Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/b7412fbec8ef6dddaccf51c60701655e3dddc094.roa
File:                     b7412fbec8ef6dddaccf51c60701655e3dddc094.roa (raw, json)
Hash identifier:          obdk8pQ0G10mWg15gDMouzLF6pRmHGSBNX6VhS2fWho=
Subject key identifier:   75:E5:C9:EF:D8:65:CB:E8:3D:C3:9F:A8:79:6B:C6:E4:75:A4:23:E7
Certificate issuer:       /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial:       273F0C
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/b7412fbec8ef6dddaccf51c60701655e3dddc094.roa
Signing time:             Tue 13 Feb 2024 21:03:39 +0000
ROA not before:           Tue 13 Feb 2024 21:03:39 +0000
ROA not after:            Fri 13 Feb 2026 21:03:39 +0000
asID:                     262191
IP address blocks:        2800:b70:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2572044 (0x273f0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
        Validity
            Not Before: Feb 13 21:03:39 2024 GMT
            Not After : Feb 13 21:03:39 2026 GMT
        Subject: CN=b7412fbec8ef6dddaccf51c60701655e3dddc094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:08:aa:fb:94:cf:4f:67:b6:2d:2e:09:d6:a6:
                    23:31:bc:a5:32:52:8a:90:f1:50:87:c2:eb:df:bd:
                    c2:97:04:a8:bd:17:fc:86:ce:41:cb:4b:b7:63:9c:
                    f1:18:de:0c:e8:09:c2:92:7a:b5:d4:5d:9b:72:e2:
                    a8:cc:09:ef:60:2b:ba:68:61:c2:b1:2d:e8:e2:0e:
                    95:c3:b9:05:4b:4e:b1:d1:d8:ba:e3:d1:b0:18:82:
                    49:73:c3:49:2d:40:d4:10:c1:99:ca:62:63:0a:2d:
                    1f:53:91:14:3f:3e:a0:9b:cb:92:50:bd:2a:2c:7c:
                    15:a3:97:e4:37:46:cb:ff:84:50:ba:06:57:ff:34:
                    81:3b:9c:44:54:9c:f3:f9:1d:e9:3c:36:a9:06:73:
                    5c:22:97:80:fe:3b:f6:80:d3:13:96:4b:db:7f:64:
                    aa:05:87:4c:d5:39:f7:f1:89:58:a7:f3:a7:b4:3a:
                    76:4c:bf:86:25:df:3e:a8:63:a3:0a:19:1e:f2:e7:
                    48:70:59:6f:15:2e:5f:7f:ad:7b:dd:e1:fe:67:39:
                    8a:34:fc:df:ee:e1:56:1b:bb:0c:35:eb:ec:ad:19:
                    2f:da:b4:54:c2:1f:bf:5d:fd:fd:bf:d0:37:98:c6:
                    ac:be:cc:de:99:a5:49:9a:d3:84:c6:4c:a5:2d:2d:
                    5f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E5:C9:EF:D8:65:CB:E8:3D:C3:9F:A8:79:6B:C6:E4:75:A4:23:E7
            X509v3 Authority Key Identifier:
                keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/b7412fbec8ef6dddaccf51c60701655e3dddc094.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:62:ff:49:af:e8:d9:fa:cf:1e:d1:f5:ec:98:2f:93:16:38:
         bf:f7:b4:5c:17:fc:8d:28:69:23:1c:df:80:47:52:df:c8:18:
         eb:b3:a0:f5:b0:19:a7:df:21:02:11:f9:ee:0c:21:e0:78:d8:
         95:e3:f2:5d:15:9f:1b:61:51:35:52:6f:33:81:77:10:b1:52:
         0b:cd:c8:ab:cd:5f:d6:6b:da:9f:de:f4:f3:e7:b0:53:a3:54:
         36:30:68:4f:2f:0f:b7:e1:2a:ea:58:cc:d1:17:2b:01:ae:f6:
         ad:aa:83:7d:52:32:d3:1b:f5:48:5c:59:a8:9f:90:49:77:53:
         b8:a5:82:36:6b:53:1c:f3:5d:fe:68:89:23:bf:b7:1d:66:65:
         1d:4f:39:23:21:74:1e:ee:03:c1:49:0d:2d:b9:a0:ab:b8:17:
         95:7e:f0:88:4a:34:d1:6f:b8:4a:c1:2a:f2:ee:5c:2c:ee:6a:
         dc:80:9d:b6:ff:81:d7:fe:9d:4c:c5:a6:26:0e:b8:61:5f:66:
         23:05:d6:1e:28:7d:bc:db:f0:3c:3c:93:0c:15:09:7d:c3:19:
         0d:59:f5:05:61:7d:50:19:ce:a1:2c:17:42:fd:63:ab:5d:83:
         94:cf:50:af:4e:52:a8:6e:f8:d1:8f:e7:ee:b9:2f:21:ba:ef:
         2a:94:6d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----