Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/9ef199793b1ea529c2467962c213c6bd92ba8edd.roa
File:                     9ef199793b1ea529c2467962c213c6bd92ba8edd.roa (raw, json)
Hash identifier:          yNetEHzq1Img5MWUDkHxQQ6ox/Q3eKBEQV0MtasVW3U=
Subject key identifier:   2C:2B:EF:8D:B0:7E:2A:A6:4B:97:B2:94:D7:E7:FE:3B:8A:E1:77:BF
Certificate issuer:       /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial:       03839D
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/9ef199793b1ea529c2467962c213c6bd92ba8edd.roa
Signing time:             Tue 27 Feb 2024 12:58:40 +0000
ROA not before:           Thu 01 Feb 2024 02:00:00 +0000
ROA not after:            Sun 01 Feb 2026 02:00:00 +0000
asID:                     28003
IP address blocks:        2801:165::/44 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230301 (0x3839d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
        Validity
            Not Before: Feb  1 02:00:00 2024 GMT
            Not After : Feb  1 02:00:00 2026 GMT
        Subject: CN=9ef199793b1ea529c2467962c213c6bd92ba8edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:83:41:4e:b9:e0:eb:1e:1f:e2:0f:ce:c3:b5:
                    37:b9:04:3b:bf:3b:e8:c8:e6:c9:06:e5:9b:a6:de:
                    b0:3c:b1:0c:4b:3d:ed:11:89:ee:ef:2b:bd:e6:a6:
                    c8:af:00:10:83:b4:49:fb:04:92:f4:60:fd:48:37:
                    d0:ab:b7:5b:b4:e3:4c:f8:47:87:17:2d:aa:f3:bf:
                    3c:0e:27:a1:ec:b4:5d:4c:69:32:d6:0c:9e:05:1f:
                    1b:2d:18:32:1a:56:a3:41:e0:39:cb:fb:ea:67:75:
                    1e:f7:a7:6e:58:a2:b9:e7:db:ea:dc:14:f9:b5:f2:
                    86:c7:8d:06:dd:df:11:c6:30:71:ab:b7:ff:11:3a:
                    91:4a:a1:de:c2:c5:4a:e4:94:61:78:f0:0c:99:73:
                    a4:e3:2d:1f:d3:8f:8a:d5:6d:5d:fd:c7:b7:8c:8c:
                    db:6e:3c:2d:7a:3a:e4:4c:d4:2c:12:89:77:dc:b6:
                    76:00:12:9d:55:93:cd:6a:75:bd:20:a2:03:7d:a2:
                    c8:7a:5d:f1:a7:73:39:04:00:d7:27:b3:97:4f:9d:
                    aa:4e:84:12:aa:38:bb:5a:0a:1c:56:b3:f2:69:d4:
                    6d:49:a6:cc:8e:53:97:7d:26:3a:d5:32:84:19:c1:
                    47:0f:84:e8:3e:db:f1:11:b3:4c:ed:9e:78:9a:8e:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:2B:EF:8D:B0:7E:2A:A6:4B:97:B2:94:D7:E7:FE:3B:8A:E1:77:BF
            X509v3 Authority Key Identifier:
                keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/9ef199793b1ea529c2467962c213c6bd92ba8edd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

    Signature Algorithm: sha256WithRSAEncryption
         32:e9:28:d1:d1:33:b0:1c:86:3a:d3:8d:48:f3:df:80:d2:12:
         c5:9a:10:69:a6:bd:58:e3:09:0e:f3:34:88:ab:bd:11:f1:35:
         ac:80:e5:10:74:f2:ad:19:14:94:c3:39:06:1c:8f:3f:8e:da:
         1a:78:b4:6d:75:6e:c0:c8:51:96:e8:e7:a2:d3:61:83:26:a8:
         a1:46:d0:b2:96:68:d7:4b:49:e5:60:f1:14:ec:06:06:cf:c5:
         49:4b:30:cc:11:28:74:9c:12:31:08:a1:a0:36:ef:c9:77:8f:
         b9:86:07:49:91:3f:50:ca:c8:e7:32:2b:a1:3c:3a:fd:00:b4:
         06:30:56:d2:47:31:9f:8e:56:5e:a0:4c:0f:60:74:a0:46:55:
         24:48:f2:2d:b4:b0:70:90:56:30:73:6c:1c:e0:f0:12:78:e7:
         8a:fd:ce:ce:03:ea:af:7f:b0:5a:48:d3:7e:2f:62:4a:c8:37:
         43:36:dd:bc:fe:b0:cb:36:32:49:9e:5f:81:2b:02:b3:a7:ab:
         c8:f4:4f:ef:17:3f:ab:c5:82:63:9e:99:a4:7d:e8:e2:aa:38:
         23:d8:76:51:f8:90:28:49:5e:55:fe:04:f0:19:f7:f3:cf:a8:
         35:bb:2d:76:e8:3d:8b:58:ae:30:01:67:c7:cc:41:66:a3:2c:
         ed:08:59:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----