Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/19680a6a1bad7320ac10b2e517a2bbc88694f75f.roa
File:                     19680a6a1bad7320ac10b2e517a2bbc88694f75f.roa (raw, json)
Hash identifier:          qJoakIhcSd58UAYGBnLWLpR/7ORBUXI8wSFLq5yIS/4=
Subject key identifier:   75:5E:C6:EF:77:4A:85:ED:4D:3C:15:B5:54:85:98:77:AC:57:33:E1
Certificate issuer:       /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial:       275A2C
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/19680a6a1bad7320ac10b2e517a2bbc88694f75f.roa
Signing time:             Tue 13 Feb 2024 21:06:58 +0000
ROA not before:           Tue 13 Feb 2024 21:06:58 +0000
ROA not after:            Fri 13 Feb 2026 21:06:58 +0000
asID:                     262191
IP address blocks:        2800:b70:1c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2578988 (0x275a2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
        Validity
            Not Before: Feb 13 21:06:58 2024 GMT
            Not After : Feb 13 21:06:58 2026 GMT
        Subject: CN=19680a6a1bad7320ac10b2e517a2bbc88694f75f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:00:9c:c2:bb:64:db:f0:ae:09:0f:cf:8a:ff:
                    41:df:fb:de:60:dc:92:90:09:13:ed:cc:7b:14:04:
                    3a:3f:81:76:18:65:64:fc:3c:97:8a:55:52:85:77:
                    d1:aa:8d:61:ff:8e:f2:72:00:93:43:d6:94:1a:37:
                    d6:92:d0:73:63:c1:e0:38:10:1d:f5:aa:30:97:66:
                    e3:3f:56:f8:22:cc:ad:3d:24:b7:27:ad:58:37:b9:
                    80:70:62:2a:b7:8c:f2:fe:44:58:a5:8f:e9:ab:a0:
                    ca:2a:7d:96:ea:40:81:08:7f:e3:bb:5e:bf:51:3d:
                    8f:0e:89:01:a0:19:54:09:6e:fb:e2:e6:08:19:4c:
                    c7:44:4d:b9:72:fc:89:08:d6:67:85:1a:30:33:58:
                    2f:cc:9e:b3:f1:90:88:ad:da:4f:84:45:0b:e7:67:
                    00:e0:d7:ec:e0:cf:a4:ef:9b:76:2c:09:4e:18:68:
                    39:be:46:0f:a7:21:8b:48:7c:82:1e:e2:3e:9b:a7:
                    a7:3d:0a:d6:3a:14:3e:ab:1f:24:28:94:3e:55:49:
                    10:aa:ea:d1:07:33:75:76:26:a2:1c:ab:e2:ee:35:
                    6d:83:d7:6b:51:56:d7:4c:43:f3:a1:26:21:8f:ec:
                    f0:57:88:c3:8e:49:be:86:71:47:68:7d:e7:12:81:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:5E:C6:EF:77:4A:85:ED:4D:3C:15:B5:54:85:98:77:AC:57:33:E1
            X509v3 Authority Key Identifier:
                keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/19680a6a1bad7320ac10b2e517a2bbc88694f75f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:1c::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:c8:28:7f:45:3d:16:b8:0e:69:ab:de:32:63:d5:cf:e2:a9:
         cd:98:ad:d2:d0:4c:ab:25:48:39:60:c3:ad:8b:6b:5a:57:3e:
         cd:6b:de:3e:37:88:0a:b6:5a:5f:fb:4c:4c:61:6a:5b:8c:4d:
         3f:ec:2c:98:e5:13:1f:fd:d8:c5:2a:e8:10:82:d0:7d:57:b3:
         c4:56:cd:e2:19:f7:2f:1b:db:2b:8d:d0:eb:2c:bb:f5:0a:24:
         d2:94:54:00:99:31:db:25:38:89:2a:9d:0d:38:32:dd:4e:fa:
         10:52:b7:9c:9a:1f:7e:31:82:53:a2:23:08:7f:a9:dc:5b:71:
         1b:a1:18:f8:61:cc:1c:15:4a:9b:b1:6a:85:f3:65:df:fe:4f:
         88:b7:93:69:28:d1:ca:3c:2f:be:33:5e:72:26:84:d4:50:9f:
         41:57:b2:42:87:8b:0b:37:21:18:06:d6:71:61:76:ce:95:e6:
         07:bb:58:28:be:50:ba:c9:bd:de:7f:12:b2:e9:d4:16:f6:f9:
         c3:64:80:d7:68:3c:3c:16:6a:a8:94:ff:9f:98:d7:04:be:ff:
         29:5c:e4:e4:95:f9:e8:ea:b3:93:88:14:42:7a:97:54:65:d2:
         a6:0b:ef:4c:a9:09:3a:49:70:7b:ef:5f:98:37:53:7a:c3:3e:
         cb:72:57:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----