Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/10ecb02e6a876367d7770950d3fc18b62f3829e4.roa
File:                     10ecb02e6a876367d7770950d3fc18b62f3829e4.roa (raw, json)
Hash identifier:          ENzfY3iImzoVbsQgVQWoE+BFpf9o74wSap3VuLDGKbk=
Subject key identifier:   B4:1D:2C:70:74:C4:55:06:5F:47:39:75:3B:DC:25:FD:C5:9F:21:1D
Certificate issuer:       /CN=021081310b983679c1c39476508572541f96603f
Certificate serial:       246913
Authority key identifier: A3:74:80:FB:FB:A7:C8:7E:4D:A3:B8:D4:D2:D9:5D:03:9F:92:61:7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/021081310b983679c1c39476508572541f96603f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/10ecb02e6a876367d7770950d3fc18b62f3829e4.roa
Signing time:             Mon 11 Dec 2023 23:33:57 +0000
ROA not before:           Mon 11 Dec 2023 23:33:56 +0000
ROA not after:            Thu 11 Dec 2025 23:33:56 +0000
asID:                     139235
IP address blocks:        2806:2ea::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2386195 (0x246913)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=021081310b983679c1c39476508572541f96603f
        Validity
            Not Before: Dec 11 23:33:56 2023 GMT
            Not After : Dec 11 23:33:56 2025 GMT
        Subject: CN=10ecb02e6a876367d7770950d3fc18b62f3829e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:be:6f:ed:da:0b:e8:1b:1b:ba:53:75:3d:ba:
                    cb:7f:b5:24:bb:60:ae:4a:fb:b0:82:78:48:7b:f8:
                    2c:70:33:99:ac:d8:8f:0a:95:e9:2b:fa:63:9b:e4:
                    7a:23:e5:f4:95:2e:5b:f2:7a:0e:f0:a9:c9:d4:fa:
                    2a:2a:2e:63:fa:6f:d8:5b:0e:f5:97:d9:43:81:ff:
                    c6:85:2a:5a:88:45:96:9e:dd:44:d4:83:70:29:9c:
                    b6:7b:8d:e6:ea:9b:15:70:72:92:49:f7:3b:92:eb:
                    8c:77:e0:07:15:d8:7e:bc:32:cd:a0:e6:62:e2:b5:
                    5f:95:49:88:16:e6:80:5b:c9:62:d0:dc:59:9c:88:
                    02:aa:0f:52:0d:36:ca:21:ce:65:c0:de:60:a4:34:
                    a9:7b:71:12:1b:e0:7a:07:d8:ce:89:3a:da:90:11:
                    20:d7:22:35:d9:3f:c7:3e:69:a1:78:6d:c9:be:8e:
                    d2:e8:cd:c9:f5:fc:45:61:cf:97:69:3d:bd:91:9c:
                    d7:d2:95:0b:91:95:7d:48:cd:7e:39:a8:c1:14:46:
                    c6:0c:38:0e:9b:fd:d9:f1:56:bb:d5:bf:af:18:a2:
                    fe:ba:2a:87:f7:70:ff:96:dd:c1:d0:4d:03:98:de:
                    8e:88:ad:2d:fe:e3:24:1f:53:7a:52:f5:c9:dc:4b:
                    42:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1D:2C:70:74:C4:55:06:5F:47:39:75:3B:DC:25:FD:C5:9F:21:1D
            X509v3 Authority Key Identifier:
                keyid:A3:74:80:FB:FB:A7:C8:7E:4D:A3:B8:D4:D2:D9:5D:03:9F:92:61:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/021081310b983679c1c39476508572541f96603f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/10ecb02e6a876367d7770950d3fc18b62f3829e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/29996bb8-79fb-4261-bd5b-6f94c283a58c/021081310b983679c1c39476508572541f96603f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:2ea::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:cb:59:ce:13:ba:f8:95:79:c2:cd:a8:22:8d:19:ba:dd:82:
         65:f3:eb:e9:10:83:e4:0d:ad:74:8f:d3:d9:cc:5b:ae:8a:f6:
         6d:5a:f5:d3:f8:aa:a6:68:81:e6:f9:45:76:56:a0:bc:df:08:
         a1:28:73:d5:43:dc:f8:c4:74:18:69:38:cf:6c:d4:9d:eb:b7:
         14:cc:0b:f0:49:6e:8f:10:4e:c4:02:51:96:c6:36:d0:e8:a8:
         47:18:1e:e9:54:e7:a3:fd:9e:21:78:12:fe:4d:6a:90:ae:77:
         7b:4c:06:82:99:ed:b7:c4:c9:0b:af:df:ba:b4:93:2b:c5:c2:
         f6:45:af:34:e0:6d:1e:13:fe:92:36:e0:33:5f:ac:85:b5:07:
         20:98:1f:cb:cb:ca:ae:ab:ce:eb:b3:99:03:8c:88:0a:e7:3c:
         92:e9:70:74:15:ea:90:05:57:f7:6a:23:ff:e5:06:e0:9d:5c:
         a1:2b:97:1d:d2:27:6f:43:69:26:48:b8:3f:59:7e:ce:c5:d8:
         e7:8c:d1:bd:53:e6:f4:e7:27:00:4d:83:28:ec:5e:37:21:d3:
         12:8a:9f:d0:31:5c:d1:86:63:5a:07:fb:c4:c7:c9:6d:32:22:
         64:8a:ba:c3:9f:51:27:08:7d:f1:a8:41:99:ad:b7:d2:42:e5:
         0e:92:80:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----