Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/ca0c285b488b8c2325431ee1ae6937ba61c1305b.roa
File:                     ca0c285b488b8c2325431ee1ae6937ba61c1305b.roa (raw, json)
Hash identifier:          GAsivBzvUGsT7zhCKaDwpBMOXt5QEIcxy6RrdKRNPEo=
Subject key identifier:   02:41:E1:5D:61:E2:D1:2A:7D:F0:EE:9A:A9:12:62:CF:4B:29:C0:B6
Certificate issuer:       /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial:       04BB73
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/ca0c285b488b8c2325431ee1ae6937ba61c1305b.roa
Signing time:             Sun 14 Apr 2024 04:17:35 +0000
ROA not before:           Sun 14 Apr 2024 04:17:35 +0000
ROA not after:            Tue 14 Apr 2026 04:17:35 +0000
asID:                     28002
IP address blocks:        2801:165:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310131 (0x4bb73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
        Validity
            Not Before: Apr 14 04:17:35 2024 GMT
            Not After : Apr 14 04:17:35 2026 GMT
        Subject: CN=ca0c285b488b8c2325431ee1ae6937ba61c1305b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b5:9e:c6:a4:e2:31:bb:ee:14:57:53:50:58:
                    c2:0a:1a:95:b7:3f:03:55:20:9a:4f:ef:dc:2d:5d:
                    2d:2e:e9:e8:05:7d:0e:ad:17:5d:c2:14:1e:f7:1c:
                    36:ad:4f:d1:19:73:16:18:b5:c7:7a:10:b9:0a:ba:
                    5b:09:64:95:4e:82:7f:f4:bd:1b:94:73:c8:52:d2:
                    33:89:d1:a5:4f:fa:d7:85:72:0b:69:35:62:03:e1:
                    78:4f:66:3b:3b:0b:a0:30:bb:81:c4:da:42:48:7b:
                    99:91:24:d6:52:7f:c1:b9:46:06:9d:43:6e:00:cd:
                    9a:39:33:59:95:1e:18:fe:e5:92:cd:7f:cc:af:08:
                    dd:e9:84:36:d5:de:81:87:4d:37:cc:eb:58:cb:58:
                    26:32:d6:c7:f8:c0:c8:fe:3e:6b:d3:63:f2:f7:2e:
                    b9:ca:36:dc:bd:7b:b7:cb:5c:91:fc:ed:52:94:cb:
                    2e:9a:fb:c4:18:87:b2:a0:ad:b3:ff:f4:20:40:10:
                    a4:75:cb:3c:10:ba:26:be:da:d3:98:e9:ac:12:f1:
                    38:b8:53:66:5c:9e:5b:ed:14:06:3d:ca:8b:02:fc:
                    8b:db:56:1c:42:11:28:1c:aa:0f:13:ed:31:36:c7:
                    ec:96:85:cf:2f:f9:7c:44:e5:33:78:56:f7:47:56:
                    fa:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:41:E1:5D:61:E2:D1:2A:7D:F0:EE:9A:A9:12:62:CF:4B:29:C0:B6
            X509v3 Authority Key Identifier:
                keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/ca0c285b488b8c2325431ee1ae6937ba61c1305b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:a3:21:ef:a0:32:81:fb:a5:e4:72:da:60:7c:95:8d:48:1c:
         21:9c:a2:1d:b1:82:d2:cd:b7:a1:ad:12:60:41:e7:af:8a:98:
         bf:fe:7d:da:7e:9f:2d:3f:2b:57:43:24:53:ff:2b:59:84:50:
         46:da:2a:f4:95:3f:6b:b5:ba:cd:f2:61:6a:25:db:62:38:bd:
         02:1a:6a:59:99:29:e0:9b:e9:26:bf:8d:d3:ea:e5:d5:3e:94:
         2c:8a:90:34:16:7d:a0:91:c7:31:05:aa:ff:71:50:cf:d1:92:
         0b:0c:42:aa:89:46:4c:68:fc:28:ab:d3:f0:16:8d:d6:7e:23:
         91:9e:40:79:95:cb:1b:5b:7b:14:9a:85:5d:6a:4d:ae:05:7f:
         e5:79:6e:1d:92:f4:40:8d:48:99:1e:0f:58:90:9f:47:1d:30:
         ed:f6:43:15:38:a8:9b:ab:b0:f4:40:b9:25:7b:af:20:63:fb:
         26:52:4f:46:fb:25:87:0f:5d:99:8f:47:5b:dd:1b:33:c4:98:
         18:3c:7c:ff:d5:24:ec:4d:9b:a6:c7:d2:c2:7e:e0:9a:6c:a2:
         f5:e8:b1:b0:5f:56:45:ff:4b:27:84:e7:d9:91:80:66:60:4e:
         79:a0:6e:7a:9e:e5:0b:0b:83:81:86:fd:40:51:2c:e4:a2:d7:
         41:9e:f2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----