Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/4fcf2c9bcd3933240caf2cb6ef1f5f8a887eda71.roa
File:                     4fcf2c9bcd3933240caf2cb6ef1f5f8a887eda71.roa (raw, json)
Hash identifier:          cl/HB5jDziPC8yeQAFj3mFWQqzuy1gn3M6Eh5KgaXsM=
Subject key identifier:   FC:B5:65:CA:90:90:7B:10:6E:A9:7D:BC:4C:2B:F5:6B:83:E3:E6:C9
Certificate issuer:       /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial:       27689A
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/4fcf2c9bcd3933240caf2cb6ef1f5f8a887eda71.roa
Signing time:             Tue 13 Feb 2024 21:08:45 +0000
ROA not before:           Tue 13 Feb 2024 21:08:45 +0000
ROA not after:            Fri 13 Feb 2026 21:08:45 +0000
asID:                     262191
IP address blocks:        2800:b70:17::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2582682 (0x27689a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
        Validity
            Not Before: Feb 13 21:08:45 2024 GMT
            Not After : Feb 13 21:08:45 2026 GMT
        Subject: CN=4fcf2c9bcd3933240caf2cb6ef1f5f8a887eda71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cb:3f:62:a3:f5:af:8f:fb:84:ba:b0:71:5e:
                    46:f6:48:cb:35:2c:b9:ab:bd:42:58:26:1d:25:b3:
                    92:73:03:df:7f:42:ad:29:b9:0d:c6:e4:df:fb:e6:
                    bd:66:40:8f:35:af:08:3f:de:b9:a7:93:73:3e:4d:
                    47:55:3a:7b:cb:0d:98:95:e5:d2:8d:48:7c:1f:be:
                    ff:16:c4:48:31:d9:ae:fc:1b:89:53:e7:d7:62:44:
                    f4:78:e3:c3:4f:93:a6:9e:1d:81:9b:94:30:7d:82:
                    3f:b7:49:86:41:27:d1:fd:b5:32:f9:1a:af:30:9a:
                    1b:c6:09:ef:29:8d:b5:4f:8c:0b:6b:eb:e4:ea:11:
                    56:ce:14:f9:07:f8:2f:d4:93:0c:57:91:5c:98:97:
                    97:c9:f6:58:29:00:7a:cf:9d:a1:36:63:2f:e1:57:
                    5a:5a:48:cf:b6:69:a1:85:f5:ef:45:0d:c7:c4:76:
                    b8:47:c7:24:67:f8:96:53:a1:96:09:db:a6:ff:78:
                    a7:36:48:70:fc:b3:30:bf:60:b5:a1:0b:43:7c:ed:
                    7c:96:36:f1:47:5a:0f:aa:74:42:26:58:a4:ab:06:
                    ac:bd:e6:77:5b:b3:dd:87:ea:0a:4d:62:4a:74:0f:
                    ed:7f:21:b9:1f:c1:21:49:0e:e1:0c:44:8c:d4:1c:
                    72:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B5:65:CA:90:90:7B:10:6E:A9:7D:BC:4C:2B:F5:6B:83:E3:E6:C9
            X509v3 Authority Key Identifier:
                keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/4fcf2c9bcd3933240caf2cb6ef1f5f8a887eda71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:08:dc:bb:70:66:8b:15:e9:00:25:70:b1:6b:37:e1:c5:95:
         01:d7:37:e2:cc:cd:8e:21:ac:2e:4f:ad:3d:f8:e8:31:2f:f9:
         ab:a3:4e:37:cc:35:45:94:42:0b:57:cc:7c:52:94:da:68:af:
         95:1c:c4:fe:b4:c6:b6:18:88:1f:ef:33:5a:38:f4:ef:10:d4:
         67:2c:9e:12:8c:76:7a:75:34:4f:b8:10:6c:5d:f5:c4:0a:e2:
         94:15:86:02:99:26:15:92:51:3a:b4:3e:f6:e4:ce:6d:4f:c8:
         2d:54:0c:96:02:64:ef:e4:28:7e:84:a8:b6:8f:3c:c9:f8:59:
         a1:73:10:fe:b2:5d:3f:ce:3d:10:f2:8a:a7:68:e9:d0:49:6c:
         68:3f:41:fc:5f:35:95:66:a2:01:b7:95:1a:8c:d6:f1:7f:99:
         b0:4b:13:ee:89:62:86:39:d9:ce:a8:96:81:6c:ec:0d:6a:d0:
         94:c9:d2:2e:4c:3f:15:be:ec:51:68:1a:61:05:2a:ab:b0:a3:
         a5:d2:11:8b:50:aa:84:cd:07:80:94:cc:fc:62:a1:ac:2e:d8:
         7d:f9:55:b7:32:8c:c0:f8:eb:d2:af:80:ff:41:76:e2:92:01:
         fa:80:ea:95:08:67:1a:14:c4:9a:8e:52:59:de:2a:60:15:4f:
         78:3b:a7:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----