Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/99b8cfe34d9b2517f1cfef2d04f9cdbfcba41ff0.roa
File:                     99b8cfe34d9b2517f1cfef2d04f9cdbfcba41ff0.roa (raw, json)
Hash identifier:          fudtAGRUnsc4PA0EOjXgAPXFEvx6EtyvIXp3WRm2VlU=
Subject key identifier:   59:1C:EA:67:7A:23:E0:05:58:25:F4:5D:40:BA:15:D8:DC:9B:0E:7E
Certificate issuer:       /CN=14972a169d27abbbc1d8a239ac2b44de8608deaf
Certificate serial:       9717
Authority key identifier: D0:95:FE:EA:57:78:6C:4B:ED:26:2B:97:BF:BF:0A:B3:43:97:5C:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14972a169d27abbbc1d8a239ac2b44de8608deaf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/99b8cfe34d9b2517f1cfef2d04f9cdbfcba41ff0.roa
Signing time:             Tue 21 Mar 2023 13:13:25 +0000
ROA not before:           Sun 19 Mar 2023 13:08:52 +0000
ROA not after:            Fri 21 Mar 2025 13:08:52 +0000
asID:                     1
IP address blocks:        2801:12:3800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38679 (0x9717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14972a169d27abbbc1d8a239ac2b44de8608deaf
        Validity
            Not Before: Mar 19 13:08:52 2023 GMT
            Not After : Mar 21 13:08:52 2025 GMT
        Subject: CN=99b8cfe34d9b2517f1cfef2d04f9cdbfcba41ff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:69:49:d7:05:0f:bd:5f:51:5f:e7:0d:b5:dd:
                    65:3d:76:90:9f:93:9e:95:8a:b7:f2:6b:ae:d8:5f:
                    ec:c8:fd:78:bc:4f:f6:cc:dc:d3:71:c3:bc:39:86:
                    35:08:08:6a:f2:61:c5:c4:0a:e6:ae:54:4f:3b:7e:
                    44:d5:0d:fa:4c:1f:ec:2d:21:b4:11:56:e7:1f:1f:
                    d8:4e:4b:3a:08:05:09:c6:53:4e:30:1c:2d:27:9f:
                    79:38:f1:0d:4f:94:54:2b:bd:60:87:1c:3f:c0:d9:
                    8f:98:64:01:27:a4:fe:82:3a:05:70:8c:69:33:81:
                    f8:57:42:cc:b8:73:2b:11:1b:f4:03:9d:b4:30:0f:
                    97:c8:f0:22:b2:72:67:43:d4:bc:aa:65:8a:eb:8f:
                    d6:b4:42:82:65:79:5c:f8:1e:c9:61:14:68:b0:64:
                    13:f0:27:70:24:a9:1b:fb:86:fb:4d:49:9c:9d:39:
                    8f:2e:74:74:d8:6e:6d:d0:80:7a:84:c2:dd:1c:d2:
                    95:32:db:51:30:c0:ea:0e:95:6f:ab:23:5a:8b:45:
                    66:91:2d:8a:d5:81:19:2a:31:33:bc:3d:8d:5d:65:
                    5c:9a:7a:9d:d8:e4:28:c8:a1:10:b7:a3:af:5c:6a:
                    48:11:ea:30:99:5c:15:42:45:ec:28:65:e6:d3:31:
                    d5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1C:EA:67:7A:23:E0:05:58:25:F4:5D:40:BA:15:D8:DC:9B:0E:7E
            X509v3 Authority Key Identifier:
                keyid:D0:95:FE:EA:57:78:6C:4B:ED:26:2B:97:BF:BF:0A:B3:43:97:5C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14972a169d27abbbc1d8a239ac2b44de8608deaf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/99b8cfe34d9b2517f1cfef2d04f9cdbfcba41ff0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/14972a169d27abbbc1d8a239ac2b44de8608deaf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:73:fc:51:5a:69:e1:5f:2f:0a:be:51:27:f3:1e:cf:3b:f9:
         bd:e5:a7:c0:af:f0:60:29:b7:65:2e:62:52:d5:a3:a7:eb:1b:
         d2:e2:6d:7c:5a:e4:e3:0a:8c:86:86:8f:d1:d3:92:2b:07:d9:
         f4:d0:1e:41:7b:1a:cc:91:c2:61:5b:41:5a:21:91:07:48:55:
         e1:6c:59:a6:9c:c6:50:98:29:e0:08:f5:50:b4:77:11:e1:3a:
         b1:c4:1a:50:f5:df:5d:fc:8c:25:38:3a:21:7d:1f:63:20:f1:
         32:ef:72:a1:37:6d:8d:65:b2:85:4b:06:12:2d:68:a2:5a:c6:
         3a:4f:f4:7d:8a:f0:02:09:03:5f:b3:7b:ec:c3:3e:33:20:f6:
         93:2d:da:a6:8c:c0:2f:13:eb:7e:6e:b3:e6:7d:56:5d:cd:41:
         8f:01:c1:2d:75:d0:d9:4b:c7:bb:32:4d:df:08:01:c5:a6:92:
         43:97:b9:a9:c7:5b:58:60:c2:9b:51:84:9a:f5:2e:7a:db:ed:
         2d:d7:b8:5d:6d:01:26:1f:04:bf:8d:a7:97:a7:04:d9:ce:bc:
         b3:53:0e:8b:8b:a7:09:3e:75:e3:a3:4a:66:c3:85:20:1a:47:
         3f:c7:e2:03:2e:25:f7:ef:f9:12:d9:1c:31:90:df:88:3e:84:
         96:4c:c3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----