Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c6d0222-0a1e-4695-be49-649d4f73870c/0bfa3d357ced17f52848882431d1c4af639d7f01.roa
File:                     0bfa3d357ced17f52848882431d1c4af639d7f01.roa (raw, json)
Hash identifier:          jqN7iueihm+xtc/gsphSXSoh1UAUcU7Gip9XTt1mTJA=
Subject key identifier:   B5:94:F7:81:28:39:33:EB:A9:A4:39:26:E1:94:F7:81:98:4C:B7:40
Certificate issuer:       /CN=e8368733ed05969d5936bf1ba2d658850a15cd68
Certificate serial:       021F25
Authority key identifier: 7D:79:31:50:F0:B4:34:8E:6A:45:33:39:16:1D:07:27:8E:71:27:00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8368733ed05969d5936bf1ba2d658850a15cd68.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c6d0222-0a1e-4695-be49-649d4f73870c/0bfa3d357ced17f52848882431d1c4af639d7f01.roa
Signing time:             Thu 29 Jun 2023 21:37:22 +0000
ROA not before:           Wed 28 Jun 2023 21:37:21 +0000
ROA not after:            Sun 29 Jun 2025 21:37:21 +0000
asID:                     272963
IP address blocks:        2801:1e:3800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139045 (0x21f25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8368733ed05969d5936bf1ba2d658850a15cd68
        Validity
            Not Before: Jun 28 21:37:21 2023 GMT
            Not After : Jun 29 21:37:21 2025 GMT
        Subject: CN=0bfa3d357ced17f52848882431d1c4af639d7f01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:07:21:a1:77:dd:34:ae:50:e2:12:2f:ac:
                    71:68:bf:6b:95:5f:e8:ec:20:40:44:65:22:a7:13:
                    cd:c0:6d:ba:21:a3:f1:72:c0:39:b4:30:39:05:67:
                    b5:12:a5:88:27:8a:d1:d5:25:5c:80:d9:3b:91:8d:
                    cc:80:aa:eb:4f:fb:e8:fc:b5:bb:78:5b:6c:da:ac:
                    4a:f7:ef:0e:b4:f4:af:ed:43:d7:29:26:77:2f:ab:
                    79:36:e8:0b:83:20:0c:de:b1:10:d9:b3:6e:5e:41:
                    af:a0:5d:dc:4d:98:33:10:ba:a1:43:29:7c:35:38:
                    df:da:cd:f0:2c:28:c6:d2:49:d7:75:4e:f1:f7:cb:
                    b7:c0:3a:e4:5a:28:f2:df:36:97:6e:12:a9:51:7d:
                    80:ed:20:d6:75:e4:5b:ca:36:d6:a9:fd:64:73:10:
                    f9:a7:9c:b0:0d:a1:96:bb:8f:8a:51:aa:3a:4e:20:
                    f3:6a:d8:5e:8a:f1:e4:fc:f5:6a:15:f2:31:78:eb:
                    05:91:51:89:24:a1:55:a3:6a:ef:4a:16:b8:57:a8:
                    d3:2c:d8:96:14:31:5a:74:f9:d3:4e:eb:d9:cb:81:
                    a6:16:a1:d5:39:0c:56:b3:08:99:43:0c:58:a6:66:
                    57:30:c5:ca:41:52:6e:e2:d6:c2:8d:36:b3:11:8d:
                    b5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:94:F7:81:28:39:33:EB:A9:A4:39:26:E1:94:F7:81:98:4C:B7:40
            X509v3 Authority Key Identifier:
                keyid:7D:79:31:50:F0:B4:34:8E:6A:45:33:39:16:1D:07:27:8E:71:27:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8368733ed05969d5936bf1ba2d658850a15cd68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c6d0222-0a1e-4695-be49-649d4f73870c/0bfa3d357ced17f52848882431d1c4af639d7f01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c6d0222-0a1e-4695-be49-649d4f73870c/e8368733ed05969d5936bf1ba2d658850a15cd68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:64:69:ad:df:f3:a5:27:c4:60:4a:a5:49:90:d5:09:6f:7c:
         80:60:60:29:b1:79:16:3d:35:c8:e2:cf:b2:8e:ad:b4:04:af:
         18:28:63:ce:64:90:c3:3c:81:80:cb:a3:6f:60:03:f3:f7:a7:
         55:6e:5d:e6:e0:01:17:df:35:e1:fb:c7:26:72:bb:67:25:f5:
         55:3b:94:81:4c:d6:d6:d1:c0:91:cb:ac:d7:b0:1f:69:21:fe:
         93:43:63:6b:ab:61:00:39:4b:05:8e:da:98:68:a2:48:55:a8:
         5f:9d:0d:82:74:7b:7a:36:79:f8:50:f2:69:9d:36:78:76:56:
         c7:6f:51:5d:4b:d0:62:08:8e:93:d5:9a:9c:48:5e:e9:25:9b:
         9b:86:89:92:db:d0:dc:97:b3:8e:34:82:e2:98:d6:bd:d2:51:
         d5:9e:48:17:ce:60:bc:e4:24:b6:6b:68:22:d2:6e:f4:7f:a1:
         b4:b7:20:22:03:48:01:97:01:67:e4:50:28:b3:66:89:c9:77:
         8f:e3:75:df:34:72:54:08:22:11:44:ae:e4:9b:b3:65:a3:fe:
         8e:e9:7a:16:10:69:fd:84:fe:ef:02:d8:ed:fb:b1:4d:56:ac:
         44:e7:d2:2c:ca:07:df:42:6f:46:38:eb:af:19:26:7f:2a:61:
         ad:01:c6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----