Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/334616ee-74e1-4d6f-b08d-cff29c001776/76679a2d79985f76087a99263d8b4c646baa84a2.roa
File:                     76679a2d79985f76087a99263d8b4c646baa84a2.roa (raw, json)
Hash identifier:          /EkOZl5kXBnhdyqGgNbu12lfOYmncGCNYzbVwSWcPJk=
Subject key identifier:   5E:24:EC:D1:4D:75:EE:26:BF:AA:B6:EF:B5:1E:9E:09:07:B5:39:25
Certificate issuer:       /CN=4f47bb7ead910781563dc199e18418c34ecf5877
Certificate serial:       011A82
Authority key identifier: BE:4B:B9:99:56:DC:C3:A2:22:FC:19:2E:E0:5B:B0:34:71:44:3A:E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f47bb7ead910781563dc199e18418c34ecf5877.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/334616ee-74e1-4d6f-b08d-cff29c001776/76679a2d79985f76087a99263d8b4c646baa84a2.roa
Signing time:             Thu 18 May 2023 15:55:50 +0000
ROA not before:           Wed 17 May 2023 15:55:50 +0000
ROA not after:            Sun 18 May 2025 15:55:50 +0000
asID:                     265615
IP address blocks:        2806:36c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72322 (0x11a82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f47bb7ead910781563dc199e18418c34ecf5877
        Validity
            Not Before: May 17 15:55:50 2023 GMT
            Not After : May 18 15:55:50 2025 GMT
        Subject: CN=76679a2d79985f76087a99263d8b4c646baa84a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:08:71:ba:5e:2e:29:17:ed:03:30:44:f7:b4:
                    ae:a8:4f:65:e0:a7:8d:60:88:6b:1d:dc:1d:95:96:
                    b2:11:d5:1a:f9:9e:7a:89:cc:cb:fb:0d:e1:f1:12:
                    64:bf:7b:87:d0:1e:49:a3:b7:49:41:db:c9:aa:98:
                    4a:f1:d3:c8:d2:0f:12:ff:62:8d:13:63:7a:b7:49:
                    b8:f9:83:cc:6c:4a:c3:67:9a:82:e3:10:af:1b:8c:
                    c0:97:1f:d3:71:4e:07:21:0a:2a:07:95:d6:ad:24:
                    87:7e:94:f8:00:44:9d:93:f2:59:15:24:5c:78:e9:
                    6d:b5:0b:de:95:64:e8:81:f7:a0:4d:98:e5:79:f1:
                    9c:eb:bd:30:19:ff:7b:f4:0e:39:e3:67:2f:16:4f:
                    eb:fd:a5:98:ba:28:eb:bc:bd:01:8c:f7:13:91:f8:
                    10:56:23:c6:bd:42:7e:d8:c8:6d:f2:06:5a:e5:71:
                    4c:f4:6b:7e:b5:0a:e7:7c:e4:7b:c9:e0:19:25:b6:
                    ec:ae:21:19:56:8f:96:47:e8:89:1f:82:85:8e:7a:
                    65:08:06:61:fa:5a:ae:7d:bf:65:ff:93:69:ef:b8:
                    5d:6e:fd:cd:7d:19:00:f0:c9:91:2c:be:29:e8:56:
                    63:a2:d9:ef:80:cd:c2:48:41:a1:56:56:51:50:97:
                    4e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:24:EC:D1:4D:75:EE:26:BF:AA:B6:EF:B5:1E:9E:09:07:B5:39:25
            X509v3 Authority Key Identifier:
                keyid:BE:4B:B9:99:56:DC:C3:A2:22:FC:19:2E:E0:5B:B0:34:71:44:3A:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f47bb7ead910781563dc199e18418c34ecf5877.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/334616ee-74e1-4d6f-b08d-cff29c001776/76679a2d79985f76087a99263d8b4c646baa84a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/334616ee-74e1-4d6f-b08d-cff29c001776/4f47bb7ead910781563dc199e18418c34ecf5877.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:36c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:77:88:fc:0b:66:eb:87:17:df:b9:b5:13:a6:57:7b:a4:b0:
         d2:d7:94:1f:37:68:f1:e9:ce:f4:80:6c:58:ea:6f:b1:32:d2:
         2b:c3:91:52:a6:fc:e7:78:bf:02:fc:1b:1a:f8:86:88:84:82:
         a3:48:ff:3a:d6:de:8f:ff:34:c2:75:62:5c:75:b8:9a:b9:5c:
         77:4a:83:5d:f2:f8:f9:7b:7b:39:91:00:71:04:b3:4b:46:d6:
         d2:6a:3a:6f:ea:52:a6:9d:6e:0b:d7:6e:41:2e:60:10:59:a2:
         0c:40:8e:b5:4d:78:b4:13:46:92:21:85:fe:f8:a0:85:f6:d7:
         0f:39:bc:a3:7c:5b:76:ed:d3:4b:22:53:7f:a1:8a:2e:c6:f0:
         20:ee:70:26:61:af:45:d0:07:2f:4e:34:fe:45:01:7a:bf:49:
         0e:cb:c7:59:45:1a:17:5b:0f:db:ec:2f:56:1b:82:b5:b4:cd:
         96:f0:b6:e6:4c:97:3d:2e:d1:ff:d1:fe:d6:ce:bd:8b:6f:ee:
         92:93:93:08:ef:80:86:a2:9f:85:d2:b6:8d:4f:a5:c3:f0:c5:
         45:9e:2f:05:b9:3a:09:63:de:d3:75:89:2a:c6:b9:af:18:ec:
         c2:3f:09:b4:d8:be:81:4e:f3:70:a9:be:54:fd:9f:12:32:bd:
         90:e5:35:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----