Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/cbc00742-c5bf-45ca-b4a1-a847a782759e/c9b7f1f23aac9d31aef799d2aeef2b82b3347ed6.roa
File:                     c9b7f1f23aac9d31aef799d2aeef2b82b3347ed6.roa (raw, json)
Hash identifier:          thH5WM+FcHY6joCr6lvv4esd5BMJJwXxAs3B/MrO8tg=
Subject key identifier:   C3:99:74:48:DE:BF:2A:FE:ED:79:15:99:90:E5:04:E6:E9:57:A0:D8
Certificate issuer:       /CN=921f2e6e5335910c2c656fdf12745b76681e6741
Certificate serial:       01E0
Authority key identifier: D7:3D:9C:43:29:71:9D:F6:B7:5F:3D:BD:2F:94:97:F7:CE:FD:2E:94
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/921f2e6e5335910c2c656fdf12745b76681e6741.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/cbc00742-c5bf-45ca-b4a1-a847a782759e/c9b7f1f23aac9d31aef799d2aeef2b82b3347ed6.roa
Signing time:             Mon 11 Dec 2023 22:58:36 +0000
ROA not before:           Mon 11 Dec 2023 22:58:36 +0000
ROA not after:            Thu 11 Dec 2025 22:58:36 +0000
asID:                     270204
IP address blocks:        2801:c4:95::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921f2e6e5335910c2c656fdf12745b76681e6741
        Validity
            Not Before: Dec 11 22:58:36 2023 GMT
            Not After : Dec 11 22:58:36 2025 GMT
        Subject: CN=c9b7f1f23aac9d31aef799d2aeef2b82b3347ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1d:f5:28:26:7d:30:cc:2b:7d:06:c6:aa:89:
                    2f:d9:20:e0:00:dd:63:b3:c0:2c:8a:1a:ed:42:26:
                    03:99:00:94:e5:db:7c:69:3c:7f:f7:bd:aa:93:e9:
                    0d:87:40:66:b4:b8:29:d6:4c:fe:76:e3:d3:e3:52:
                    20:4f:cf:4d:77:d2:84:d3:75:74:84:a9:1d:f5:9d:
                    25:df:be:d3:0f:f9:da:52:2d:66:08:ec:bd:bb:fe:
                    cf:8c:43:6a:15:d4:48:cf:f0:4b:b1:51:c5:6d:81:
                    61:86:dc:94:91:6d:5a:d2:27:01:70:d5:b1:88:2d:
                    c3:00:86:8e:10:67:e8:b0:7b:b6:f9:8d:3c:22:80:
                    d2:ce:83:a2:76:98:58:19:68:17:92:fb:d4:cb:c9:
                    d8:ce:88:7e:85:ea:5b:1e:56:a1:e6:12:8e:1a:5c:
                    af:8d:f0:8d:4d:b0:6c:c0:25:5a:b1:66:1d:47:a0:
                    0e:63:8b:3d:d5:fa:94:2d:0d:83:c5:80:b2:6a:87:
                    ca:81:11:f3:5c:ff:50:ef:c1:fc:19:85:9f:27:e3:
                    37:38:cf:ba:c0:c5:1b:91:71:12:83:4b:37:33:2b:
                    c4:13:f7:72:59:73:24:c4:d9:02:76:01:b7:b4:7d:
                    d6:21:43:b0:d3:59:72:0a:4a:d8:c6:e1:fa:c2:bc:
                    da:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:99:74:48:DE:BF:2A:FE:ED:79:15:99:90:E5:04:E6:E9:57:A0:D8
            X509v3 Authority Key Identifier:
                keyid:D7:3D:9C:43:29:71:9D:F6:B7:5F:3D:BD:2F:94:97:F7:CE:FD:2E:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/921f2e6e5335910c2c656fdf12745b76681e6741.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/cbc00742-c5bf-45ca-b4a1-a847a782759e/c9b7f1f23aac9d31aef799d2aeef2b82b3347ed6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/cbc00742-c5bf-45ca-b4a1-a847a782759e/921f2e6e5335910c2c656fdf12745b76681e6741.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:95::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:e2:67:75:26:8e:28:65:43:2c:04:60:15:ff:a4:91:5b:2f:
         26:b6:ac:35:44:36:ff:cf:8d:d9:2c:f6:7e:bb:0e:75:48:a7:
         17:f0:02:28:01:15:96:d5:44:d6:2b:61:d9:e4:09:5e:6b:c5:
         bb:ef:00:99:26:c2:3f:63:ac:cb:dc:91:86:aa:e6:a3:ec:7f:
         cb:3b:9a:81:05:01:01:41:36:a1:4e:bc:75:26:0c:ac:ce:e9:
         94:01:ed:a8:a9:69:05:7b:b9:bc:c1:a7:f9:40:f5:b3:64:0e:
         f9:15:4c:34:82:6c:76:41:07:69:61:49:95:94:ed:c0:e7:bf:
         b5:97:1e:dc:d0:67:68:fa:79:25:53:63:91:44:41:7e:69:d6:
         39:03:bb:1a:77:64:82:e6:4a:c2:e2:c0:ba:28:ef:5f:0d:8f:
         4a:f8:e8:83:b2:13:bb:46:7b:74:f1:2a:19:4d:8f:b6:82:d0:
         70:2e:2c:ff:c8:82:51:a0:cb:f2:bd:ae:79:99:c2:14:88:26:
         7e:0f:6d:51:ac:c6:db:d8:3e:bc:c8:51:58:f9:f4:76:1e:14:
         df:84:b1:ff:6c:47:8d:0a:7d:7f:6a:59:7d:87:e0:22:b6:48:
         4c:e5:d3:c0:bc:13:90:22:5e:2c:1c:8b:fe:c6:0b:27:e9:b6:
         9a:2f:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----