Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/61182d1b31b34eeff8bd91ed4c7678794e187a50.roa
File:                     61182d1b31b34eeff8bd91ed4c7678794e187a50.roa (raw, json)
Hash identifier:          fLMeZ7+VVoMjGLW3PxeOWt2WUnfIJ9ULWkR9EwLecKM=
Subject key identifier:   A4:F5:96:88:9C:93:9F:03:9D:45:31:E7:D3:69:39:9C:E2:9E:45:20
Certificate issuer:       /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial:       2720FA
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/61182d1b31b34eeff8bd91ed4c7678794e187a50.roa
Signing time:             Mon 12 Feb 2024 15:07:48 +0000
ROA not before:           Mon 12 Feb 2024 15:07:48 +0000
ROA not after:            Thu 12 Feb 2026 15:07:48 +0000
asID:                     262191
IP address blocks:        2800:b70:c::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2564346 (0x2720fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
        Validity
            Not Before: Feb 12 15:07:48 2024 GMT
            Not After : Feb 12 15:07:48 2026 GMT
        Subject: CN=61182d1b31b34eeff8bd91ed4c7678794e187a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0b:a3:c0:6a:83:94:26:ee:49:97:33:32:8d:
                    24:02:f1:d3:0c:69:ef:75:b2:14:5e:79:f5:a3:cd:
                    7e:79:f7:5a:a7:2d:45:11:92:3f:b9:5e:1d:9e:b4:
                    57:48:3e:1e:45:c9:52:cc:d3:ea:02:07:c9:13:95:
                    d3:97:4f:3c:3c:77:04:56:e0:7b:c8:1a:5f:bd:22:
                    60:ff:b5:79:b7:ee:1b:7f:6e:7c:fd:e5:6e:af:df:
                    94:02:23:41:bb:57:be:47:24:86:6f:2a:a8:9e:5a:
                    b3:e0:47:b8:01:41:bc:d7:2c:09:6a:68:96:b6:f2:
                    e2:88:42:4c:e3:f0:bc:2c:36:82:ce:79:0f:a6:27:
                    b8:c0:56:88:ef:37:41:81:ad:99:19:b0:14:b2:ce:
                    47:34:eb:be:6b:73:bd:26:4e:6b:15:ee:44:fa:07:
                    2c:f5:ac:f8:5c:e5:86:e3:16:6b:d5:30:48:65:f4:
                    31:57:f4:e8:04:7b:60:8e:2e:d9:bf:8d:23:bc:45:
                    74:88:56:6b:36:95:6e:69:c3:44:4f:25:64:ed:29:
                    c5:a0:94:30:17:27:6d:59:75:2e:35:38:dc:e4:72:
                    23:cd:6c:f3:ca:ad:db:b6:c8:0f:fc:fe:51:17:5a:
                    cc:26:cb:2f:9c:76:3b:c6:7f:90:ec:2f:46:15:c7:
                    f8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F5:96:88:9C:93:9F:03:9D:45:31:E7:D3:69:39:9C:E2:9E:45:20
            X509v3 Authority Key Identifier:
                keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/61182d1b31b34eeff8bd91ed4c7678794e187a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:c::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:88:dd:64:fa:1a:56:64:a1:0c:be:7f:db:88:54:88:39:02:
         e4:eb:34:bd:03:3b:b8:ea:70:ce:39:ed:0d:e3:98:46:6b:eb:
         c7:d0:54:f1:ee:7f:74:f5:73:b7:af:01:8c:25:47:e8:a1:24:
         9f:45:c9:42:1f:8d:1c:bf:30:97:bc:8c:31:5a:76:ae:40:f8:
         3f:f5:37:81:02:47:5a:e5:28:92:78:e2:f8:de:7b:00:e2:32:
         33:5b:48:51:a2:bc:e7:22:c6:d7:6c:38:bc:73:19:fd:ba:da:
         25:62:f4:8b:ac:a4:1c:6b:f9:71:35:8f:e4:28:31:44:25:2a:
         de:17:bb:47:95:89:41:dd:69:ef:d7:a5:13:bb:1c:df:8e:e2:
         e7:c2:cb:9f:4d:26:88:3b:f8:34:28:a0:01:c7:94:ee:ab:0f:
         dc:b5:f3:2c:69:2d:e3:c1:e9:aa:d4:69:fc:c5:92:81:a0:dc:
         c5:b1:66:20:5d:c1:da:45:36:44:12:22:05:71:03:eb:e5:62:
         43:b2:45:3f:05:46:96:b4:09:58:6f:08:43:43:16:6e:42:81:
         69:0f:5d:a4:31:ee:e5:ec:a7:71:19:13:f0:1b:c4:fd:01:f6:
         5d:96:75:5e:60:1e:33:de:a3:25:a6:a7:0b:28:ec:ee:bc:55:
         3c:17:35:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----