Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/ece3c2d0-7119-4d8c-bb78-e4317077a1b3/398b9625a215ef98c988462e335e3aad4d5ea6e9.roa
File:                     398b9625a215ef98c988462e335e3aad4d5ea6e9.roa (raw, json)
Hash identifier:          oHYLZqVy3KJ3nyKy2qvuXnCqqUkA7DuQugA/JXPdMFM=
Subject key identifier:   96:80:78:A5:65:23:44:52:46:7B:94:D8:80:94:A7:ED:04:91:A2:F8
Certificate issuer:       /CN=992716b353ce7e6a6797da5f53fa58982d7e354d
Certificate serial:       02642B
Authority key identifier: 18:4D:3D:2F:B0:1E:6C:D6:9A:99:CF:53:A1:2F:55:23:83:91:0E:59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/992716b353ce7e6a6797da5f53fa58982d7e354d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/ece3c2d0-7119-4d8c-bb78-e4317077a1b3/398b9625a215ef98c988462e335e3aad4d5ea6e9.roa
Signing time:             Wed 27 Dec 2023 16:11:24 +0000
ROA not before:           Wed 27 Dec 2023 16:11:24 +0000
ROA not after:            Sat 27 Dec 2025 16:11:24 +0000
asID:                     273083
IP address blocks:        2801:1e5::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156715 (0x2642b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=992716b353ce7e6a6797da5f53fa58982d7e354d
        Validity
            Not Before: Dec 27 16:11:24 2023 GMT
            Not After : Dec 27 16:11:24 2025 GMT
        Subject: CN=398b9625a215ef98c988462e335e3aad4d5ea6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d6:3b:c9:22:05:32:dd:f4:04:19:0e:45:89:
                    ba:fd:f9:44:4e:19:b0:9c:d1:5b:6a:9f:a7:e3:97:
                    5d:fe:a8:26:1b:dd:bb:d7:31:6d:61:17:6b:1b:19:
                    8b:32:72:61:a1:20:cc:7d:21:92:25:03:aa:82:be:
                    f2:37:51:40:ae:08:ed:33:8f:10:9f:8c:03:01:c6:
                    e0:c6:40:11:13:12:cf:cd:9f:56:0e:6b:de:d4:91:
                    33:ec:31:59:4b:57:89:b7:ec:85:8d:46:cd:cf:57:
                    1e:36:83:09:d3:ef:10:89:a6:da:5a:73:39:b7:33:
                    c6:e5:be:00:5a:26:1c:ec:24:51:a8:37:4b:ec:5d:
                    eb:64:13:8a:d9:8e:4e:78:46:17:37:73:9e:d2:53:
                    e9:e3:9e:94:28:11:8c:ce:30:98:7e:14:ec:56:18:
                    63:c2:97:47:8d:98:b3:6d:b6:e6:53:8f:05:da:3b:
                    a7:a8:d9:3e:0c:96:ba:a8:15:e2:92:de:6e:f4:8f:
                    5d:72:07:2e:71:a7:a4:ad:ad:b3:2d:48:ca:e7:05:
                    d4:47:59:c6:19:cf:60:f8:3f:07:34:40:fd:51:bd:
                    52:59:e3:85:7b:ca:a5:72:f8:09:1b:bf:f0:ba:8f:
                    50:64:8b:d4:04:43:c8:76:56:ff:15:f3:2c:a3:00:
                    fa:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:80:78:A5:65:23:44:52:46:7B:94:D8:80:94:A7:ED:04:91:A2:F8
            X509v3 Authority Key Identifier:
                keyid:18:4D:3D:2F:B0:1E:6C:D6:9A:99:CF:53:A1:2F:55:23:83:91:0E:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/992716b353ce7e6a6797da5f53fa58982d7e354d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/ece3c2d0-7119-4d8c-bb78-e4317077a1b3/398b9625a215ef98c988462e335e3aad4d5ea6e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/ece3c2d0-7119-4d8c-bb78-e4317077a1b3/992716b353ce7e6a6797da5f53fa58982d7e354d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e5::/40

    Signature Algorithm: sha256WithRSAEncryption
         2f:91:5e:74:54:4d:52:d3:9f:f7:bd:f9:04:44:a2:a4:3f:45:
         05:11:b4:0b:ad:3f:06:e2:e5:0d:44:42:27:57:08:e3:d8:a5:
         0f:f8:41:b5:24:e3:8c:45:48:b6:f4:43:74:5d:6e:8d:ae:9d:
         6c:ba:3c:28:73:61:98:54:73:be:67:21:dd:e7:29:5e:1a:1d:
         65:66:ab:89:91:a6:54:03:41:1a:45:af:cc:62:6d:07:96:81:
         fc:f7:fe:ac:bd:4d:d2:79:9b:f7:f0:5f:e5:8a:34:d0:96:c5:
         38:dc:ac:30:75:8c:c1:7d:6e:2a:24:cd:15:7f:5c:a4:a0:02:
         b4:98:7f:b5:33:fc:c6:9d:ab:04:41:a3:60:b8:49:04:69:69:
         94:d7:b4:e6:e0:1d:e5:23:4a:40:fd:3c:ae:01:d7:6b:fb:c4:
         76:fe:e2:b7:24:c1:df:7c:54:da:9f:07:9b:41:6d:0d:a8:d1:
         69:eb:af:4f:01:19:e7:7d:4b:a7:d2:5d:f5:cc:f5:b1:7d:62:
         4b:b3:e1:de:d8:6d:64:7d:e8:b0:60:0b:d8:1b:89:96:11:64:
         e5:a4:3d:a7:97:81:d1:23:98:d8:4c:bc:75:f3:1a:17:74:25:
         76:bb:8c:4d:11:f1:60:07:15:5a:e8:53:67:f3:0f:de:b6:a0:
         47:e5:4c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----