Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/075557f9848e8f27a4d81f9cf862e9d005545e06.roa
File:                     075557f9848e8f27a4d81f9cf862e9d005545e06.roa (raw, json)
Hash identifier:          cO0ZyaWaxt9yb00ak5e2dl/90KEm8eUFq0g0B6KCSdY=
Subject key identifier:   DC:47:40:20:20:D9:0C:55:57:8C:7F:96:86:90:6F:D4:C8:60:9F:61
Certificate issuer:       /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial:       273A0E
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/075557f9848e8f27a4d81f9cf862e9d005545e06.roa
Signing time:             Tue 13 Feb 2024 21:02:43 +0000
ROA not before:           Tue 13 Feb 2024 21:02:43 +0000
ROA not after:            Fri 13 Feb 2026 21:02:43 +0000
asID:                     262191
IP address blocks:        2800:b70:601::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2570766 (0x273a0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
        Validity
            Not Before: Feb 13 21:02:43 2024 GMT
            Not After : Feb 13 21:02:43 2026 GMT
        Subject: CN=075557f9848e8f27a4d81f9cf862e9d005545e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2c:bb:f5:50:15:d4:a0:75:16:92:91:ce:81:
                    79:c5:b1:64:f1:41:dd:f5:db:83:b3:2d:f7:61:3a:
                    6e:49:da:30:66:84:d6:50:49:6d:5e:1f:72:ae:30:
                    ef:5a:2b:59:07:b5:7b:71:f9:d9:36:46:9d:6f:c8:
                    40:8c:a0:31:82:c5:23:1f:5b:2d:e5:6c:eb:5c:8b:
                    9a:26:d8:86:30:93:1b:dd:13:b0:10:f0:7d:88:85:
                    53:6a:8e:b3:2d:43:0e:00:71:4f:04:fd:04:22:ea:
                    81:31:f1:49:36:3a:38:6c:39:9a:d0:1b:b5:f1:8b:
                    8b:49:ef:9d:41:bf:a3:c5:cc:fb:ff:9b:4f:29:07:
                    0f:06:3e:17:5c:35:f6:30:f3:7f:aa:47:43:b8:54:
                    04:43:f2:44:3b:9b:f7:58:d6:11:19:b0:c9:72:0e:
                    cf:d7:8e:96:40:62:78:b9:35:25:05:21:13:45:6f:
                    21:cf:f4:e0:e6:ea:57:c6:39:d2:b9:12:c6:a1:6b:
                    16:55:56:d1:b4:7b:8e:eb:a4:12:24:14:ac:68:04:
                    c9:71:ab:d1:72:3d:4e:0d:e6:ca:75:1b:4a:f9:d1:
                    90:4a:dd:02:f4:23:12:8e:2b:b5:11:ad:64:54:1a:
                    4c:39:c1:90:93:d1:5f:11:cb:6f:84:40:c7:b7:bc:
                    7f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:47:40:20:20:D9:0C:55:57:8C:7F:96:86:90:6F:D4:C8:60:9F:61
            X509v3 Authority Key Identifier:
                keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/075557f9848e8f27a4d81f9cf862e9d005545e06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:601::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:3a:76:42:a5:4c:5e:9b:aa:a2:ee:50:fe:eb:c0:48:85:7b:
         dd:6c:59:9e:44:43:16:4a:fe:21:2e:94:15:dd:ac:b2:63:41:
         3f:52:d0:16:ca:30:2e:71:1e:4e:7d:b0:99:75:7f:7f:b5:c6:
         5e:e2:02:f9:6b:fb:de:f5:2d:17:0a:6c:43:89:46:4e:6b:64:
         d5:a4:d2:fa:7e:60:04:51:cc:6e:8c:b9:3a:78:b4:32:49:d3:
         c5:e1:ba:8a:94:c0:69:d8:ba:82:fe:83:5b:e9:f2:d6:4e:5e:
         75:79:70:19:b2:ba:d1:d8:62:52:5c:9c:69:46:37:66:e9:1e:
         f4:20:6e:70:b1:1a:7c:51:47:36:ac:94:6d:60:9a:ff:36:3b:
         78:d7:78:4d:a0:90:68:ae:f5:8b:06:d2:8a:0b:63:7f:72:2c:
         57:75:22:be:65:e4:e9:1a:cd:a2:05:8b:d9:f6:58:9b:31:5e:
         dc:b3:26:d4:8b:45:b2:11:0f:94:68:60:ab:8a:1a:0c:88:1e:
         2d:89:eb:ff:73:fd:ca:df:38:d0:af:6e:dc:b4:8d:f8:e8:03:
         1c:79:62:f0:0c:7c:12:db:54:ff:8a:16:13:36:b4:ce:9a:28:
         2c:24:32:0f:0a:0e:6e:e9:68:92:e3:b5:66:d8:18:85:85:ae:
         c8:4b:7a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----