Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/152e6874d124801cd3cada8625a41558455fd538.roa
File:                     152e6874d124801cd3cada8625a41558455fd538.roa (raw, json)
Hash identifier:          EvydcgseheoEiILlH3a0T0KtuINmdVyhd5Om/NnDolE=
Subject key identifier:   A0:9F:7E:FE:77:78:0D:5C:C0:7A:A7:F4:E8:FB:52:DD:DA:FF:47:3D
Certificate issuer:       /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial:       04B1CD
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/152e6874d124801cd3cada8625a41558455fd538.roa
Signing time:             Sat 13 Apr 2024 17:12:27 +0000
ROA not before:           Sat 13 Apr 2024 17:12:27 +0000
ROA not after:            Mon 13 Apr 2026 17:12:27 +0000
asID:                     28002
IP address blocks:        2801:165:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307661 (0x4b1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
        Validity
            Not Before: Apr 13 17:12:27 2024 GMT
            Not After : Apr 13 17:12:27 2026 GMT
        Subject: CN=152e6874d124801cd3cada8625a41558455fd538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cf:cf:4a:4a:d6:07:3f:fc:32:33:ea:34:2d:
                    43:89:8b:b3:b3:71:17:9a:35:a6:99:22:76:ef:ab:
                    37:3f:98:5c:eb:ee:51:d7:ac:77:b8:df:61:11:2f:
                    00:11:5c:5b:28:93:41:08:d6:c3:ab:36:ca:7c:d2:
                    be:7a:f4:3e:e9:4b:75:8d:a1:47:b0:9c:39:12:7b:
                    8d:d4:b6:52:94:c9:8c:4d:0d:2a:29:7a:bd:da:7f:
                    90:64:ca:9b:fb:f1:7b:05:5a:fa:d4:18:79:37:9a:
                    94:a3:4c:bd:bd:13:74:30:d1:2c:3b:c9:78:3c:9c:
                    78:9f:7d:a5:c4:a9:8e:19:a5:92:ff:bb:46:7e:bb:
                    df:75:b7:72:69:26:f4:83:53:33:91:75:28:49:8b:
                    bd:18:d4:92:14:b5:02:9d:a0:37:d3:8c:a5:71:d8:
                    eb:15:be:2d:bc:89:c0:27:25:b0:14:c1:30:c0:7e:
                    25:4d:9f:e7:70:75:83:73:52:a0:27:1b:32:c7:06:
                    02:d6:4f:27:12:ad:09:7f:b8:2d:9f:7d:50:61:a8:
                    a5:b3:3a:e8:33:d3:cf:dd:64:d7:e9:f0:35:f7:99:
                    53:b0:fa:77:e0:b9:fe:80:63:b4:ea:12:51:6e:b8:
                    4d:f9:9f:26:74:b3:82:3c:5b:e7:8a:2a:ba:6f:24:
                    cc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:9F:7E:FE:77:78:0D:5C:C0:7A:A7:F4:E8:FB:52:DD:DA:FF:47:3D
            X509v3 Authority Key Identifier:
                keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/152e6874d124801cd3cada8625a41558455fd538.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:7c:9c:ec:cd:3f:ab:80:53:5c:bf:50:72:25:68:4c:b7:34:
         d3:91:b4:3b:53:23:0f:71:3d:49:4e:47:71:27:00:60:91:e6:
         c3:11:a4:27:e0:ee:86:6c:ab:1c:06:41:b3:62:21:76:db:dd:
         aa:86:6a:49:42:87:0a:e4:a8:0b:ff:d5:69:57:4a:c2:6a:bd:
         aa:ef:1a:65:c4:79:f2:7b:97:d7:39:ea:a6:9d:6b:31:a0:5b:
         77:0c:5b:d1:3f:b8:cf:c3:36:a4:73:72:ba:5d:d4:f1:3b:ca:
         2f:e6:76:32:67:b8:56:0c:4a:24:6a:ad:fa:4b:9b:7d:e6:16:
         5d:0c:d1:07:a3:17:c9:ca:2a:11:5b:a4:84:14:a3:72:df:0f:
         6a:f5:13:f2:1e:1d:de:14:31:15:07:7f:0f:70:76:49:d5:08:
         ee:e2:40:5e:23:be:3a:58:e9:c9:5b:ea:08:f6:98:f2:00:e1:
         45:02:ca:48:b8:29:a3:1e:54:77:0a:c1:df:df:1d:88:3d:8e:
         78:e5:a0:3f:22:5b:02:56:e4:61:48:78:e3:6a:7c:e2:1d:f0:
         4e:62:c9:7f:8f:67:73:14:c6:51:17:45:38:81:86:df:45:24:
         70:26:ea:ce:fd:fc:ed:97:d2:11:62:d4:50:ca:05:41:2e:31:
         d0:11:9b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----