Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/20fa9eba-eb61-4121-b26a-f69f599068f8/e2010d922795a7832f09e20eba7aa9820168a82e.roa
File:                     e2010d922795a7832f09e20eba7aa9820168a82e.roa (raw, json)
Hash identifier:          uMCUxGme4q4NGOpl0SQYl87L25kMxy9fb0hCfLeg600=
Subject key identifier:   B1:D0:79:F8:AD:91:0C:97:97:70:1A:FA:35:59:46:77:1B:74:43:61
Certificate issuer:       /CN=817dfdd9f0cc3b7ea109f8a559bc5836a3695e50
Certificate serial:       0429
Authority key identifier: 4D:8A:36:84:64:92:84:7D:4E:FF:B6:BB:9C:34:55:92:A6:C1:36:47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/817dfdd9f0cc3b7ea109f8a559bc5836a3695e50.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/20fa9eba-eb61-4121-b26a-f69f599068f8/e2010d922795a7832f09e20eba7aa9820168a82e.roa
Signing time:             Tue 25 Apr 2023 20:01:27 +0000
ROA not before:           Mon 24 Apr 2023 20:01:27 +0000
ROA not after:            Fri 25 Apr 2025 20:01:27 +0000
asID:                     270126
IP address blocks:        2806:402:4000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1065 (0x429)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817dfdd9f0cc3b7ea109f8a559bc5836a3695e50
        Validity
            Not Before: Apr 24 20:01:27 2023 GMT
            Not After : Apr 25 20:01:27 2025 GMT
        Subject: CN=e2010d922795a7832f09e20eba7aa9820168a82e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6b:bf:15:9a:11:86:6d:b1:71:0c:c3:ff:31:
                    86:f2:f1:51:ad:f3:9e:f3:ea:02:13:73:0f:82:b6:
                    0a:5c:9c:7c:17:04:48:b0:27:05:02:b9:76:b0:00:
                    be:99:0b:5e:8a:5b:c5:87:53:0a:6c:88:cf:b8:d5:
                    c2:f2:7a:75:e9:48:46:7f:5c:13:a8:ae:16:49:42:
                    aa:f3:d0:89:9f:b6:ba:87:a9:4f:15:88:26:14:b0:
                    55:fb:a9:19:6f:76:51:29:25:1e:a4:71:71:e3:73:
                    41:fc:20:11:81:91:e6:53:d8:c9:b5:98:40:c1:58:
                    df:d6:15:de:fd:f9:5c:bf:f3:03:4c:e0:54:70:0d:
                    a9:0a:52:a4:1f:d2:57:6d:4d:5c:df:63:82:fd:77:
                    94:f5:55:a2:59:6b:59:9d:d3:1b:b6:d0:bb:51:ea:
                    01:c9:32:af:2c:11:a8:0f:d4:78:74:ae:d6:94:85:
                    f2:4c:86:68:de:61:34:2f:0c:7e:32:2a:75:9d:70:
                    2e:97:51:e3:a3:45:6b:97:15:5a:85:7b:1d:54:34:
                    b0:10:aa:5f:14:a0:9c:1a:54:a7:24:cb:34:01:97:
                    2a:4d:57:b7:5a:6c:62:8d:81:86:9f:0e:42:c4:10:
                    4c:8d:ec:a1:cf:d8:8e:c4:c6:da:40:c6:2e:57:0b:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D0:79:F8:AD:91:0C:97:97:70:1A:FA:35:59:46:77:1B:74:43:61
            X509v3 Authority Key Identifier:
                keyid:4D:8A:36:84:64:92:84:7D:4E:FF:B6:BB:9C:34:55:92:A6:C1:36:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/817dfdd9f0cc3b7ea109f8a559bc5836a3695e50.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/20fa9eba-eb61-4121-b26a-f69f599068f8/e2010d922795a7832f09e20eba7aa9820168a82e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/20fa9eba-eb61-4121-b26a-f69f599068f8/817dfdd9f0cc3b7ea109f8a559bc5836a3695e50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:402:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a4:56:dc:19:64:4e:14:14:9c:16:da:87:48:57:e3:ed:36:da:
         fc:63:94:76:fc:0b:85:22:aa:5d:60:8a:96:c9:2d:55:a5:ab:
         fb:3c:39:1c:3d:43:c5:02:a2:92:93:07:d6:01:3c:7a:3d:85:
         d1:43:6a:82:ac:fa:30:30:2d:91:9a:0f:0b:46:e6:7d:99:e6:
         6e:89:b7:09:bc:43:ea:83:4c:ef:d0:97:46:bd:fa:80:f0:ae:
         16:f9:1c:d0:91:f7:dd:81:4e:fe:90:9f:6e:49:01:f9:bd:51:
         88:43:79:a0:83:84:b4:81:4c:70:b5:70:26:cd:9e:fa:a3:6e:
         da:5e:7f:d9:24:ba:38:52:a0:0b:f6:3b:12:71:26:51:e9:03:
         98:f4:1f:b3:0d:7f:98:47:36:20:d5:1d:2f:29:e1:cf:33:d5:
         2d:b7:ff:4b:11:96:b5:af:cd:9d:18:69:84:c1:46:01:56:45:
         31:3e:71:83:45:b0:1d:aa:df:8f:e5:ca:bf:83:9e:dd:e3:92:
         8f:74:11:47:c1:b8:ff:a7:d1:73:1a:fe:d7:a4:71:96:bf:5e:
         6f:1c:14:fe:d2:18:df:ae:e7:ae:cb:c6:62:53:56:ce:06:49:
         c9:5e:ef:2a:00:95:31:24:e5:d6:a6:3d:0b:32:88:03:d8:e8:
         49:62:f9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----