Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/24df9409-57e5-4d6f-a107-aff74594e035/3fe04d929ea6cbb1ed323b39442b56663c0bba6e.roa
File:                     3fe04d929ea6cbb1ed323b39442b56663c0bba6e.roa (raw, json)
Hash identifier:          FbjlNzrtzH0lyIvmIKGwveaczIONB0lwUhHEgs8BE1Y=
Subject key identifier:   7D:EF:EE:E9:64:29:6A:61:39:1A:32:E3:E6:41:02:0B:93:62:B6:F1
Certificate issuer:       /CN=7416e8a3f90ee5cf908e3a495721c2e129a0576d
Certificate serial:       126686
Authority key identifier: 9C:5A:72:9E:30:A0:C8:FA:94:FC:3D:BD:C4:99:C1:B8:23:1A:70:1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7416e8a3f90ee5cf908e3a495721c2e129a0576d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/24df9409-57e5-4d6f-a107-aff74594e035/3fe04d929ea6cbb1ed323b39442b56663c0bba6e.roa
Signing time:             Thu 22 Jun 2023 08:30:01 +0000
ROA not before:           Wed 21 Jun 2023 08:30:01 +0000
ROA not after:            Fri 20 Jun 2025 08:30:01 +0000
asID:                     271918
IP address blocks:        2801:1d:e800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1205894 (0x126686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7416e8a3f90ee5cf908e3a495721c2e129a0576d
        Validity
            Not Before: Jun 21 08:30:01 2023 GMT
            Not After : Jun 20 08:30:01 2025 GMT
        Subject: CN=3fe04d929ea6cbb1ed323b39442b56663c0bba6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:be:2e:d7:a0:fb:26:7d:9b:9e:c2:bb:9f:91:
                    b6:b2:f8:b9:20:99:c4:09:64:97:0d:2e:4f:af:65:
                    3e:06:9d:c8:90:48:9d:12:88:7f:8f:15:ec:63:fe:
                    4c:45:11:88:c6:ba:51:cf:95:71:ac:7c:98:39:5a:
                    d5:f3:d9:ad:b5:c3:26:83:c9:65:96:8f:8f:3a:31:
                    ab:4d:04:0f:68:e3:b0:13:70:94:63:c1:b3:3f:f2:
                    91:33:01:61:26:90:b4:7d:03:97:70:d8:06:8a:30:
                    2b:88:48:a1:8f:4b:a5:50:c8:9a:a4:ab:98:13:e7:
                    e1:9a:d5:34:63:a0:94:5c:cf:00:47:9a:88:09:ac:
                    b2:44:eb:a0:4f:76:20:b4:bc:94:cf:d2:fb:04:da:
                    bb:a6:39:8d:5b:2e:1a:06:4f:59:1d:ed:3a:38:76:
                    39:b2:05:e7:6f:ac:85:0b:bf:a3:14:90:c7:95:eb:
                    a8:fc:10:50:3a:13:3d:ed:9a:e6:70:03:a3:d1:29:
                    de:29:7b:69:1b:21:d5:a4:c9:7b:4a:7e:02:09:7f:
                    19:33:9e:a5:bf:ee:90:9a:a0:a8:46:fe:11:36:46:
                    1e:37:0b:e3:a0:c8:e8:6d:a5:04:d1:08:47:c4:d5:
                    4e:d2:de:c1:d0:c3:e2:04:1a:fd:8e:46:8d:29:e9:
                    30:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EF:EE:E9:64:29:6A:61:39:1A:32:E3:E6:41:02:0B:93:62:B6:F1
            X509v3 Authority Key Identifier:
                keyid:9C:5A:72:9E:30:A0:C8:FA:94:FC:3D:BD:C4:99:C1:B8:23:1A:70:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7416e8a3f90ee5cf908e3a495721c2e129a0576d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/24df9409-57e5-4d6f-a107-aff74594e035/3fe04d929ea6cbb1ed323b39442b56663c0bba6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/24df9409-57e5-4d6f-a107-aff74594e035/7416e8a3f90ee5cf908e3a495721c2e129a0576d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:79:79:b2:d2:6e:51:51:82:49:a2:e2:97:e9:ce:5b:ac:eb:
         a8:3a:71:d8:e3:23:3b:7c:ee:27:35:f7:4f:4b:3a:b1:f3:a7:
         84:b4:56:fb:00:e3:92:bf:89:b1:73:1e:cf:2b:98:5f:d7:44:
         eb:fd:2c:5d:a9:cc:01:ff:ec:7d:39:50:40:a8:46:d8:67:dd:
         9d:d5:53:f5:b2:d3:09:1b:40:ef:1f:2e:62:ea:22:73:21:bf:
         56:a3:f6:d0:4e:47:64:4b:5d:f5:39:56:a5:67:7d:ae:db:d2:
         74:63:5d:fb:49:b0:06:93:df:6b:7d:04:7d:3a:60:e0:fa:c3:
         ae:f7:f7:e1:c7:fc:38:6c:40:78:0d:6c:28:dd:65:7f:95:d8:
         5b:3d:bc:2e:1d:51:67:5c:59:d1:ec:aa:84:d1:91:b1:c8:ff:
         a2:26:16:db:00:6a:6c:f1:68:12:be:7e:3d:46:91:08:86:49:
         2b:9e:04:1a:82:92:d4:37:e8:16:e3:6f:ed:83:03:34:d7:bd:
         c5:fc:05:08:41:11:6a:84:55:96:90:ae:a3:19:88:73:f7:35:
         af:fe:50:a6:6e:2d:06:53:9b:b4:3d:d2:5a:97:f4:a3:02:4b:
         70:04:0e:a5:ec:d2:27:2e:64:39:c5:0f:a2:5d:f4:17:1b:e4:
         96:1d:7c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----