Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/a1560c6ad1905e6e6a2fb70d839fbe0a09741760.roa
File:                     a1560c6ad1905e6e6a2fb70d839fbe0a09741760.roa (raw, json)
Hash identifier:          3bVZx3AhZbBs0FY3UWpzqnAjNvmrXhUo9pIqS6ZpCFY=
Subject key identifier:   64:DC:85:7A:E4:82:9B:90:F4:70:C7:67:22:35:BE:1A:91:42:4E:35
Certificate issuer:       /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial:       04BDC5
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/a1560c6ad1905e6e6a2fb70d839fbe0a09741760.roa
Signing time:             Sun 14 Apr 2024 20:08:03 +0000
ROA not before:           Sun 14 Apr 2024 20:08:03 +0000
ROA not after:            Tue 14 Apr 2026 20:08:03 +0000
asID:                     28002
IP address blocks:        2801:165:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310725 (0x4bdc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
        Validity
            Not Before: Apr 14 20:08:03 2024 GMT
            Not After : Apr 14 20:08:03 2026 GMT
        Subject: CN=a1560c6ad1905e6e6a2fb70d839fbe0a09741760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:63:b4:8b:4d:13:3c:cb:07:2a:5b:c7:a0:08:
                    21:96:5a:18:ce:a1:98:e7:99:69:3d:b2:69:55:f0:
                    eb:96:6e:8c:fc:ca:8f:31:68:fd:31:38:fc:23:bc:
                    af:38:0a:0e:53:16:f5:a9:2f:38:29:6e:b9:ff:2c:
                    a8:f2:d9:27:36:9e:f1:28:2c:e5:bd:23:2f:e0:30:
                    64:74:dc:ab:24:11:f8:04:bc:e6:86:c8:51:d9:5c:
                    ba:ef:bc:99:4b:dc:7f:9f:61:d7:0d:81:90:24:51:
                    98:8c:9a:ba:47:38:19:c3:04:6d:64:c1:1f:c6:36:
                    1e:f6:cf:78:ee:65:7c:99:d2:43:c7:8f:4e:4c:f6:
                    48:c7:c5:b4:1f:cc:3d:eb:93:13:36:fa:5e:b6:7c:
                    3c:a3:96:63:56:be:a1:65:ee:7f:57:ce:4c:cb:b7:
                    32:67:c7:e9:6f:bf:d4:9d:f5:ac:66:b5:46:cf:c4:
                    4b:d7:6a:c1:51:ee:52:61:f6:de:a4:a8:28:15:73:
                    0e:66:ea:bd:e1:10:52:b9:bf:db:b9:fe:96:87:45:
                    d9:83:90:de:78:2f:cb:e7:fa:53:72:96:97:9f:69:
                    ad:56:9b:dd:9f:35:bb:b7:de:60:34:7d:c5:fe:15:
                    41:2c:c8:4b:a9:d3:5b:74:1e:f8:65:8a:87:03:95:
                    94:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DC:85:7A:E4:82:9B:90:F4:70:C7:67:22:35:BE:1A:91:42:4E:35
            X509v3 Authority Key Identifier:
                keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/a1560c6ad1905e6e6a2fb70d839fbe0a09741760.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:1a:58:31:53:50:ba:0a:60:ef:fd:0f:2c:9c:69:2b:b2:8e:
         1c:5f:71:bc:26:35:ca:a8:47:a9:50:37:8c:ec:20:b1:93:6f:
         c6:50:b1:a7:07:26:61:46:bd:c2:f3:93:2d:a9:29:41:1f:65:
         8f:34:80:30:2a:37:a9:87:00:ae:dc:31:45:e2:4f:d9:29:db:
         ef:0a:e7:be:91:1e:cd:bc:1f:59:a4:55:64:5f:c8:08:87:22:
         fc:1a:7e:fd:9c:86:47:fa:ea:a2:1d:6f:85:b5:76:c5:19:cd:
         09:7c:9f:78:12:10:6c:30:57:ab:0e:b7:ea:ca:da:1d:83:c6:
         1d:7b:70:46:3e:a4:97:55:90:17:19:c3:91:f5:40:54:27:3f:
         1e:f9:f2:2f:6c:48:a5:96:a3:c2:43:a4:9a:61:72:c9:e3:57:
         9a:31:40:b9:90:a2:ae:47:5d:a3:c1:16:ea:c9:cf:15:d2:5b:
         9c:0b:a3:b9:4b:02:b4:0b:35:eb:f1:be:a7:77:10:d2:7d:a5:
         3e:05:14:c8:4b:32:ce:3c:a7:0b:ae:35:74:58:fd:34:67:c1:
         dd:a9:ee:b6:4d:39:aa:74:c3:c9:fb:4e:2c:c5:4b:f7:5c:98:
         05:53:21:32:25:f5:13:fb:9a:88:ed:08:34:c0:1c:f9:30:1c:
         c4:e3:f7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----