Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/0d504c7d-9dd7-423d-a91e-70281d2707f6/198300e7a37cef74e7a6063bf3db874d30d765da.roa
File:                     198300e7a37cef74e7a6063bf3db874d30d765da.roa (raw, json)
Hash identifier:          BIezf9KiDhtcALD5T8OJWf+8P2sy/7k3Mn4woN044cY=
Subject key identifier:   94:28:8A:1C:17:DC:14:5F:8F:09:E4:6E:9E:5D:E2:F4:95:5C:A0:78
Certificate issuer:       /CN=a48fe311c2a83c0820501183fc544237207ec446
Certificate serial:       248BBC
Authority key identifier: EA:3C:98:02:6F:A1:69:9B:C0:CB:15:2A:76:FD:43:BE:5C:A4:8F:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a48fe311c2a83c0820501183fc544237207ec446.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/0d504c7d-9dd7-423d-a91e-70281d2707f6/198300e7a37cef74e7a6063bf3db874d30d765da.roa
Signing time:             Wed 20 Mar 2024 16:16:41 +0000
ROA not before:           Wed 20 Mar 2024 16:16:41 +0000
ROA not after:            Fri 20 Mar 2026 16:16:41 +0000
asID:                     262589
IP address blocks:        2801:16:c800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2395068 (0x248bbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a48fe311c2a83c0820501183fc544237207ec446
        Validity
            Not Before: Mar 20 16:16:41 2024 GMT
            Not After : Mar 20 16:16:41 2026 GMT
        Subject: CN=198300e7a37cef74e7a6063bf3db874d30d765da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a8:d8:d6:a1:86:68:2f:e0:8e:1b:97:d2:04:
                    55:e8:89:9b:2c:fd:c9:57:60:10:06:ff:33:f6:7f:
                    b4:14:33:f0:81:18:b7:f4:55:26:48:e7:a9:78:ca:
                    5d:cd:61:f8:32:ac:e5:f3:5c:b7:5e:bf:b5:ca:ec:
                    e6:a8:a0:fe:0d:b3:65:cf:fb:1f:ee:a1:63:12:7c:
                    fc:b6:01:37:10:ed:8d:e5:c7:0a:f2:7a:25:07:8d:
                    fc:1c:0b:c6:a5:b4:51:cb:13:ba:ef:75:9a:d3:2c:
                    6b:e9:e2:f4:36:04:d5:24:c5:d9:fe:a5:62:10:b8:
                    17:bb:33:36:c8:f8:37:ff:85:0e:2b:7b:50:1e:00:
                    af:f4:42:db:22:a7:50:2b:61:6d:46:52:28:1d:76:
                    37:b1:5b:31:2e:9a:cb:41:0e:a3:14:78:41:c4:c8:
                    b3:26:dd:12:0a:c2:f6:bf:4f:60:13:84:e2:31:b8:
                    45:1e:12:7b:40:ba:89:88:f9:29:31:d6:4f:bd:5d:
                    f2:a9:3d:c2:d9:98:46:b2:ba:e4:1b:83:36:db:59:
                    88:ca:f6:4f:0d:86:1a:73:70:7f:bc:3e:3a:cf:91:
                    aa:1b:de:19:ea:bd:bb:e4:ed:05:b4:96:76:53:c4:
                    7f:a8:24:74:77:65:51:e8:75:68:60:53:55:dc:b5:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:28:8A:1C:17:DC:14:5F:8F:09:E4:6E:9E:5D:E2:F4:95:5C:A0:78
            X509v3 Authority Key Identifier:
                keyid:EA:3C:98:02:6F:A1:69:9B:C0:CB:15:2A:76:FD:43:BE:5C:A4:8F:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a48fe311c2a83c0820501183fc544237207ec446.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/0d504c7d-9dd7-423d-a91e-70281d2707f6/198300e7a37cef74e7a6063bf3db874d30d765da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/0d504c7d-9dd7-423d-a91e-70281d2707f6/a48fe311c2a83c0820501183fc544237207ec446.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:71:3c:ff:f3:b6:e9:17:ce:63:d4:fa:a8:5b:7e:08:e3:07:
         39:4d:d1:b3:90:63:a5:8b:66:cc:d4:ac:49:19:e5:2b:8b:b5:
         b6:0a:f3:49:e8:56:85:e0:9e:47:7f:ca:b3:61:2a:b2:ca:5a:
         40:53:3b:e9:84:31:1d:72:70:f4:e6:36:15:3f:37:1d:f2:86:
         19:a2:93:ef:99:bd:0e:4b:6f:dd:60:a9:2a:b7:72:96:25:32:
         7d:58:6a:f1:ed:f8:f0:17:34:d1:c7:76:81:17:e7:70:de:a2:
         ca:f8:73:d6:67:83:33:a2:44:35:76:4d:70:6e:c5:fc:e4:e9:
         78:d7:43:fb:f5:fb:2f:26:b1:b4:36:cd:7e:86:84:a0:e0:c7:
         fa:e2:45:2c:cc:6b:0a:db:0b:e9:5f:c7:2b:47:c1:ac:e4:43:
         a8:5b:97:a5:98:b1:c2:df:1c:e4:3e:df:c7:fb:01:8e:30:f0:
         f9:3e:fb:e4:e5:00:a4:b0:ec:82:22:42:f2:3f:f2:40:5c:a5:
         1e:d1:9f:2a:84:6b:6f:a6:c3:d9:81:4c:77:55:22:68:ba:b1:
         fb:ba:a6:89:d5:27:4d:f8:99:d0:f7:93:91:9f:93:03:47:6e:
         48:1f:be:ba:6e:d7:dc:54:95:5b:85:3a:03:5d:db:30:43:0d:
         e4:45:b4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----