Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/346ea22e-e1ba-4a5c-9165-fab0a2500499/9ac7d796be7d2f04c62f358f4435920ad4f1d477.roa
File:                     9ac7d796be7d2f04c62f358f4435920ad4f1d477.roa (raw, json)
Hash identifier:          8Je5Dh6le+w+yEvaDV7TNEgRgVQh5JPELYGzY1ZIiic=
Subject key identifier:   E6:0E:9E:12:08:AE:64:54:E1:32:5D:71:DA:E3:C8:5C:86:2D:AD:CA
Certificate issuer:       /CN=c7f7dd24d80a8d38ca7226b24c5bf4c944bb8eb9
Certificate serial:       0ED7B3
Authority key identifier: B9:30:A4:88:56:4F:CA:5F:1F:C4:7E:98:A7:52:85:1D:58:EF:DA:2B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7f7dd24d80a8d38ca7226b24c5bf4c944bb8eb9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/346ea22e-e1ba-4a5c-9165-fab0a2500499/9ac7d796be7d2f04c62f358f4435920ad4f1d477.roa
Signing time:             Thu 16 Mar 2023 16:41:54 +0000
ROA not before:           Wed 15 Mar 2023 16:26:00 +0000
ROA not after:            Sun 16 Mar 2025 16:26:00 +0000
asID:                     272842
IP address blocks:        2801:101::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972723 (0xed7b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f7dd24d80a8d38ca7226b24c5bf4c944bb8eb9
        Validity
            Not Before: Mar 15 16:26:00 2023 GMT
            Not After : Mar 16 16:26:00 2025 GMT
        Subject: CN=9ac7d796be7d2f04c62f358f4435920ad4f1d477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6c:eb:a3:9d:19:c1:4b:92:41:c2:17:5f:da:
                    65:e3:62:26:c4:f9:2a:c4:c3:f7:87:da:6f:14:4a:
                    a5:fc:56:21:65:42:45:14:45:ad:1b:72:33:d9:9f:
                    d7:7d:40:4d:c6:2e:6f:8a:ad:c9:d7:43:9b:04:49:
                    7b:92:91:73:96:bb:84:f5:92:97:b9:f3:d1:4f:b3:
                    d8:24:25:2a:ce:80:d7:25:8b:c5:71:c2:28:ce:14:
                    d0:9b:da:fb:5d:07:7a:58:96:14:86:31:ae:20:aa:
                    62:ff:e3:a5:b7:ba:10:cd:a4:bf:c9:d5:8e:0d:2a:
                    01:01:15:19:58:c1:eb:82:5d:f2:a3:20:80:b8:3b:
                    07:16:a2:bc:fe:ad:2b:2f:c3:f9:29:3e:21:23:d8:
                    07:c9:db:56:13:93:1f:f0:15:c4:4e:0a:b9:15:0f:
                    71:7b:1e:13:54:3c:36:a0:0a:87:83:ee:49:eb:b3:
                    57:c1:61:4f:e9:4f:07:37:65:10:fa:72:16:21:ef:
                    45:48:a8:f7:61:c5:3b:be:e4:41:15:b0:68:ab:dd:
                    92:95:e5:38:08:25:c1:f6:99:09:cb:52:54:95:14:
                    67:e4:23:d9:03:fd:ec:56:03:9b:da:d9:4b:26:24:
                    fb:09:f4:43:23:fc:e1:05:9a:3f:dc:6d:63:98:66:
                    ce:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0E:9E:12:08:AE:64:54:E1:32:5D:71:DA:E3:C8:5C:86:2D:AD:CA
            X509v3 Authority Key Identifier:
                keyid:B9:30:A4:88:56:4F:CA:5F:1F:C4:7E:98:A7:52:85:1D:58:EF:DA:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7f7dd24d80a8d38ca7226b24c5bf4c944bb8eb9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/346ea22e-e1ba-4a5c-9165-fab0a2500499/9ac7d796be7d2f04c62f358f4435920ad4f1d477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/346ea22e-e1ba-4a5c-9165-fab0a2500499/c7f7dd24d80a8d38ca7226b24c5bf4c944bb8eb9.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:101::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:ef:08:27:cf:f5:e7:9a:30:fd:78:86:a1:ca:b2:89:47:fe:
         57:0d:9a:0b:f8:fb:7e:64:f3:e1:0c:15:6a:5e:1b:ec:7c:52:
         37:12:8c:68:96:5e:fd:2b:f7:2f:1e:b3:ec:89:db:c4:1b:95:
         61:03:6d:04:ae:d3:7a:b2:82:54:21:3c:d8:da:8d:ca:3a:24:
         2a:10:db:63:af:3b:f3:88:44:c0:df:51:40:f9:9b:3b:ed:6c:
         6b:d7:fd:a7:07:aa:2b:3a:28:ae:d0:fb:50:e6:41:3c:4e:9e:
         6f:8e:61:c6:51:cc:ff:76:18:7b:11:cb:13:d8:6d:bd:52:80:
         88:77:e6:28:b2:d2:8d:af:c4:cb:0b:b8:b4:ca:ed:4d:36:3a:
         2a:1c:10:80:b8:f6:21:e2:b0:71:14:53:4c:e7:06:86:71:29:
         d0:b5:ce:5b:8f:74:b6:8e:92:2c:68:8e:a1:51:95:b9:4b:22:
         29:4c:36:32:1d:94:2f:ee:0d:a9:c3:1f:22:85:dd:de:7a:cd:
         ac:6f:2d:a7:3a:37:1b:c4:74:7f:2c:16:fe:42:3f:2b:b6:5f:
         a5:2c:9e:8e:c4:ea:b2:83:ae:79:54:cb:23:2f:56:59:90:5d:
         98:17:f6:a3:ae:b3:39:b4:de:c6:cb:16:45:dc:0f:0e:e6:5a:
         cd:6e:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----