Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/31621eb3-667d-4863-af6c-aabaad1702ae/3799e5423fc9350e4233aab477ffbea6c61c718e.roa
File:                     3799e5423fc9350e4233aab477ffbea6c61c718e.roa (raw, json)
Hash identifier:          qWeY+Qp2fAePhnQC4+aF4PP01lkIq3RN2acecuGeRCE=
Subject key identifier:   6A:CE:17:F1:62:E3:B0:44:13:4F:D8:79:23:EB:07:16:43:CD:26:F3
Certificate issuer:       /CN=19a6770642a7f62438844f2150c23549fbf147d6
Certificate serial:       1C87D5
Authority key identifier: A4:81:BE:9F:46:5E:E7:A9:C4:F9:E6:88:1C:FB:5B:9E:2B:9F:46:0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19a6770642a7f62438844f2150c23549fbf147d6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/31621eb3-667d-4863-af6c-aabaad1702ae/3799e5423fc9350e4233aab477ffbea6c61c718e.roa
Signing time:             Fri 14 Jul 2023 10:56:18 +0000
ROA not before:           Thu 13 Jul 2023 10:56:18 +0000
ROA not after:            Mon 14 Jul 2025 10:56:18 +0000
asID:                     15169
IP address blocks:        2800:3f0:4001::/48 maxlen: 48
                          2800:3f0:4002::/47 maxlen: 48
                          2800:3f0:4004::/47 maxlen: 48
                          2800:3f0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1869781 (0x1c87d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19a6770642a7f62438844f2150c23549fbf147d6
        Validity
            Not Before: Jul 13 10:56:18 2023 GMT
            Not After : Jul 14 10:56:18 2025 GMT
        Subject: CN=3799e5423fc9350e4233aab477ffbea6c61c718e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b6:0b:0c:80:33:fe:63:36:2e:53:9c:12:34:
                    b9:17:ac:18:f7:c8:15:f5:72:01:a2:ea:3f:17:81:
                    4b:24:30:af:06:82:04:1e:07:96:80:b7:ea:3a:ed:
                    e9:5b:b0:a9:3a:44:bc:39:f6:8b:e1:51:95:ea:f2:
                    cb:8b:08:87:f1:0f:02:2d:2f:42:df:77:04:89:df:
                    81:70:31:33:aa:2b:62:c1:8a:d1:b9:17:5b:42:4c:
                    53:c6:3f:00:ec:c7:fd:e4:e4:e9:4c:6a:3a:e5:ad:
                    41:b8:6b:63:ec:0c:a3:30:35:af:ab:b8:88:dd:78:
                    87:d9:03:02:c6:c5:6a:1e:92:da:95:9d:ec:49:3c:
                    dd:24:ef:c0:04:95:fc:30:57:91:2b:93:1a:19:c9:
                    7b:81:3f:3a:d6:01:bb:25:4a:4e:c9:29:28:91:6a:
                    10:b2:fd:94:73:1e:6f:1c:fc:57:fc:c1:cc:0e:1a:
                    6f:94:2a:72:34:06:ef:88:23:0a:28:e2:46:64:d2:
                    02:25:9c:ec:a0:27:40:9e:69:44:1c:ba:0a:e9:cc:
                    c6:21:eb:79:0d:59:e8:e7:ff:70:cd:3e:a3:7c:70:
                    da:db:c2:95:10:bf:17:9b:d9:92:f0:44:46:24:62:
                    a6:73:a3:d5:0a:48:2c:94:cf:29:a8:87:4b:a5:59:
                    96:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CE:17:F1:62:E3:B0:44:13:4F:D8:79:23:EB:07:16:43:CD:26:F3
            X509v3 Authority Key Identifier:
                keyid:A4:81:BE:9F:46:5E:E7:A9:C4:F9:E6:88:1C:FB:5B:9E:2B:9F:46:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19a6770642a7f62438844f2150c23549fbf147d6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/31621eb3-667d-4863-af6c-aabaad1702ae/3799e5423fc9350e4233aab477ffbea6c61c718e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/31621eb3-667d-4863-af6c-aabaad1702ae/19a6770642a7f62438844f2150c23549fbf147d6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:7a:5a:fb:d2:af:41:fb:3a:1d:b5:88:ab:6f:5c:68:f1:26:
         6f:c4:a9:fa:11:aa:16:b2:59:99:0e:4a:f5:9c:34:48:16:3b:
         96:bf:b8:7d:07:43:1f:95:c1:47:af:0b:62:39:86:e3:27:14:
         ed:84:77:6d:fe:48:a8:9b:27:a1:d6:f7:b0:5a:d3:7c:01:d6:
         79:ff:d6:bc:a8:ca:ea:11:cc:d8:74:3e:3d:34:99:db:5f:14:
         d0:51:19:f1:4e:b7:72:7d:50:f6:75:4e:14:e1:8b:b7:80:1c:
         f5:2f:a2:4d:f7:68:d8:61:26:f2:56:64:5a:a1:c0:6c:d9:7e:
         f1:8c:24:7d:ee:38:d4:d9:85:77:13:04:05:6a:92:be:81:42:
         f1:9e:ec:91:ff:e1:57:a9:8f:8b:96:a5:29:84:43:16:1a:5d:
         8a:b2:4e:64:65:b9:ef:85:29:ff:fb:79:b4:d9:99:db:09:a7:
         7e:76:49:db:46:e2:fd:46:b2:60:8b:2d:bc:da:04:97:ff:c8:
         0b:6c:ab:a8:a2:23:fa:e7:63:b0:c9:48:75:7c:d6:2f:25:1b:
         2a:c7:83:e8:13:2e:96:37:ef:c9:c3:93:e9:ec:eb:ff:0f:96:
         66:3e:73:25:23:89:f5:a2:41:a4:48:a4:ef:ba:0d:51:63:18:
         c3:a6:1b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----