Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/ddd7553ab7ea50678628bd4fe6d16601844a3948.roa
File:                     ddd7553ab7ea50678628bd4fe6d16601844a3948.roa (raw, json)
Hash identifier:          d8jM+MCrQxN3PRuwxkQkg677VfLv02LEyNmUwtdeJp0=
Subject key identifier:   4C:17:67:9A:A7:20:F9:EC:1B:EE:8D:3A:D5:B5:B7:6A:B9:77:0C:C5
Certificate issuer:       /CN=4ef467a028415587646ee8e311e81adea47f6ec7
Certificate serial:       0C66AA
Authority key identifier: 90:67:73:FC:82:AA:43:9F:49:7B:17:0E:E1:26:0B:6B:57:5B:C1:7D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef467a028415587646ee8e311e81adea47f6ec7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/ddd7553ab7ea50678628bd4fe6d16601844a3948.roa
Signing time:             Thu 26 Oct 2023 19:54:39 +0000
ROA not before:           Thu 26 Oct 2023 19:54:39 +0000
ROA not after:            Sun 26 Oct 2025 19:54:39 +0000
asID:                     270160
IP address blocks:        2806:3e7::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 812714 (0xc66aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ef467a028415587646ee8e311e81adea47f6ec7
        Validity
            Not Before: Oct 26 19:54:39 2023 GMT
            Not After : Oct 26 19:54:39 2025 GMT
        Subject: CN=ddd7553ab7ea50678628bd4fe6d16601844a3948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:00:28:98:e7:10:2b:64:79:ac:5b:fa:34:73:
                    d6:9b:fd:02:04:be:d5:82:31:68:2a:64:71:c7:9a:
                    58:09:32:a0:42:ec:84:28:85:41:3e:78:a8:f7:a7:
                    63:ad:31:16:14:ff:58:1a:79:11:bc:ca:d3:5d:cc:
                    e0:a4:72:cf:10:5b:2c:12:d3:87:d0:85:10:f5:e3:
                    0f:18:dc:11:ff:ea:23:9f:1e:49:27:95:7e:dd:7c:
                    45:9b:e4:fe:42:d1:8b:35:79:f1:ef:2d:b7:55:e3:
                    f1:25:d5:d3:d1:f5:4f:c8:a4:b6:6f:cf:c8:2a:88:
                    1f:07:97:be:a2:12:7a:dd:35:a4:ba:89:18:7a:f4:
                    f5:4d:8c:6b:22:03:99:ee:8a:d9:37:f7:80:94:30:
                    48:93:31:e2:c3:88:4b:85:b5:0c:71:7d:e2:fc:4a:
                    f5:cc:55:e7:02:b3:02:d5:06:a1:04:fd:6e:7b:8b:
                    fd:46:b0:a0:8d:2c:fb:57:37:9b:c0:fc:76:4c:45:
                    af:2a:2b:21:fd:9b:19:96:52:9b:c1:8d:6d:63:7b:
                    35:6c:dc:c2:ae:a6:0e:6f:cb:70:88:c9:22:3e:3e:
                    7e:fd:6d:06:21:02:24:14:27:00:9a:81:ef:a5:b7:
                    8e:71:b9:a2:59:86:f4:bd:fa:23:ba:dc:9b:c3:6e:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:17:67:9A:A7:20:F9:EC:1B:EE:8D:3A:D5:B5:B7:6A:B9:77:0C:C5
            X509v3 Authority Key Identifier:
                keyid:90:67:73:FC:82:AA:43:9F:49:7B:17:0E:E1:26:0B:6B:57:5B:C1:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ef467a028415587646ee8e311e81adea47f6ec7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/ddd7553ab7ea50678628bd4fe6d16601844a3948.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/1f6f7cff-d142-4c55-a1da-30c88e2d7de7/4ef467a028415587646ee8e311e81adea47f6ec7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3e7::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:b6:dc:73:ae:dc:e2:f6:34:e4:fc:f2:ad:e7:02:b3:52:dd:
         bf:c6:41:05:6a:30:ac:ad:9a:33:39:9a:67:44:23:3e:78:d1:
         25:80:b1:98:df:00:63:cd:e5:f0:9e:a4:09:e3:ba:71:28:73:
         e9:a3:39:6e:09:7b:3b:6e:3c:e1:45:b8:d2:2c:7b:a0:05:ca:
         c1:9d:33:8d:29:28:6e:08:5d:fd:b9:8f:37:92:be:34:01:04:
         94:1c:8b:ee:a5:6e:89:df:05:08:e0:95:16:ee:77:03:8d:b3:
         d1:8d:eb:44:f8:f5:31:a5:e1:1d:9a:c6:41:81:03:c8:94:ea:
         e1:aa:c1:e1:2e:0e:de:6d:5e:5f:5b:38:15:4e:2f:22:63:13:
         c9:51:48:4f:8b:76:21:ec:bc:a9:01:53:77:44:c5:fb:02:b5:
         58:7d:ec:d6:21:c7:c6:8b:e4:f2:52:a1:ec:3b:f8:e1:30:24:
         eb:25:7a:ec:c7:54:e9:80:d5:2a:c0:33:72:5a:1f:f7:d0:3d:
         0c:22:7b:f8:11:9c:f6:d5:56:a6:81:1b:a7:c7:a7:dc:8b:44:
         f0:f4:71:cf:6e:e7:17:e2:27:4d:ee:dd:e0:22:a4:86:23:97:
         fe:4a:d4:cf:16:9f:1e:e6:1d:b6:84:fb:75:5a:a5:ee:3b:00:
         d5:dd:32:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----