Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/346ea22e-e1ba-4a5c-9165-fab0a2500499/3391a223566609464f2bef0ad01d50f9ae3a400f.roa
File:                     3391a223566609464f2bef0ad01d50f9ae3a400f.roa (raw, json)
Hash identifier:          LYCdo9mtZu6lnrsckkDLABmN/AN+9GDY2yBQxo5g9w0=
Subject key identifier:   65:D2:C2:F9:5C:57:37:81:7F:BB:39:2A:8A:71:DF:51:1D:A1:87:18
Certificate issuer:       /CN=c7f7dd24d80a8d38ca7226b24c5bf4c944bb8eb9
Certificate serial:       15F203
Authority key identifier: B9:30:A4:88:56:4F:CA:5F:1F:C4:7E:98:A7:52:85:1D:58:EF:DA:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7f7dd24d80a8d38ca7226b24c5bf4c944bb8eb9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/346ea22e-e1ba-4a5c-9165-fab0a2500499/3391a223566609464f2bef0ad01d50f9ae3a400f.roa
Signing time:             Fri 29 Dec 2023 14:23:30 +0000
ROA not before:           Fri 29 Dec 2023 14:23:30 +0000
ROA not after:            Mon 29 Dec 2025 14:23:30 +0000
asID:                     272842
IP address blocks:        2801:101::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1438211 (0x15f203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f7dd24d80a8d38ca7226b24c5bf4c944bb8eb9
        Validity
            Not Before: Dec 29 14:23:30 2023 GMT
            Not After : Dec 29 14:23:30 2025 GMT
        Subject: CN=3391a223566609464f2bef0ad01d50f9ae3a400f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6b:db:e1:5d:b7:44:dc:ca:f8:17:06:47:33:
                    0e:31:f7:f0:de:e5:0c:87:05:15:9d:17:34:af:6d:
                    10:53:9a:d4:b6:9c:01:fd:34:9b:75:f3:da:75:e6:
                    4a:45:0d:35:e5:ac:10:a5:bc:c9:87:82:d6:0b:e1:
                    dd:fa:b9:6c:f5:8e:9e:27:82:86:8b:d3:ef:d5:0e:
                    7f:a6:a2:31:ac:35:74:b5:75:3e:d1:61:72:f9:7b:
                    37:b7:c9:52:c3:23:70:d5:bd:af:d0:b1:3e:cc:b7:
                    fc:73:ab:5d:bb:05:fb:c9:db:2f:5e:a4:68:2e:b8:
                    17:8b:86:6a:85:b6:d7:42:55:b1:96:b8:e3:78:7f:
                    49:7a:2d:65:a0:4f:0b:3f:d0:14:c4:b9:8d:44:97:
                    8b:19:77:64:65:fd:f9:a6:de:bc:13:ab:63:9f:12:
                    9c:31:bf:5b:21:49:fe:d7:41:15:8f:ea:80:a6:4b:
                    15:fa:09:df:cf:15:53:1e:7f:49:f3:ec:89:f9:1e:
                    26:03:a0:7f:53:ba:bf:8f:b4:74:e8:ec:07:e1:ee:
                    9e:84:3c:f8:4e:7f:e4:82:75:d2:7f:fc:f5:5b:52:
                    d8:f5:22:b7:10:86:13:19:4e:d7:15:72:d6:66:89:
                    e5:b7:d8:ec:c7:7e:18:5a:60:31:5d:2f:78:38:58:
                    05:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D2:C2:F9:5C:57:37:81:7F:BB:39:2A:8A:71:DF:51:1D:A1:87:18
            X509v3 Authority Key Identifier:
                keyid:B9:30:A4:88:56:4F:CA:5F:1F:C4:7E:98:A7:52:85:1D:58:EF:DA:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7f7dd24d80a8d38ca7226b24c5bf4c944bb8eb9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/346ea22e-e1ba-4a5c-9165-fab0a2500499/3391a223566609464f2bef0ad01d50f9ae3a400f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/346ea22e-e1ba-4a5c-9165-fab0a2500499/c7f7dd24d80a8d38ca7226b24c5bf4c944bb8eb9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:101::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:b8:29:78:8b:a8:f6:d2:92:a8:e2:c0:66:cc:9f:87:9c:f7:
         28:5a:85:3e:2a:e9:08:e0:23:c2:1f:ba:3d:ed:f9:bf:01:a6:
         b1:b3:07:67:a0:6f:6d:df:18:99:1d:b8:bd:10:6e:7c:e4:32:
         8f:ab:83:68:b8:68:97:92:1e:56:03:3c:01:6c:6c:59:e4:f9:
         11:ec:dc:40:83:61:64:a8:00:87:83:d8:93:05:93:da:5f:8a:
         eb:f5:9b:1a:fe:81:42:6c:d2:11:90:c9:e5:1d:66:a3:f6:8e:
         82:66:70:10:99:2c:c6:d0:bd:29:d0:e6:11:56:6b:b5:d7:44:
         fb:7d:a7:bf:41:17:60:e6:6b:f9:f5:10:70:a8:a7:fb:1f:6f:
         7e:2b:a4:f3:d0:2c:59:03:7b:c3:8d:72:1d:74:4e:09:09:49:
         7c:2a:5b:62:27:b1:6f:95:6e:79:7c:40:84:af:a9:06:18:cf:
         73:e2:6c:df:06:45:61:d3:ca:0b:d9:8c:b3:21:d8:fe:b5:5d:
         05:f6:7f:f3:1f:c9:54:90:16:51:77:c9:e5:fd:7b:dd:9a:04:
         72:a2:a9:35:9f:e6:61:20:73:18:62:59:39:e6:95:77:ec:3d:
         48:19:db:77:dd:35:89:dc:27:80:d9:96:1a:f4:7d:96:cd:6b:
         91:e5:4e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----