Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/85de31cd108280882fde9ad577387dfeec279537.roa
File:                     85de31cd108280882fde9ad577387dfeec279537.roa (raw, json)
Hash identifier:          u8Gl3LeClPXXCd7QKZ3tvCCxaLjYDmrRwIrMyCdp5p8=
Subject key identifier:   52:C4:EA:F4:2A:E9:3F:05:AF:9B:CE:41:5A:6D:FA:83:01:F2:DC:D2
Certificate issuer:       /CN=15c457b9e4c4fb2caeebe5d784653caec339f556
Certificate serial:       1408EC
Authority key identifier: 09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/85de31cd108280882fde9ad577387dfeec279537.roa
Signing time:             Wed 27 Mar 2024 19:18:45 +0000
ROA not before:           Wed 27 Mar 2024 19:18:45 +0000
ROA not after:            Fri 27 Mar 2026 19:18:45 +0000
asID:                     3816
IP address blocks:        2801:1b:1801:2::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313004 (0x1408ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c457b9e4c4fb2caeebe5d784653caec339f556
        Validity
            Not Before: Mar 27 19:18:45 2024 GMT
            Not After : Mar 27 19:18:45 2026 GMT
        Subject: CN=85de31cd108280882fde9ad577387dfeec279537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:9c:0e:a7:54:dd:65:90:23:a6:9f:46:44:
                    65:53:37:6f:07:9d:fa:e2:41:6c:38:ae:b7:ee:d2:
                    ff:2e:cb:46:0c:b7:b6:21:05:97:1a:4f:88:b7:da:
                    05:b4:f5:47:1f:78:23:2d:75:c0:7c:38:ee:c6:15:
                    1d:c5:73:f7:1c:ae:6a:73:5d:6e:b4:b3:98:70:08:
                    55:cf:f4:95:52:63:41:2a:11:14:7b:95:8d:2d:88:
                    2d:71:97:71:4f:ea:30:dc:f8:23:86:86:6f:63:8c:
                    6f:4a:e7:31:5c:3c:f8:f3:29:26:02:fa:24:4c:a4:
                    0b:69:3a:b5:22:a2:11:e4:de:df:44:71:fb:4b:b6:
                    5a:f6:f8:91:99:54:e6:f3:4e:aa:97:cb:90:d8:c6:
                    09:d1:90:ee:2b:9d:e3:9c:58:5e:24:d3:a2:05:33:
                    6a:41:3f:ed:23:c6:af:be:b3:57:66:db:0c:8c:a7:
                    fa:f9:f1:f1:52:b1:2b:a4:85:e9:bb:5b:bd:f1:79:
                    11:29:d9:44:90:36:ba:af:f8:8d:b3:40:f2:1c:10:
                    fc:3d:2a:0f:eb:a7:4d:4e:44:6d:c7:58:b9:ee:3f:
                    ca:70:5a:20:52:16:39:74:1c:83:0a:f4:f1:49:fb:
                    04:d3:7e:86:ca:b6:2d:e9:d0:39:a2:97:d7:e2:ba:
                    8c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C4:EA:F4:2A:E9:3F:05:AF:9B:CE:41:5A:6D:FA:83:01:F2:DC:D2
            X509v3 Authority Key Identifier:
                keyid:09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/85de31cd108280882fde9ad577387dfeec279537.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/15c457b9e4c4fb2caeebe5d784653caec339f556.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1801:2::/64

    Signature Algorithm: sha256WithRSAEncryption
         31:1a:88:9f:5c:1c:fa:c7:a7:23:32:bd:c4:fb:41:8b:2d:d7:
         d8:cd:c3:01:6b:0e:35:c8:e8:8d:d3:0a:06:73:8b:b6:ca:48:
         7d:84:1f:6d:57:af:f9:47:c2:64:0d:ec:9c:f6:33:61:08:3c:
         84:6d:86:4e:0e:e7:4a:f0:02:39:64:f9:5b:ef:cc:0b:f6:5a:
         69:4b:7f:50:bc:bf:63:e9:f1:98:98:94:a2:02:6c:9d:89:0e:
         e2:3c:64:b6:18:74:a5:9a:4a:98:1c:62:61:81:80:e3:23:8d:
         9c:02:05:8f:ae:f5:17:b7:21:52:67:9c:75:26:fd:3b:08:10:
         63:2e:91:a8:5c:5e:e6:0f:26:d9:bd:d1:5f:be:a6:7d:a0:a7:
         6a:52:d3:56:17:0e:69:a0:97:93:41:60:8b:71:74:4e:c3:00:
         6e:17:70:68:72:6a:00:d3:24:8c:da:d2:a2:04:51:56:0e:99:
         79:8e:ce:fa:08:90:a6:da:ac:02:4e:44:c7:79:ec:56:7e:1e:
         0d:9a:26:7a:60:ed:1a:f6:0b:91:f8:ef:bd:d7:7c:17:5c:17:
         cf:cf:13:20:88:13:00:5a:b6:d6:2b:ac:bb:ba:9e:50:97:a5:
         2b:4a:de:72:28:92:99:89:94:a6:06:06:28:ee:de:0e:56:89:
         ef:b0:98:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----