Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/0eaea8cc318d41be1f974e0977d90eeac74ff57e.roa
File:                     0eaea8cc318d41be1f974e0977d90eeac74ff57e.roa (raw, json)
Hash identifier:          kPUcsm2t3mVLMuKa0lgjhuNtcabqxduEKDMjh2e79Vs=
Subject key identifier:   51:DC:1B:BB:61:9E:D2:C9:2B:DC:59:08:FB:C8:54:6C:0E:87:66:51
Certificate issuer:       /CN=8afdf29f9cf235b0bd49725c1d8db340c546c41d
Certificate serial:       77E9
Authority key identifier: A3:70:E8:DB:0D:4C:1C:F2:AA:EC:C7:C2:46:35:47:AA:7C:EF:CB:A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8afdf29f9cf235b0bd49725c1d8db340c546c41d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/0eaea8cc318d41be1f974e0977d90eeac74ff57e.roa
Signing time:             Mon 11 Sep 2023 15:35:30 +0000
ROA not before:           Sun 10 Sep 2023 15:35:29 +0000
ROA not after:            Thu 11 Sep 2025 15:35:29 +0000
asID:                     28002
IP address blocks:        2801:165::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30697 (0x77e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8afdf29f9cf235b0bd49725c1d8db340c546c41d
        Validity
            Not Before: Sep 10 15:35:29 2023 GMT
            Not After : Sep 11 15:35:29 2025 GMT
        Subject: CN=0eaea8cc318d41be1f974e0977d90eeac74ff57e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9f:db:9a:9a:65:41:d4:ea:c6:62:d0:f6:10:
                    93:22:d5:8f:3f:06:c7:57:14:2f:18:57:52:d4:41:
                    7e:b0:7e:4a:18:48:54:d1:4e:9e:35:45:b4:3b:8e:
                    7c:b9:55:0b:94:f1:c8:71:0b:93:5d:e3:38:32:bc:
                    36:17:34:f0:20:48:28:9b:2b:c4:b1:f7:a3:fc:23:
                    54:ec:4b:93:94:69:6a:29:62:35:68:f7:f8:35:8a:
                    f4:96:e7:8f:cc:28:4e:b7:d5:91:2c:e1:f5:96:9c:
                    af:96:0c:72:1c:44:88:1a:e9:de:fc:7f:02:16:2c:
                    04:bd:61:fb:c9:7a:80:e1:e9:06:dd:e6:dc:47:cc:
                    98:da:36:f1:4a:d4:8f:e9:03:f2:d1:f4:76:07:49:
                    00:62:95:39:ec:e7:9c:bf:d3:98:72:e3:c5:8e:bf:
                    17:7d:81:83:43:9c:e9:8f:da:ba:26:a4:f3:76:52:
                    44:b1:ac:26:1f:9b:fd:f3:78:3d:53:e0:db:cd:35:
                    1d:bd:4f:36:b7:19:bb:8d:7d:7f:16:3b:b4:8b:92:
                    5c:b6:0e:10:d8:ce:39:68:ed:8c:e9:82:cd:d3:23:
                    6d:e6:00:9b:ad:13:26:76:fa:4a:b9:33:5f:7f:f6:
                    06:4b:37:1f:e6:be:cc:14:b0:a3:6b:a1:81:dc:35:
                    0d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DC:1B:BB:61:9E:D2:C9:2B:DC:59:08:FB:C8:54:6C:0E:87:66:51
            X509v3 Authority Key Identifier:
                keyid:A3:70:E8:DB:0D:4C:1C:F2:AA:EC:C7:C2:46:35:47:AA:7C:EF:CB:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8afdf29f9cf235b0bd49725c1d8db340c546c41d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/0eaea8cc318d41be1f974e0977d90eeac74ff57e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/8afdf29f9cf235b0bd49725c1d8db340c546c41d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

    Signature Algorithm: sha256WithRSAEncryption
         8c:52:5e:c7:23:60:5a:0c:2d:d1:ce:3b:18:ff:9e:15:08:cc:
         87:ae:df:92:b5:0c:8b:5c:e3:20:68:93:f9:df:92:9d:7d:c2:
         91:e3:b4:76:7d:32:71:b0:81:bc:2e:e7:4f:f8:8c:6d:ed:a5:
         c8:95:a7:60:24:10:db:82:d3:10:af:07:05:63:49:37:47:33:
         d6:1c:21:f1:74:bb:4a:33:19:75:18:ee:d9:f9:96:0f:ef:0b:
         fb:8c:cf:9a:19:05:87:7f:73:ce:d0:bc:19:cf:55:f7:15:8d:
         94:bc:46:5c:d3:7a:3d:99:2f:61:79:80:fe:12:8a:59:1e:f3:
         05:e1:c1:60:d8:e5:b0:65:9c:be:cd:17:51:9e:3f:18:aa:26:
         2e:a0:22:02:ef:d8:81:e6:c3:43:54:cb:89:97:ee:0e:bb:fe:
         72:04:3c:d0:ca:48:da:a7:91:7e:34:cd:85:c7:b4:3d:b6:2a:
         ab:75:ec:39:d4:63:51:8c:fb:a2:84:5c:2f:f4:9a:7d:4d:f6:
         9f:2f:98:8c:17:17:5d:55:f7:4b:65:49:aa:74:4d:a8:35:b9:
         c3:09:13:16:66:5f:9f:c8:da:c8:2d:2c:55:63:9f:05:1a:ca:
         62:74:33:70:87:c9:45:cd:a3:27:99:2a:97:c9:9b:94:4e:91:
         cb:41:30:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----