Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/10b71641-b916-4e28-9165-33fbea87fc5c/f1a0f28fac23855af04650ebd491ccd66ce18517.roa
File:                     f1a0f28fac23855af04650ebd491ccd66ce18517.roa (raw, json)
Hash identifier:          ++QfiuAVf0MkLX2LjInpw6kzbV+XfmlbzZG0ScvblYI=
Subject key identifier:   7A:F6:BB:8F:83:13:A6:5E:D1:42:89:BC:A5:EB:1E:AB:C3:E5:80:F1
Certificate issuer:       /CN=fb54a78ebdf0134483aeb5963dd44a0f7049562c
Certificate serial:       8479
Authority key identifier: 26:0C:1A:63:1E:17:A1:E5:BB:4E:E5:83:90:89:86:02:E0:01:AF:2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb54a78ebdf0134483aeb5963dd44a0f7049562c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/10b71641-b916-4e28-9165-33fbea87fc5c/f1a0f28fac23855af04650ebd491ccd66ce18517.roa
Signing time:             Fri 22 Sep 2023 03:47:15 +0000
ROA not before:           Thu 21 Sep 2023 03:47:15 +0000
ROA not after:            Mon 22 Sep 2025 03:47:15 +0000
asID:                     272322
IP address blocks:        2806:40e::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33913 (0x8479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb54a78ebdf0134483aeb5963dd44a0f7049562c
        Validity
            Not Before: Sep 21 03:47:15 2023 GMT
            Not After : Sep 22 03:47:15 2025 GMT
        Subject: CN=f1a0f28fac23855af04650ebd491ccd66ce18517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1a:56:15:42:3a:fe:49:4a:9b:47:f8:2a:56:
                    0b:21:fa:20:7c:8f:67:ff:50:5d:6f:0f:d2:61:2a:
                    a0:39:55:c4:fc:ea:24:e8:b8:40:1e:5f:92:58:1d:
                    41:cd:51:e9:0a:a7:21:96:fe:29:7f:a3:ff:73:31:
                    42:ca:bb:21:1c:ad:31:db:2a:af:a2:3c:23:c0:0b:
                    c3:af:a4:b4:e5:34:00:24:a9:08:00:3a:be:63:98:
                    d6:09:18:27:35:5c:09:04:85:e1:c8:ae:d5:80:ea:
                    ad:34:e2:f5:2c:1d:aa:b2:68:35:ff:49:45:62:eb:
                    c7:45:fb:22:5a:cb:d5:89:e5:6a:b5:80:21:fa:e3:
                    77:eb:18:1f:19:34:b1:05:ff:9a:4a:c0:19:91:bd:
                    2d:b2:76:1e:ad:5c:1b:40:e2:cf:ae:4c:fd:e3:76:
                    92:86:09:9b:c1:88:7a:e6:a6:c2:35:06:2a:78:66:
                    f5:c4:f6:40:da:10:83:fa:3d:6d:69:5a:21:a6:73:
                    3b:b5:72:a3:a9:b2:3f:17:7d:e3:e8:a4:19:7f:13:
                    18:ca:28:b7:3a:3b:ab:93:0d:30:72:66:4b:ea:c0:
                    06:d9:41:fb:04:48:31:50:4e:a5:f2:c8:3a:d5:06:
                    3a:c7:ad:c8:ba:ac:96:9e:c2:db:72:f4:b6:0a:1f:
                    3e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F6:BB:8F:83:13:A6:5E:D1:42:89:BC:A5:EB:1E:AB:C3:E5:80:F1
            X509v3 Authority Key Identifier:
                keyid:26:0C:1A:63:1E:17:A1:E5:BB:4E:E5:83:90:89:86:02:E0:01:AF:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb54a78ebdf0134483aeb5963dd44a0f7049562c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/10b71641-b916-4e28-9165-33fbea87fc5c/f1a0f28fac23855af04650ebd491ccd66ce18517.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/10b71641-b916-4e28-9165-33fbea87fc5c/fb54a78ebdf0134483aeb5963dd44a0f7049562c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:40e::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:1b:40:03:1d:0d:f6:05:67:0e:f3:f7:cb:4f:47:f7:fa:66:
         08:f1:a7:bb:b5:ab:13:81:9c:91:ef:b7:34:25:53:2a:08:59:
         6a:70:b9:4a:76:ab:01:2e:d1:c1:28:98:c9:89:8f:b7:de:ab:
         2a:41:21:27:43:66:72:46:0a:15:30:22:fd:2f:76:2b:3b:f7:
         9c:7c:db:54:e0:36:51:c3:04:1f:78:15:4d:4d:22:56:86:f2:
         8b:86:d6:62:2d:61:4b:25:36:32:7f:ab:f0:d0:d8:5d:56:5e:
         60:44:e3:f8:85:8f:8d:f5:90:74:e9:8d:e6:66:27:7a:4d:a2:
         5e:5a:4b:20:2f:17:5e:96:08:88:be:6e:c2:68:8a:0d:4a:ed:
         8a:3a:6e:fa:65:63:86:3b:46:ae:c7:0b:79:21:82:98:b8:30:
         46:87:e5:fb:c7:17:e4:05:38:72:d2:e7:b3:8d:2a:cf:59:37:
         25:0e:9c:e4:ee:c8:5e:20:a8:70:9f:8e:7e:4e:ee:56:e5:5b:
         75:58:c4:6c:31:ce:1e:21:85:14:29:bd:d9:73:e1:22:07:65:
         b5:b9:ca:96:50:11:c8:a2:68:fa:51:ed:da:9e:61:35:44:56:
         68:fc:fe:5c:31:bc:06:69:9c:34:26:ce:c8:59:5e:09:0a:52:
         62:ee:ab:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----