08:9B:E7:72:62:7F:59:34:43:28:2C:E3:19:E0:C1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7f9ed94b559a4db41aea1589c5195ae51090fc5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/20cffaf55a87db53f035be3b7b859dd8a8e608f8.roa
Signing time:             Mon 31 Jul 2023 11:57:57 +0000
ROA not before:           Sun 30 Jul 2023 11:57:57 +0000
ROA not after:            Thu 31 Jul 2025 11:57:57 +0000
asID:                     52318
IP address blocks:        2801:1f:7000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28546 (0x6f82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f9ed94b559a4db41aea1589c5195ae51090fc5
        Validity
            Not Before: Jul 30 11:57:57 2023 GMT
            Not After : Jul 31 11:57:57 2025 GMT
        Subject: CN=20cffaf55a87db53f035be3b7b859dd8a8e608f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:58:bc:4d:3b:7f:fe:dc:8b:e6:d4:19:7c:f9:
                    f8:b3:73:37:ce:64:be:b5:2b:3c:27:29:1d:71:74:
                    f6:4d:d7:6d:d8:7d:a3:b5:8c:a3:e0:8f:47:1a:5b:
                    fd:9d:37:4b:fb:5c:bd:17:0e:e3:8b:0a:2a:ca:ca:
                    86:ff:94:95:bc:41:c1:60:92:e2:41:99:3d:96:79:
                    2c:1b:1b:ce:de:fd:e3:ff:b6:e4:b3:da:f8:ee:cd:
                    1b:cf:c9:f0:d2:2b:de:b4:e9:b3:25:7a:5a:b4:84:
                    2f:6c:3f:cf:81:8a:5f:89:7a:58:8b:21:3b:df:31:
                    5b:75:4f:21:16:63:cc:3d:ec:9b:2a:90:ed:4f:70:
                    81:7a:ac:81:27:50:ef:c3:1a:d4:30:5b:55:32:57:
                    09:3f:81:36:f2:67:05:ef:d3:3c:a7:c6:23:44:65:
                    68:6c:63:b0:e2:8a:ef:14:5a:8c:0d:16:8e:9d:42:
                    58:e4:0d:13:1f:a5:4c:8a:22:15:1a:ed:4f:01:86:
                    2d:55:98:5f:12:78:32:e5:f3:3a:fc:d3:29:f9:e4:
                    95:de:22:44:4b:31:ba:35:91:9c:de:47:a2:72:c0:
                    58:54:d9:4f:f2:51:26:00:39:f7:e2:df:47:af:26:
                    a3:6d:80:02:52:16:4c:10:0c:c6:24:08:97:a3:2a:
                    d4:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:AF:54:11:8F:53:17:45:AB:06:C0:0E:12:57:4F:08:AF:69:49:8D
            X509v3 Authority Key Identifier:
                keyid:8C:06:AE:3D:3B:08:9B:E7:72:62:7F:59:34:43:28:2C:E3:19:E0:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7f9ed94b559a4db41aea1589c5195ae51090fc5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/20cffaf55a87db53f035be3b7b859dd8a8e608f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/a7f9ed94b559a4db41aea1589c5195ae51090fc5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:ab:d0:c1:26:c7:0b:6e:28:b9:84:02:9c:b9:0a:70:39:fc:
         59:5a:e4:e3:34:ed:d3:44:53:35:96:b3:5b:32:d2:f5:24:44:
         98:21:8b:1f:b0:a7:2c:79:c3:bd:41:02:35:4d:09:65:cd:da:
         12:64:40:d8:fa:9f:6a:d3:cd:7d:90:cb:b3:ef:11:71:9d:70:
         93:db:35:9b:0b:f8:13:36:46:61:3b:53:ce:5d:68:1f:57:27:
         1f:77:6b:12:51:8e:57:15:5d:71:a2:2a:9a:9f:5e:49:8d:a8:
         95:5a:a1:20:8a:44:9b:01:86:84:23:e5:a1:f4:be:5f:3c:5f:
         d1:2d:7a:4d:f0:9d:f5:d6:b4:4f:78:98:f1:a2:51:f3:4b:2d:
         22:b7:f2:bf:2a:45:ea:5d:bb:8e:41:6b:28:2d:7f:cf:8d:41:
         0f:79:13:8e:c8:46:e0:72:db:e2:92:25:b8:fe:d5:5f:1c:0e:
         80:31:a6:ee:f6:24:b9:bf:de:9e:8b:45:1d:f7:83:88:05:2d:
         5a:b4:c2:b3:d4:cb:99:e9:99:b9:91:30:81:bd:04:63:95:b7:
         b6:9b:77:7e:23:24:57:3d:a4:86:15:16:f1:7f:23:fd:c7:ab:
         f8:37:b9:8a:07:62:56:28:87:b7:51:97:2f:f2:2c:3f:e3:08:
         54:63:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----