Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/21db4aef-aec8-40ec-b240-96befd91e38d/9a1d9a97733ac98add644dbcd26629fe266e8a1d.roa
File:                     9a1d9a97733ac98add644dbcd26629fe266e8a1d.roa (raw, json)
Hash identifier:          Co3Hw7uV0qof0ofpXDL9LsE5RVMgAl6HN7tqZ46yWcI=
Subject key identifier:   81:19:0B:65:F9:A5:45:6D:80:DF:05:22:3B:A3:6A:EF:56:2D:A1:A8
Certificate issuer:       /CN=2362ee0dcdc1ccc539ff28ab9ce488172720f59a
Certificate serial:       2DB7
Authority key identifier: 37:E9:F9:AE:50:84:84:4B:AD:22:B7:92:09:7F:4A:0B:6D:D1:55:EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2362ee0dcdc1ccc539ff28ab9ce488172720f59a.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/21db4aef-aec8-40ec-b240-96befd91e38d/9a1d9a97733ac98add644dbcd26629fe266e8a1d.roa
Signing time:             Fri 15 Sep 2023 18:22:04 +0000
ROA not before:           Thu 14 Sep 2023 18:22:04 +0000
ROA not after:            Mon 15 Sep 2025 18:22:04 +0000
asID:                     273077
IP address blocks:        2801:16:b800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11703 (0x2db7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362ee0dcdc1ccc539ff28ab9ce488172720f59a
        Validity
            Not Before: Sep 14 18:22:04 2023 GMT
            Not After : Sep 15 18:22:04 2025 GMT
        Subject: CN=9a1d9a97733ac98add644dbcd26629fe266e8a1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:25:2e:6f:25:6d:81:50:44:5f:d0:15:3b:0f:
                    51:2e:d7:1e:c3:1a:a3:92:57:0a:7e:91:ee:ee:bf:
                    23:63:05:d9:76:9c:b6:ef:1c:a0:c1:98:71:da:69:
                    a8:10:7e:4e:2f:0f:32:39:24:48:8a:dd:97:50:51:
                    ea:b3:8b:15:89:d1:27:42:b7:ff:fb:e4:3d:f2:6e:
                    64:38:2f:93:73:85:0b:e7:69:5d:cf:e3:42:84:d7:
                    56:03:e7:1a:c0:c4:88:e2:6b:b2:5a:7e:9b:0b:a5:
                    12:3e:e3:97:fd:a8:ec:8b:51:9a:0d:f8:c7:b2:b2:
                    57:4a:20:d2:fd:89:07:ff:de:20:6e:ec:86:a4:bf:
                    4a:04:53:1f:f7:a4:17:a3:00:06:e1:b3:f8:f4:62:
                    3c:2e:01:14:78:60:37:2d:68:08:f3:ef:25:d0:58:
                    74:7b:83:a6:2b:8e:5c:58:83:95:f8:cd:66:d6:c1:
                    83:45:1f:aa:86:28:c0:8c:63:9b:4b:27:4e:a0:71:
                    45:f0:eb:d5:59:89:17:79:5e:b3:d8:68:f6:a1:69:
                    43:2e:2f:f1:9b:00:2d:a4:7e:0c:83:87:d9:56:3d:
                    f4:dd:52:94:8b:25:0f:44:24:d4:7a:53:66:b5:98:
                    3b:9b:dc:34:f4:5e:5e:ee:59:91:76:da:41:b9:01:
                    f7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:19:0B:65:F9:A5:45:6D:80:DF:05:22:3B:A3:6A:EF:56:2D:A1:A8
            X509v3 Authority Key Identifier:
                keyid:37:E9:F9:AE:50:84:84:4B:AD:22:B7:92:09:7F:4A:0B:6D:D1:55:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2362ee0dcdc1ccc539ff28ab9ce488172720f59a.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/21db4aef-aec8-40ec-b240-96befd91e38d/9a1d9a97733ac98add644dbcd26629fe266e8a1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/21db4aef-aec8-40ec-b240-96befd91e38d/2362ee0dcdc1ccc539ff28ab9ce488172720f59a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:9f:f4:4b:58:37:b2:01:47:7f:40:c6:4a:9d:63:c9:87:75:
         9c:61:6a:a3:bb:a2:40:ac:57:76:95:20:ec:79:0b:b5:da:b7:
         6f:e2:5a:da:12:39:28:3a:5a:94:72:6c:84:31:83:24:0f:a6:
         58:5b:46:ad:8d:80:1f:1c:bd:66:ac:6c:c7:37:a7:33:39:cc:
         63:d8:f1:1c:af:5b:ed:cc:4a:b2:d1:47:55:94:1f:fd:e5:fd:
         8e:c5:8a:71:7f:20:cc:c4:d8:72:38:e0:65:d2:27:fb:8e:83:
         ba:66:ab:8b:e2:a9:e3:1d:bb:4d:36:7e:f5:7b:8a:c3:6a:9d:
         91:d6:b9:7b:c9:91:0e:33:f7:17:4e:97:2b:fd:69:e3:1a:d1:
         a1:3b:28:f2:5b:8d:5a:2f:56:b3:98:9d:06:ff:6d:5a:52:8a:
         0a:27:8b:5b:de:38:8c:64:2e:57:a8:71:5f:a2:66:de:ae:03:
         3f:da:aa:bd:b1:e3:c3:8d:9b:5d:18:7e:f7:89:6c:b4:cd:4a:
         41:6f:d3:b5:5f:2f:8a:b7:4b:cb:fa:20:67:73:b0:00:e8:03:
         58:7e:30:72:4d:3d:57:5c:ed:f2:c8:8d:2a:c6:53:c9:b1:2e:
         28:d4:bd:bd:3c:99:c1:b5:26:cd:69:dd:6c:1a:a6:5c:9e:87:
         89:34:39:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----