Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/eb2ef20d6c99f35020c66900893f8f05be952bb7.roa
File:                     eb2ef20d6c99f35020c66900893f8f05be952bb7.roa (raw, json)
Hash identifier:          K2fZEPPNBTW8FkNLsti14QwIaftnrWMDKz6pjx2Q3F0=
Subject key identifier:   EB:3B:2B:7E:CC:BE:30:9F:BC:BE:C6:B1:F1:0F:86:A3:C5:72:EF:73
Certificate issuer:       /CN=958f499ac41f5f1d49e25d2caab8318b95a1c691
Certificate serial:       1C3E8A
Authority key identifier: F5:FB:70:79:25:47:2A:00:97:0F:69:1D:54:DB:7B:D8:EA:5E:7D:77
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958f499ac41f5f1d49e25d2caab8318b95a1c691.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/eb2ef20d6c99f35020c66900893f8f05be952bb7.roa
Signing time:             Tue 14 Feb 2023 16:40:14 +0000
ROA not before:           Mon 13 Feb 2023 16:37:09 +0000
ROA not after:            Fri 14 Feb 2025 16:37:09 +0000
asID:                     13489
IP address blocks:        2801:1c2::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1851018 (0x1c3e8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=958f499ac41f5f1d49e25d2caab8318b95a1c691
        Validity
            Not Before: Feb 13 16:37:09 2023 GMT
            Not After : Feb 14 16:37:09 2025 GMT
        Subject: CN=eb2ef20d6c99f35020c66900893f8f05be952bb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:89:85:b4:db:f8:fa:7a:b9:d0:08:49:83:d5:
                    84:94:e7:ac:4d:69:f4:40:62:8c:7a:49:b0:fe:c6:
                    4e:39:ac:d6:04:85:b0:04:e6:dc:a5:6d:81:f8:2f:
                    e8:aa:e7:92:d1:d3:27:b5:9a:d1:b6:ee:aa:9f:18:
                    9c:97:9b:3a:a3:f2:f0:7a:1a:4e:fe:10:4c:eb:08:
                    09:46:28:77:ed:cc:8e:57:0d:a6:c5:28:fb:6e:e7:
                    6a:ec:f6:15:f1:cd:90:cc:a6:e1:c6:29:cf:cd:32:
                    55:a7:b4:ed:80:ca:5f:96:40:c0:76:4d:fd:a7:9b:
                    aa:5f:96:a8:5f:99:0e:30:50:fa:bb:db:c7:f1:99:
                    da:78:00:a3:cc:68:44:c7:10:0b:f4:f9:c0:c0:3a:
                    2b:37:d5:9f:40:33:d9:4e:6a:f9:0c:a2:67:43:d7:
                    99:e7:0b:0b:1b:cf:1a:a5:48:75:c9:fb:6e:7b:68:
                    5c:50:70:a2:c1:ff:16:3b:51:cb:73:64:6d:0f:14:
                    f7:12:f1:ca:a2:bf:01:1a:cf:c2:fb:20:f0:1d:e1:
                    cc:35:7d:d4:48:38:31:f8:77:ab:a6:ad:b9:62:9c:
                    ad:04:ae:35:b6:7a:c5:4d:b5:e3:d5:01:48:8b:7f:
                    6d:2a:be:2c:ba:c7:0a:64:15:3b:ba:f4:5a:0f:6a:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3B:2B:7E:CC:BE:30:9F:BC:BE:C6:B1:F1:0F:86:A3:C5:72:EF:73
            X509v3 Authority Key Identifier:
                keyid:F5:FB:70:79:25:47:2A:00:97:0F:69:1D:54:DB:7B:D8:EA:5E:7D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958f499ac41f5f1d49e25d2caab8318b95a1c691.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/eb2ef20d6c99f35020c66900893f8f05be952bb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c161802a-78c5-4588-aaff-1c83e0fd7739/958f499ac41f5f1d49e25d2caab8318b95a1c691.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c2::/44

    Signature Algorithm: sha256WithRSAEncryption
         82:d2:7f:f2:08:ff:3e:05:67:ed:28:c2:03:07:96:95:ea:76:
         0e:3e:54:da:c3:97:8e:4d:96:24:78:af:af:40:ac:8f:e8:c8:
         c9:f3:d7:cd:99:e6:22:5d:05:65:8b:c1:dd:0a:66:7c:b3:b7:
         ff:7a:aa:ae:ef:7c:de:c3:4f:01:c7:5e:72:ba:15:77:35:d4:
         b2:0e:d3:da:52:09:8d:19:bd:42:7e:c1:2b:ca:65:75:91:bd:
         d6:a5:dc:2a:a5:7d:db:3e:6b:8b:97:52:b3:5c:a0:b0:80:5e:
         48:14:0b:3c:a6:8c:bc:18:ea:65:da:55:25:d5:aa:3b:c1:8b:
         7b:25:e1:7a:b9:f7:61:b5:43:7b:eb:62:82:74:e1:6e:bb:93:
         5c:42:21:b2:cf:41:ca:07:8f:2a:9b:3d:a8:d9:a1:c8:5d:08:
         36:90:18:7b:3a:7d:d6:2a:33:47:e0:be:2d:3c:06:35:6f:78:
         7c:b8:ef:8b:fc:a9:75:48:b5:46:7f:7c:6d:68:21:e8:8e:88:
         cb:e0:4f:7e:97:91:67:fc:54:e1:d6:e0:fb:8d:27:ca:39:f0:
         5d:e4:dd:ec:6a:04:f3:f6:32:a5:67:a6:99:44:60:63:6c:60:
         0a:90:30:42:e4:bc:70:b4:ee:02:49:98:d1:6e:a8:45:d5:f8:
         70:ff:8a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----