Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/b636e231055a64348a6fd0269cece96fb5f56e35.roa
File:                     b636e231055a64348a6fd0269cece96fb5f56e35.roa (raw, json)
Hash identifier:          QfSayWeG7tQ6H0mw6xwvbSLDhCeL2UetWkl4v/y5gKU=
Subject key identifier:   28:9D:3D:B5:E0:1F:D9:EB:F5:77:0D:7A:2F:ED:29:BC:96:FD:CB:BA
Certificate issuer:       /CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
Certificate serial:       1E7B38
Authority key identifier: 5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/b636e231055a64348a6fd0269cece96fb5f56e35.roa
Signing time:             Fri 03 Mar 2023 14:39:15 +0000
ROA not before:           Mon 29 Mar 2021 03:00:00 +0000
ROA not after:            Tue 30 Mar 2060 03:00:00 +0000
asID:                     26611
IP address blocks:        2800:800:960::/48 maxlen: 48
                          2800:800:940::/48 maxlen: 48
                          2800:800:950::/48 maxlen: 48
                          2800:800:970::/48 maxlen: 48
                          2800:800:930::/48 maxlen: 48
                          2800:800:920::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1997624 (0x1e7b38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
        Validity
            Not Before: Mar 29 03:00:00 2021 GMT
            Not After : Mar 30 03:00:00 2060 GMT
        Subject: CN=b636e231055a64348a6fd0269cece96fb5f56e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:44:34:77:a6:61:45:4a:81:d0:92:1e:f9:c0:
                    cd:64:66:3b:a1:58:de:9c:ba:f6:50:07:0d:c7:52:
                    95:0c:58:f1:1e:82:f3:2c:6e:81:0e:6f:c9:8c:6c:
                    be:f8:5e:cf:51:a6:00:19:b8:a8:fa:f8:90:cb:0e:
                    2e:80:04:84:1d:c7:d3:b2:9b:8d:45:b2:b7:94:1d:
                    e8:23:56:9e:b4:9a:40:f5:de:76:cc:83:69:e8:16:
                    e6:8d:77:ab:33:31:3b:c6:da:85:bd:f8:5f:9d:e8:
                    e0:61:4d:b8:71:c7:3b:8c:8d:62:2c:5a:e6:31:a3:
                    e6:2d:cc:f6:79:da:ef:96:97:b5:8d:ac:2a:51:7c:
                    35:3e:d9:96:6e:0b:7e:de:7a:65:d6:2f:cc:82:92:
                    12:5a:b6:b9:b7:a0:46:50:50:22:66:9b:bd:e5:bb:
                    e8:f2:17:9e:d9:9e:79:fe:cf:53:e6:a2:4a:0f:a8:
                    4f:73:62:cd:74:24:b7:05:5f:4b:d3:2a:af:4c:67:
                    47:cb:8c:6b:36:c4:a7:60:80:1f:0c:32:de:56:b5:
                    93:d7:cb:f4:e9:09:35:9e:5e:41:98:e4:9c:3e:1b:
                    1b:9e:6e:92:7d:8d:86:a7:ea:d9:12:98:4d:e7:29:
                    59:be:27:9e:21:02:d9:be:62:0c:cd:09:fb:44:cd:
                    d8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:9D:3D:B5:E0:1F:D9:EB:F5:77:0D:7A:2F:ED:29:BC:96:FD:CB:BA
            X509v3 Authority Key Identifier:
                keyid:5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/b636e231055a64348a6fd0269cece96fb5f56e35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:800:920::/48
                  2800:800:930::/48
                  2800:800:940::/48
                  2800:800:950::/48
                  2800:800:960::/48
                  2800:800:970::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:a7:d2:f6:ba:5b:ec:39:60:a3:df:7f:90:6f:48:ab:f8:c2:
         fc:9e:0e:52:44:ac:13:f9:b8:4c:0b:4e:7f:22:6d:6a:c3:e3:
         09:75:df:cf:61:e2:12:26:18:38:3d:c6:97:7e:af:f7:6d:e5:
         84:e7:3e:f9:a1:e1:43:5e:f8:a7:47:44:31:dd:01:fb:bb:fb:
         c4:55:c8:8a:9c:d0:13:9a:08:fc:db:4c:dd:e5:9f:e7:73:ab:
         a4:75:e2:4c:da:1c:6e:9f:ef:11:97:3e:c9:8d:21:c6:1b:b7:
         64:c7:ec:fb:1f:bf:3b:46:21:81:cf:1b:d1:9a:31:ab:b5:e3:
         6c:c7:65:e0:ad:1a:da:5b:4c:0e:28:f5:0f:08:82:d0:a7:0f:
         90:18:20:af:23:75:18:15:25:4c:5a:56:af:da:69:dc:5b:4d:
         23:22:22:b8:93:c6:b0:a7:4f:d7:96:86:6d:a9:ff:50:a1:c3:
         b4:40:8f:2b:35:a3:81:e4:fe:cd:44:ab:c8:2b:82:9f:29:e7:
         58:c2:b5:e3:6c:eb:a9:c1:a8:ec:16:a7:60:68:a9:47:29:46:
         34:55:e1:79:ab:2f:36:d7:40:64:9e:03:6b:26:5c:d8:e0:d1:
         dc:11:cf:7e:23:fc:b4:09:2a:1e:32:b8:15:22:65:cd:f2:8a:
         05:02:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----