Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0270bcd6-abaa-48e5-90d3-a6458f061b46/e0dbf2abfdc16727b68780eef4cb368a455130f5.roa
File:                     e0dbf2abfdc16727b68780eef4cb368a455130f5.roa (raw, json)
Hash identifier:          Rs0AMjA5Yhw7yszXj1lyTY+NOMHks0JOaXrcGdJ9jIw=
Subject key identifier:   4B:0C:19:A3:9B:65:13:74:FC:A0:DA:FD:DF:BB:00:0B:30:5B:2B:3F
Certificate issuer:       /CN=336ec456fe9047127b4fbdbfb696853ce83a56bb
Certificate serial:       0F9DCB
Authority key identifier: 67:EB:1D:BC:BD:E8:FC:95:C9:4C:1C:F1:97:2A:07:B3:31:2A:2E:9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/336ec456fe9047127b4fbdbfb696853ce83a56bb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0270bcd6-abaa-48e5-90d3-a6458f061b46/e0dbf2abfdc16727b68780eef4cb368a455130f5.roa
Signing time:             Thu 16 Feb 2023 16:46:10 +0000
ROA not before:           Wed 15 Feb 2023 16:45:50 +0000
ROA not after:            Sun 16 Feb 2025 16:45:50 +0000
asID:                     13489
IP address blocks:        2801:1f:8800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023435 (0xf9dcb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=336ec456fe9047127b4fbdbfb696853ce83a56bb
        Validity
            Not Before: Feb 15 16:45:50 2023 GMT
            Not After : Feb 16 16:45:50 2025 GMT
        Subject: CN=e0dbf2abfdc16727b68780eef4cb368a455130f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:9b:8d:83:5d:5d:18:d4:81:6e:14:b7:44:
                    b0:fe:91:52:37:ac:e9:be:a2:e3:ba:78:3c:2c:e5:
                    a5:7d:2a:1f:52:1f:45:d9:fe:bb:fe:59:48:eb:ce:
                    5c:1c:e4:21:d4:e3:e6:00:0f:d6:1a:f2:de:2d:ca:
                    60:69:08:b2:f8:43:38:46:ca:6d:73:d8:85:ef:c9:
                    f2:3d:8c:1f:a3:14:40:17:8c:72:cb:1e:46:08:c1:
                    ba:4d:9a:bd:83:e9:fc:a6:52:bf:b1:0c:81:97:be:
                    a0:0a:e9:2b:79:40:68:39:04:7d:38:34:19:5c:a2:
                    ed:6f:ed:c8:a2:c6:e3:23:0d:89:bd:00:40:fe:7d:
                    d5:8c:8f:cf:74:7c:af:82:c5:f8:cc:07:3d:bd:54:
                    c5:ff:0c:75:c8:05:70:e5:84:3f:3c:94:ec:6a:b2:
                    7c:61:e1:b0:8a:27:cf:53:18:6f:bc:fc:d0:d4:c2:
                    43:fb:ad:4c:8c:5a:cb:27:de:b6:b1:aa:0a:3e:9d:
                    45:e7:94:76:de:86:9d:f5:a6:65:54:41:da:46:11:
                    97:28:10:23:96:fa:41:c7:25:f8:ec:9e:70:23:f3:
                    2a:82:7a:21:cb:cb:26:d6:fa:cb:44:5f:97:41:00:
                    08:39:d2:4f:ad:62:49:61:83:93:fd:ba:ec:5b:60:
                    5c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:0C:19:A3:9B:65:13:74:FC:A0:DA:FD:DF:BB:00:0B:30:5B:2B:3F
            X509v3 Authority Key Identifier:
                keyid:67:EB:1D:BC:BD:E8:FC:95:C9:4C:1C:F1:97:2A:07:B3:31:2A:2E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/336ec456fe9047127b4fbdbfb696853ce83a56bb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0270bcd6-abaa-48e5-90d3-a6458f061b46/e0dbf2abfdc16727b68780eef4cb368a455130f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0270bcd6-abaa-48e5-90d3-a6458f061b46/336ec456fe9047127b4fbdbfb696853ce83a56bb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:8800::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:45:e6:3b:d1:c3:93:45:70:c3:0c:90:7b:01:8c:96:b0:97:
         29:f9:3e:b9:b0:2d:25:f3:3c:7e:da:06:86:af:56:ad:06:90:
         f7:87:88:fe:f2:63:4a:66:b9:79:83:42:cd:1c:d7:4d:51:9f:
         83:be:49:a0:9a:f3:ce:ed:c8:b7:bc:09:13:73:e3:08:58:8f:
         0f:11:2b:3c:e5:86:4f:ef:3e:75:ac:39:68:46:ce:6a:b6:56:
         49:c3:28:1c:fe:be:7a:7d:5f:7a:6d:88:f7:06:d3:49:8f:67:
         5e:b5:af:16:51:37:8a:1f:17:1c:0e:43:8f:e1:19:1b:99:1b:
         7f:4f:ed:b6:83:30:7f:2b:94:6d:7b:00:b1:2d:55:d8:9b:7e:
         d0:10:54:76:b9:27:6e:1b:b8:88:65:38:dd:2d:0f:ab:63:62:
         73:68:68:2b:57:4e:13:7d:6e:a8:82:af:d3:c2:c9:f6:5d:8d:
         c8:f9:e0:ef:b6:aa:c5:8c:8e:65:c5:55:d5:c5:35:5b:ae:fe:
         50:b8:d2:32:94:c9:a2:94:5b:7c:36:08:43:d6:01:09:c5:fd:
         01:ce:58:dd:52:ce:ca:3b:27:92:46:fd:a7:6a:75:f5:89:81:
         77:36:d8:19:34:0d:f3:70:b7:b2:2c:91:58:3d:0e:67:ab:e4:
         84:d8:85:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----