Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20fa9eba-eb61-4121-b26a-f69f599068f8/83c8fec7d796e349d1a6e6c5106174f394246325.roa
File:                     83c8fec7d796e349d1a6e6c5106174f394246325.roa (raw, json)
Hash identifier:          Au4yw05UvVBNJR6UXcPN+vG1Ms2Guoi7hOj3Yi4Lbms=
Subject key identifier:   9B:AE:72:58:52:6D:40:E4:D9:F6:E6:45:AF:8F:C7:28:74:A2:16:BC
Certificate issuer:       /CN=817dfdd9f0cc3b7ea109f8a559bc5836a3695e50
Certificate serial:       134A
Authority key identifier: 4D:8A:36:84:64:92:84:7D:4E:FF:B6:BB:9C:34:55:92:A6:C1:36:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/817dfdd9f0cc3b7ea109f8a559bc5836a3695e50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20fa9eba-eb61-4121-b26a-f69f599068f8/83c8fec7d796e349d1a6e6c5106174f394246325.roa
Signing time:             Wed 26 Apr 2023 14:49:21 +0000
ROA not before:           Tue 25 Apr 2023 14:49:21 +0000
ROA not after:            Sat 26 Apr 2025 14:49:21 +0000
asID:                     270179
IP address blocks:        2806:402::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4938 (0x134a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817dfdd9f0cc3b7ea109f8a559bc5836a3695e50
        Validity
            Not Before: Apr 25 14:49:21 2023 GMT
            Not After : Apr 26 14:49:21 2025 GMT
        Subject: CN=83c8fec7d796e349d1a6e6c5106174f394246325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:0c:9f:80:9a:2c:0b:52:d4:cf:31:16:44:8d:
                    8c:e1:6d:cf:90:a4:70:81:1b:09:c9:d3:b0:22:f2:
                    4e:dd:1c:5c:16:12:e9:fd:d7:4e:b0:59:44:a9:2d:
                    a0:41:e9:d4:c5:35:51:6d:fc:54:40:35:65:d9:5d:
                    d4:8d:15:f2:9f:4b:c3:bb:50:84:19:2f:4d:be:f2:
                    2a:65:67:38:2b:03:01:5f:a2:a7:e8:c5:fe:a2:62:
                    b8:38:93:a6:8e:2b:0a:70:8a:e5:20:f2:0d:a3:3f:
                    4d:07:90:fc:30:0a:23:8c:14:66:32:1b:c3:6d:05:
                    0a:d0:7b:37:33:ea:70:77:7e:4b:b0:33:a0:bb:55:
                    14:44:86:c8:3a:10:42:4a:c4:c1:b5:f0:42:73:a0:
                    b2:7e:2f:83:12:10:b3:77:25:47:a1:57:51:08:82:
                    15:42:09:78:2f:28:ff:79:05:af:c8:53:86:f1:fd:
                    d0:18:a9:09:03:bc:d5:9e:68:7d:9a:54:f1:cc:51:
                    26:78:e2:b3:ea:f0:df:bc:7d:70:50:4c:c4:73:95:
                    c1:51:5d:69:31:7c:ae:c2:cb:58:ec:0c:29:c7:5a:
                    2d:9c:40:f2:57:5f:b7:70:46:43:98:21:2e:af:ec:
                    9f:9f:e3:74:ea:16:d7:50:8b:aa:ff:4b:34:2d:91:
                    71:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AE:72:58:52:6D:40:E4:D9:F6:E6:45:AF:8F:C7:28:74:A2:16:BC
            X509v3 Authority Key Identifier:
                keyid:4D:8A:36:84:64:92:84:7D:4E:FF:B6:BB:9C:34:55:92:A6:C1:36:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/817dfdd9f0cc3b7ea109f8a559bc5836a3695e50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20fa9eba-eb61-4121-b26a-f69f599068f8/83c8fec7d796e349d1a6e6c5106174f394246325.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20fa9eba-eb61-4121-b26a-f69f599068f8/817dfdd9f0cc3b7ea109f8a559bc5836a3695e50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:402::/34

    Signature Algorithm: sha256WithRSAEncryption
         39:c6:6f:9b:2b:17:5f:1f:41:a7:0e:90:ea:7e:08:96:77:1b:
         2f:5f:85:5d:46:1a:a2:44:ae:3d:72:dc:03:d7:59:e6:2a:5e:
         d7:ff:e2:8f:3b:8d:1c:34:b3:45:b3:3a:39:bb:5f:06:19:d8:
         18:22:c6:32:45:31:03:45:e5:e2:ed:7b:d3:fb:34:da:36:4d:
         fb:e6:8e:f1:de:02:3f:86:0e:e4:f7:65:72:c4:29:ac:81:be:
         4c:7d:27:9b:07:d1:1a:25:01:bb:7f:e6:d5:f1:b9:c2:55:05:
         9e:7d:84:c9:2c:45:06:24:72:d0:f6:85:71:bc:fd:a1:8f:67:
         28:7a:d4:f6:98:c4:27:7a:70:cb:05:45:b9:54:d3:dc:c2:02:
         4a:ba:56:7d:a2:de:15:48:3f:ba:0e:a5:1b:a9:2c:dd:fb:00:
         e5:64:30:6f:18:4c:7f:7a:0c:a3:20:a4:29:3b:6f:1c:e4:7d:
         28:37:95:c6:8d:e6:f2:ae:02:d0:fa:ad:80:60:1f:e9:15:7e:
         84:48:39:69:d5:8d:a2:f3:80:ff:76:d2:7f:d9:2f:6d:5c:ee:
         f5:ac:b8:de:ee:67:2b:4a:6e:14:35:49:90:c3:24:66:f4:59:
         07:a3:56:50:37:f6:17:49:c6:64:c8:90:10:37:cf:07:65:a4:
         d1:70:1a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----