Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/0fa22ca54f157064ae05be97627ad5ad331898fe.roa
File:                     0fa22ca54f157064ae05be97627ad5ad331898fe.roa (raw, json)
Hash identifier:          VcaecdPcuMAIgEYaLD2T7EMDUBTuUY1kEhnxEHlPSgw=
Subject key identifier:   35:D2:2B:B2:E1:AC:2C:2C:0B:97:7A:33:09:17:77:59:63:38:1B:51
Certificate issuer:       /CN=d5d8c965020a01a59e99d653ad99072e49177956
Certificate serial:       051C
Authority key identifier: 9C:95:64:C6:54:C3:1B:6E:CC:D5:EA:12:E6:27:9E:B4:63:9E:90:99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5d8c965020a01a59e99d653ad99072e49177956.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/0fa22ca54f157064ae05be97627ad5ad331898fe.roa
Signing time:             Fri 28 Jul 2023 18:13:02 +0000
ROA not before:           Thu 27 Jul 2023 18:13:01 +0000
ROA not after:            Mon 28 Jul 2025 18:13:01 +0000
asID:                     273047
IP address blocks:        2801:165::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1308 (0x51c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d8c965020a01a59e99d653ad99072e49177956
        Validity
            Not Before: Jul 27 18:13:01 2023 GMT
            Not After : Jul 28 18:13:01 2025 GMT
        Subject: CN=0fa22ca54f157064ae05be97627ad5ad331898fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:df:0b:f7:0b:e9:b5:d8:56:a7:73:74:e8:32:
                    a1:39:0b:ca:f8:bd:91:74:b6:7a:4d:03:ed:32:83:
                    9b:91:a1:d8:55:b6:ec:ff:72:39:54:e4:0d:5d:c3:
                    39:23:31:bc:3e:6b:c0:41:38:7e:66:f7:4b:b4:57:
                    ba:5d:27:80:44:cb:10:2a:60:00:a4:dd:92:b4:e3:
                    cc:62:43:75:4a:0e:03:98:71:53:b1:37:90:c3:28:
                    33:38:9b:46:2d:cf:1a:43:51:a0:09:80:39:c9:1e:
                    df:e4:fd:f3:80:45:c9:85:ec:14:57:58:1f:08:84:
                    72:d2:1b:e9:6e:0e:59:4c:03:67:ae:c0:b2:cf:3d:
                    07:c6:59:25:fe:d1:21:a0:40:7a:da:c1:c8:57:19:
                    3e:6e:51:b1:35:5a:a2:15:19:f1:64:1b:a2:02:ea:
                    6f:28:33:28:d9:6a:3e:93:c9:6d:a1:90:f5:34:10:
                    54:74:89:47:87:e2:fb:66:c8:d0:5d:36:da:d0:93:
                    37:a7:d2:36:7d:a4:43:32:34:20:66:a2:f6:99:79:
                    38:98:21:1b:ee:e6:46:44:3b:97:78:99:8b:eb:85:
                    44:c3:29:55:3e:dc:2b:6f:37:35:8c:e8:30:00:b1:
                    b3:65:30:b2:dd:66:de:6f:ba:a0:71:09:fa:9d:51:
                    e6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D2:2B:B2:E1:AC:2C:2C:0B:97:7A:33:09:17:77:59:63:38:1B:51
            X509v3 Authority Key Identifier:
                keyid:9C:95:64:C6:54:C3:1B:6E:CC:D5:EA:12:E6:27:9E:B4:63:9E:90:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5d8c965020a01a59e99d653ad99072e49177956.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/0fa22ca54f157064ae05be97627ad5ad331898fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/d5d8c965020a01a59e99d653ad99072e49177956.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

    Signature Algorithm: sha256WithRSAEncryption
         41:bd:ae:49:df:a4:8d:4a:e9:fe:fb:86:25:8f:95:5e:18:fa:
         16:80:91:3f:7e:67:5b:0c:a3:32:2a:2e:92:ea:a9:c6:ea:77:
         ab:14:71:bb:04:26:c7:f3:67:bc:c3:a1:02:11:17:ea:9c:fb:
         b7:a1:ec:c6:47:db:68:07:31:e3:3e:a4:12:6e:44:01:b5:45:
         40:cb:07:f1:20:f3:80:e8:dc:87:1b:e9:e8:9c:7e:4e:b2:2b:
         0d:54:9f:dc:a4:b5:74:a2:71:fb:fc:a4:48:05:73:7f:a8:90:
         a6:2c:51:c1:5d:b9:c0:97:97:21:32:82:c9:f9:2d:ad:65:f3:
         c2:4c:8b:9d:0e:74:20:4f:06:1a:0f:92:e5:9e:87:53:d3:71:
         25:c5:46:2a:76:c3:5a:bd:84:3a:51:92:19:a1:61:23:d7:e7:
         1f:be:6e:5c:4a:b9:7b:a5:4b:37:c8:0c:2b:21:7c:4c:8f:5f:
         bc:de:f1:6b:0e:7f:11:77:62:e3:ad:14:50:37:82:b4:7b:1a:
         8b:d1:9c:f9:8d:dd:a1:e8:13:70:bf:fe:72:e8:e6:7c:01:36:
         93:13:d1:d2:64:36:ae:c1:9a:40:a1:66:f4:4a:c8:83:8c:e0:
         04:0a:08:2e:70:91:44:84:b8:f8:da:4f:79:f0:38:16:9b:73:
         78:db:50:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----