Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/e9399957b4174257445e2bef7c32a62cdf02db12.roa
File:                     e9399957b4174257445e2bef7c32a62cdf02db12.roa (raw, json)
Hash identifier:          R7jIp6bEnLc9FQ1ZBtcxozKOhDiGt4TsF3L33qddJRA=
Subject key identifier:   3A:1C:79:F0:B7:7A:E2:11:EA:20:A1:4A:36:9E:0C:B6:63:65:53:A0
Certificate issuer:       /CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
Certificate serial:       274CE9
Authority key identifier: 86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/e9399957b4174257445e2bef7c32a62cdf02db12.roa
Signing time:             Tue 13 Feb 2024 21:05:50 +0000
ROA not before:           Tue 13 Feb 2024 21:05:50 +0000
ROA not after:            Fri 13 Feb 2026 21:05:50 +0000
asID:                     262191
IP address blocks:        2800:b70:1f::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2575593 (0x274ce9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145
        Validity
            Not Before: Feb 13 21:05:50 2024 GMT
            Not After : Feb 13 21:05:50 2026 GMT
        Subject: CN=e9399957b4174257445e2bef7c32a62cdf02db12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:12:f0:53:ef:78:89:ee:08:d4:45:8c:e1:cf:
                    df:97:74:58:bb:87:9c:8c:e9:85:5b:e2:5c:da:f3:
                    a8:eb:b3:12:5d:f4:c0:ce:3e:2e:d7:9e:49:5b:bc:
                    da:88:c3:08:a9:23:bd:ea:8e:fd:61:26:b0:50:f6:
                    ed:2c:bf:70:2c:38:3d:bb:c9:cd:0c:7e:5b:f3:a0:
                    26:93:b0:ce:d5:af:77:ad:0d:8a:95:5d:77:dd:87:
                    9a:61:c4:ef:31:2f:e1:0e:8d:e4:76:b8:87:4f:24:
                    a5:27:3b:c8:7d:a0:80:2d:7c:db:ae:ec:23:cd:5f:
                    4f:32:80:f7:a3:ce:a6:db:b2:43:25:98:ab:41:73:
                    f7:28:4e:93:44:86:1c:fc:46:df:e3:70:95:d3:0f:
                    2b:f6:6e:57:e1:82:b9:27:ee:66:52:49:28:39:af:
                    c6:20:18:ad:2d:11:cf:f8:03:79:f7:68:da:32:1e:
                    c7:b3:b8:1d:c5:ce:3d:fe:c1:2b:3e:af:6a:6d:35:
                    50:a7:bf:75:30:f8:54:38:92:fb:38:86:04:a7:44:
                    f4:f2:5b:1d:9a:56:4a:59:c9:f7:5d:16:b0:e4:70:
                    95:32:61:4a:65:25:8b:37:73:91:69:ff:66:c0:da:
                    ac:0a:da:8a:63:ab:cb:67:c0:3f:9c:df:e8:cc:d6:
                    81:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:1C:79:F0:B7:7A:E2:11:EA:20:A1:4A:36:9E:0C:B6:63:65:53:A0
            X509v3 Authority Key Identifier:
                keyid:86:C6:F5:E4:00:61:03:3C:95:A1:25:D0:DD:5E:0E:4F:35:83:1A:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/e9399957b4174257445e2bef7c32a62cdf02db12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/15c2558a-1d51-4566-a755-b79b45a14a63/49acb4fa1985b3a9a0355a4a9fa5bf64d61c6145.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:b70:1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:59:80:06:a4:71:1c:ff:84:28:3e:58:d5:f5:e1:76:74:b7:
         8f:3c:fa:f9:02:0d:32:52:8f:c7:be:14:95:33:89:76:b7:88:
         12:03:a8:dc:13:e9:9e:be:66:c6:58:1d:29:b2:fb:8c:b2:b0:
         41:1d:97:55:58:3e:5f:4f:e6:ab:e0:da:18:88:8a:f3:a4:73:
         c9:86:09:96:2b:98:19:5d:73:ce:86:3d:f9:9d:c6:28:c8:8a:
         a7:fb:44:fe:64:3c:6a:e0:17:fa:c4:b6:d0:23:97:2e:e3:b7:
         ad:b7:6f:af:89:49:f1:89:a0:97:e9:8f:2a:d0:80:2c:85:c5:
         41:1a:ad:de:92:4e:a9:93:96:e1:96:54:40:35:89:26:7b:e6:
         96:30:a6:d2:00:cb:92:77:84:f2:fe:d4:f5:80:fb:34:88:d9:
         16:ad:53:18:1c:3e:ee:66:5d:d8:2a:43:8c:9e:d4:e4:f7:ce:
         be:04:d3:d0:0b:c6:44:2d:b7:bc:ef:d4:3b:26:ff:15:be:6f:
         54:5b:93:c9:0d:31:13:2f:e0:69:da:a5:ab:59:59:be:0c:ea:
         53:f5:1d:fe:a3:a2:b7:a7:b7:ef:49:12:2b:1d:17:a4:3c:5c:
         10:d4:6f:cb:75:47:e7:ec:d7:71:25:f0:b1:c6:21:80:c8:e4:
         71:31:30:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----