Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/6f3884e87fd2ec01fa0ea0eca77c1c9fce905146.roa
File:                     6f3884e87fd2ec01fa0ea0eca77c1c9fce905146.roa (raw, json)
Hash identifier:          S4yoICPjErWBRev6TMlqX6iLsdaF7IS5dMUucF4UOJc=
Subject key identifier:   A7:75:82:4E:09:23:68:ED:BA:78:FB:0F:0C:12:21:87:B0:D1:24:1C
Certificate issuer:       /CN=711fc8dc4691872f5e628253f3f086f010538c17
Certificate serial:       1658A1
Authority key identifier: 35:98:2C:B4:63:2A:C3:AD:01:04:E3:FA:CC:33:C3:40:67:49:BA:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/711fc8dc4691872f5e628253f3f086f010538c17.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/6f3884e87fd2ec01fa0ea0eca77c1c9fce905146.roa
Signing time:             Thu 01 Jun 2023 21:54:15 +0000
ROA not before:           Wed 31 May 2023 21:54:15 +0000
ROA not after:            Sun 01 Jun 2025 21:54:15 +0000
asID:                     27951
IP address blocks:        2801:12a::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1464481 (0x1658a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711fc8dc4691872f5e628253f3f086f010538c17
        Validity
            Not Before: May 31 21:54:15 2023 GMT
            Not After : Jun  1 21:54:15 2025 GMT
        Subject: CN=6f3884e87fd2ec01fa0ea0eca77c1c9fce905146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:42:31:fc:62:a9:d0:7f:16:33:e0:95:0e:29:
                    77:8d:b8:10:0f:7a:51:a5:e9:15:37:98:a1:61:4e:
                    32:4b:8a:8a:d9:4a:4a:02:2e:ca:b3:ee:5c:c7:77:
                    a2:35:ed:c0:8f:cc:59:b9:c0:bc:f0:72:50:10:1e:
                    8d:df:65:bc:77:27:f7:9a:73:50:36:0d:c1:e2:48:
                    0c:e4:f5:db:18:6b:1e:a2:90:5d:a6:62:58:62:94:
                    67:2b:6a:10:7e:53:ad:fa:19:cf:3a:e1:2a:99:59:
                    a1:df:1f:cb:2a:a2:23:5d:0b:c9:0e:b7:fa:62:18:
                    10:20:e5:f6:d8:8a:d3:8a:74:6d:d7:de:eb:34:72:
                    7a:f0:62:e2:bb:6d:d1:f5:89:62:88:26:54:4d:7d:
                    57:e4:8a:b8:67:7c:10:24:29:f6:7f:bd:02:1a:56:
                    b4:bf:7a:f7:d1:d5:da:98:83:e9:2b:f4:e6:46:5f:
                    05:00:cc:cd:96:e5:1a:62:56:85:95:c2:57:ff:d6:
                    72:50:2e:90:f3:e0:ac:bb:10:e5:c7:fe:e1:ba:c0:
                    3a:c9:b2:09:22:20:3c:e5:7c:ac:ca:5b:81:59:4d:
                    18:cd:2b:1f:53:04:ac:e3:27:ab:ce:13:f5:4e:23:
                    d6:01:cb:ea:a0:f0:d1:ba:14:d2:d1:14:7c:94:03:
                    f9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:75:82:4E:09:23:68:ED:BA:78:FB:0F:0C:12:21:87:B0:D1:24:1C
            X509v3 Authority Key Identifier:
                keyid:35:98:2C:B4:63:2A:C3:AD:01:04:E3:FA:CC:33:C3:40:67:49:BA:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/711fc8dc4691872f5e628253f3f086f010538c17.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/6f3884e87fd2ec01fa0ea0eca77c1c9fce905146.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1903eb1d-c281-4ead-8501-4a394fa79272/711fc8dc4691872f5e628253f3f086f010538c17.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12a::/44

    Signature Algorithm: sha256WithRSAEncryption
         23:ba:0f:83:20:69:15:b8:19:e6:bb:72:ef:52:a9:47:27:e8:
         5a:6a:fc:44:ab:32:b6:3b:cd:7b:66:3b:4b:9b:44:70:bd:85:
         f2:8f:0f:15:e0:8d:7c:f8:70:5e:5f:f5:e8:3e:29:2c:e1:d2:
         e9:e3:28:b9:54:d5:84:8c:89:a1:95:5d:bd:1c:39:29:88:4a:
         20:fa:b6:f2:69:e4:de:3e:c4:cc:da:7a:a4:d3:49:81:bd:6d:
         f2:25:37:d9:99:97:a6:35:b6:53:fc:c8:b2:d1:e2:ab:f0:c0:
         f2:d0:0d:41:36:1a:b5:ba:64:ac:2a:42:01:69:cc:61:88:b8:
         06:4d:60:e5:ab:d6:a7:b8:ce:cb:30:15:fa:ce:e8:14:72:59:
         8d:b7:0b:6e:bc:3d:94:b0:09:75:d2:8a:ca:3a:5f:cd:0e:e5:
         b5:b9:fd:1b:fe:b3:dc:69:7c:ea:69:a7:98:ca:33:ee:a3:53:
         9c:c2:08:8a:a5:ed:21:d7:5b:16:f9:ea:01:9a:d6:6a:de:f4:
         d9:67:71:92:a7:c2:5b:cc:3c:bb:b9:b9:24:8a:d3:9c:ba:66:
         6f:89:46:3a:fa:75:df:b0:55:64:82:bd:23:0b:79:63:d9:12:
         0a:d2:24:c9:61:55:fb:99:ff:d6:d0:ca:f6:36:37:d8:ec:56:
         7e:a8:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----