Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/fa7ec8f21be819b58c81721df176257dfc238d7c.roa
File:                     fa7ec8f21be819b58c81721df176257dfc238d7c.roa (raw, json)
Hash identifier:          /Y7yvNaiTdtQI7aS6hcReIgetRpyIs0dBcKKBZJiZuU=
Subject key identifier:   24:EC:BF:0A:73:BC:75:E5:64:87:48:E8:65:F4:55:F8:B6:B0:F1:3A
Certificate issuer:       /CN=b0951c16b2e21e742562516097161ba7ad928df5
Certificate serial:       016B3F
Authority key identifier: A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/fa7ec8f21be819b58c81721df176257dfc238d7c.roa
Signing time:             Wed 06 Dec 2023 18:04:41 +0000
ROA not before:           Wed 06 Dec 2023 18:04:41 +0000
ROA not after:            Sat 06 Dec 2025 18:04:41 +0000
asID:                     28002
IP address blocks:        2801:165::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92991 (0x16b3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0951c16b2e21e742562516097161ba7ad928df5
        Validity
            Not Before: Dec  6 18:04:41 2023 GMT
            Not After : Dec  6 18:04:41 2025 GMT
        Subject: CN=fa7ec8f21be819b58c81721df176257dfc238d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:09:99:17:0f:a0:6d:bf:ef:a2:54:58:f5:94:
                    bb:9e:91:82:bd:7e:0a:25:90:0b:21:22:cf:90:f4:
                    7c:5c:06:85:af:cf:b3:05:fb:27:a8:b2:35:c9:7a:
                    91:a7:2c:bc:e8:36:b2:0d:b6:c1:07:29:35:b0:33:
                    46:57:88:a3:d6:d5:21:b1:78:9b:fb:e3:f6:52:4a:
                    74:ac:3f:e2:63:1b:dd:8b:1a:a2:94:94:fa:d3:ee:
                    bc:67:7e:f8:8d:04:8d:93:00:22:9d:16:6f:e8:7d:
                    94:0b:d7:1c:3e:d8:a4:57:63:64:45:71:26:8e:93:
                    fc:70:5c:d8:bb:f4:50:11:17:48:5a:64:0d:85:54:
                    97:90:df:41:fb:18:e3:44:e1:a2:25:ee:e0:6b:24:
                    0b:06:cb:2b:ed:04:0c:29:04:79:0f:de:32:3a:24:
                    b3:b9:9b:b3:55:67:fd:c7:dd:16:d7:4b:40:16:f4:
                    ac:e5:bc:9d:8e:31:c7:e0:eb:13:7a:79:5f:8f:67:
                    e6:8d:a5:50:4d:10:93:08:71:6b:e3:db:43:c9:ae:
                    44:1a:61:0d:44:93:00:50:ca:94:4d:42:7d:86:5e:
                    59:a2:f5:f1:29:a4:0d:b5:57:e4:78:fa:0d:a2:05:
                    0c:63:62:77:fa:76:e7:1c:47:00:6e:f1:1b:d9:4e:
                    cb:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EC:BF:0A:73:BC:75:E5:64:87:48:E8:65:F4:55:F8:B6:B0:F1:3A
            X509v3 Authority Key Identifier:
                keyid:A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/fa7ec8f21be819b58c81721df176257dfc238d7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

    Signature Algorithm: sha256WithRSAEncryption
         11:0f:b6:f5:5f:e5:71:11:ab:0f:fa:d9:85:0b:92:13:0b:6a:
         d9:69:a6:69:05:e5:8e:fa:5a:61:3b:19:90:35:2d:ca:74:62:
         43:8a:b8:c6:b9:3f:51:22:ca:85:8f:78:38:2f:df:de:17:0d:
         a5:19:06:60:d3:ed:99:09:e8:64:ce:ce:93:d3:ae:19:52:0f:
         55:ac:cd:12:31:f3:f9:1d:8a:8a:15:da:f7:34:7e:7a:fd:26:
         4b:c1:c5:71:18:74:ad:ab:bc:64:77:0b:4a:07:3b:20:f9:c9:
         7c:86:d1:a0:1c:64:65:1c:c9:6b:18:a6:41:de:47:fd:f2:87:
         ce:04:6f:d5:e1:a7:a8:f8:f9:45:50:1c:85:3b:e8:53:84:2a:
         1a:dc:49:fb:52:6d:2d:24:69:09:44:76:eb:2b:15:67:90:5b:
         91:1d:50:0d:ff:91:d9:2d:58:47:c2:4d:48:6a:a0:fb:85:f9:
         49:34:42:3b:41:a4:c3:d0:2e:a2:f3:2c:b1:0a:d7:e3:5f:e0:
         43:32:5b:23:58:4b:36:cb:a2:82:3a:36:74:84:70:f1:de:c7:
         50:82:12:6d:a2:cd:f3:dd:62:fb:37:bd:32:9e:e9:92:5c:b5:
         83:4e:c9:d3:42:05:3d:75:3b:3a:dc:2a:16:30:40:2d:ed:1c:
         0f:95:c3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----