Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20fa9eba-eb61-4121-b26a-f69f599068f8/6a2d34138adf82f22b2b550d9923bb6a70039adb.roa
File:                     6a2d34138adf82f22b2b550d9923bb6a70039adb.roa (raw, json)
Hash identifier:          n4Y0njxsVUqzpbAfQ9fzmrKK5nOweVTLbNrZS/hC+vk=
Subject key identifier:   B2:4B:37:E0:65:B5:45:79:AD:2E:0E:12:53:13:C2:E3:AC:D3:DE:67
Certificate issuer:       /CN=817dfdd9f0cc3b7ea109f8a559bc5836a3695e50
Certificate serial:       1B4F
Authority key identifier: 4D:8A:36:84:64:92:84:7D:4E:FF:B6:BB:9C:34:55:92:A6:C1:36:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/817dfdd9f0cc3b7ea109f8a559bc5836a3695e50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20fa9eba-eb61-4121-b26a-f69f599068f8/6a2d34138adf82f22b2b550d9923bb6a70039adb.roa
Signing time:             Wed 26 Apr 2023 16:01:18 +0000
ROA not before:           Tue 25 Apr 2023 16:01:18 +0000
ROA not after:            Sat 26 Apr 2025 16:01:18 +0000
asID:                     270179
IP address blocks:        2806:402::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6991 (0x1b4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817dfdd9f0cc3b7ea109f8a559bc5836a3695e50
        Validity
            Not Before: Apr 25 16:01:18 2023 GMT
            Not After : Apr 26 16:01:18 2025 GMT
        Subject: CN=6a2d34138adf82f22b2b550d9923bb6a70039adb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:ed:74:96:05:e0:f2:81:35:47:21:ee:6a:
                    cf:07:53:7b:ad:15:43:db:ee:8f:bc:93:c8:bb:ac:
                    5e:c1:3a:6c:a9:e9:e6:e8:36:c0:ce:11:09:79:22:
                    a5:dd:24:1b:85:3f:c0:1a:d3:e8:f8:59:58:47:f3:
                    0b:f1:94:0d:e8:2f:6d:b8:99:b4:9c:6d:e5:da:63:
                    43:d1:35:f8:37:bd:ee:19:da:7e:78:d7:1d:ab:93:
                    43:69:6a:86:57:e3:2b:80:d8:73:24:88:fa:ea:67:
                    24:53:fe:ea:5f:0a:48:58:1c:fa:cd:9d:d4:03:aa:
                    08:48:a6:dc:62:12:61:fb:74:11:f7:97:6a:5e:36:
                    99:56:70:fb:c4:ce:bf:c6:e5:c9:01:a3:6b:da:27:
                    6c:f9:35:44:45:10:d8:72:e3:91:55:31:cd:af:1b:
                    17:db:15:d6:92:b0:7a:59:5d:a5:e6:f4:41:55:ff:
                    0f:27:c1:e0:da:78:21:57:7a:4e:be:99:2d:d0:3a:
                    f6:08:e5:11:5b:05:ed:22:6a:01:ca:69:97:0c:40:
                    c7:72:55:75:5a:bc:be:df:1f:57:09:b4:57:24:67:
                    bc:a9:e1:7e:36:2f:02:a0:f7:f2:30:17:90:bc:75:
                    63:62:73:ec:91:fb:0e:ac:a4:eb:1d:df:d1:d7:aa:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4B:37:E0:65:B5:45:79:AD:2E:0E:12:53:13:C2:E3:AC:D3:DE:67
            X509v3 Authority Key Identifier:
                keyid:4D:8A:36:84:64:92:84:7D:4E:FF:B6:BB:9C:34:55:92:A6:C1:36:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/817dfdd9f0cc3b7ea109f8a559bc5836a3695e50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20fa9eba-eb61-4121-b26a-f69f599068f8/6a2d34138adf82f22b2b550d9923bb6a70039adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20fa9eba-eb61-4121-b26a-f69f599068f8/817dfdd9f0cc3b7ea109f8a559bc5836a3695e50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:402::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:88:04:3d:d7:ff:18:7e:89:94:bc:d1:8f:cf:5f:49:d2:e3:
         83:ac:3a:6f:09:dd:81:fd:20:8f:3d:64:d7:07:1d:da:c6:c0:
         34:7d:53:26:ec:db:cd:36:98:a8:a8:52:a4:d1:2a:bd:43:b2:
         83:11:c8:99:45:42:a4:20:21:e4:cb:db:b1:bf:29:e0:53:49:
         63:f8:b8:1b:5b:84:1f:03:46:25:e5:1e:28:da:54:86:ea:81:
         83:12:9a:93:66:e1:ed:08:ea:83:e9:cb:5d:ab:0a:87:28:da:
         c7:aa:80:bd:23:8a:85:68:45:b5:1e:83:e7:cc:08:de:e4:59:
         6e:85:77:e8:57:db:54:3f:f2:ad:d2:e9:96:0d:a8:47:5e:be:
         b2:53:e5:9d:99:c4:79:94:b0:61:93:ca:39:76:b6:fc:d5:a7:
         3a:49:10:5a:0f:8d:5e:8b:dc:66:29:17:47:fe:9e:bb:7a:c0:
         44:d2:34:cf:74:98:55:96:f1:6a:8b:36:24:3d:78:94:5c:d0:
         57:67:02:e6:67:8b:83:b0:1d:94:30:95:0d:71:b9:83:f1:06:
         12:7c:d4:5a:e0:5c:cd:c5:8a:6c:9a:41:5a:57:92:18:d6:b2:
         53:76:c7:83:52:98:cc:5e:ca:13:e8:44:d9:85:bb:df:ec:c9:
         dd:cb:46:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----