Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/37856c56-6989-4714-a8e6-213ada98c64c/bd21491617b0ddd96eda9e7eb097661958accc15.roa
File:                     bd21491617b0ddd96eda9e7eb097661958accc15.roa (raw, json)
Hash identifier:          kq4xIG6Vur9+YD5oqYat6NGpm18Kfd/taXimQYUHpa8=
Subject key identifier:   14:DD:92:37:9A:42:52:42:B2:49:FE:15:F3:D5:DB:CF:DF:76:5D:B6
Certificate issuer:       /CN=75646578c3fee9765e952e1114e099b387860daa
Certificate serial:       13D81B
Authority key identifier: 3A:A1:30:66:30:C0:15:25:36:09:17:0C:44:7C:D2:74:14:CC:09:64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75646578c3fee9765e952e1114e099b387860daa.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/37856c56-6989-4714-a8e6-213ada98c64c/bd21491617b0ddd96eda9e7eb097661958accc15.roa
Signing time:             Sat 01 Jul 2023 08:30:00 +0000
ROA not before:           Fri 30 Jun 2023 08:30:00 +0000
ROA not after:            Sun 29 Jun 2025 08:30:00 +0000
asID:                     262186
IP address blocks:        2801:1e:e800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1300507 (0x13d81b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75646578c3fee9765e952e1114e099b387860daa
        Validity
            Not Before: Jun 30 08:30:00 2023 GMT
            Not After : Jun 29 08:30:00 2025 GMT
        Subject: CN=bd21491617b0ddd96eda9e7eb097661958accc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:eb:ce:6e:8d:ab:90:c1:77:0c:86:64:e5:41:
                    59:fe:fb:be:94:7e:c4:f4:65:3b:4e:04:15:0c:7a:
                    d3:4d:f9:4d:b5:86:dd:77:b0:17:f7:48:9c:2b:de:
                    b6:e7:11:1f:11:b7:cf:84:19:76:50:07:ac:c9:3a:
                    25:90:b7:57:d4:0b:8d:17:f7:0f:99:72:d4:66:49:
                    ad:41:a3:82:19:e4:1d:2e:27:39:75:6e:5a:13:a3:
                    5d:5f:53:05:a2:10:56:cd:5a:1c:60:b9:76:32:1a:
                    9a:e4:ad:5c:d6:11:8d:e9:95:6d:75:18:91:a9:dc:
                    62:d4:ba:2d:f4:a5:a1:28:ef:74:5d:e0:a0:f4:a8:
                    85:ad:8b:c3:e1:81:1b:97:88:b1:0b:a2:cd:df:84:
                    c7:78:04:a0:3b:ee:2f:f3:0e:48:87:bb:c6:64:78:
                    32:c0:b4:84:1c:79:78:11:93:f0:f7:cc:79:a6:2d:
                    95:1a:a5:94:17:b8:b7:40:6a:4b:96:d5:31:92:2c:
                    69:0e:1b:3c:5b:4d:76:e8:94:7f:24:c6:22:2b:22:
                    de:01:5d:ef:49:0e:ce:fa:d0:f4:4d:68:42:6c:2c:
                    24:c5:cf:7d:b2:c7:1b:11:64:eb:3e:77:9a:7c:3f:
                    f3:80:04:68:e8:d6:23:d3:7e:84:1a:e5:b2:f7:d0:
                    db:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DD:92:37:9A:42:52:42:B2:49:FE:15:F3:D5:DB:CF:DF:76:5D:B6
            X509v3 Authority Key Identifier:
                keyid:3A:A1:30:66:30:C0:15:25:36:09:17:0C:44:7C:D2:74:14:CC:09:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75646578c3fee9765e952e1114e099b387860daa.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/37856c56-6989-4714-a8e6-213ada98c64c/bd21491617b0ddd96eda9e7eb097661958accc15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/37856c56-6989-4714-a8e6-213ada98c64c/75646578c3fee9765e952e1114e099b387860daa.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:30:79:62:b6:b3:26:33:35:7a:80:91:af:b3:95:e1:5c:28:
         03:16:2c:8d:09:d0:8e:2f:c2:ab:66:9a:d0:5a:5d:ce:03:e1:
         3d:35:9a:a6:5f:33:2e:c2:50:59:70:96:07:a6:db:b5:22:b9:
         89:c8:23:cc:f2:2b:ef:c4:73:d4:c0:bc:ae:1d:a6:cd:44:a5:
         62:55:c4:74:48:c4:36:07:a3:9c:c8:67:a9:fa:5c:f5:4f:40:
         65:27:82:85:64:e4:49:a7:9a:37:89:55:3e:2c:48:44:e3:73:
         9a:2c:a0:11:7c:a5:06:43:f1:e9:64:56:9c:80:56:2e:40:e0:
         a4:57:a1:94:24:6f:6d:e4:ca:8d:16:df:70:42:32:72:d6:69:
         ab:e2:1b:ac:c5:ec:64:94:cf:69:de:88:71:ae:30:63:69:1d:
         41:ae:80:08:d0:c6:e1:12:94:64:6f:58:95:08:18:d3:73:0f:
         e1:3f:eb:eb:c1:35:76:f3:74:6f:ba:92:0c:c2:be:7d:98:13:
         a2:fe:9a:f4:0d:81:a1:e8:d8:23:14:dc:66:d4:45:d8:a6:5f:
         9c:72:3a:a4:a2:83:db:24:a4:6d:e2:2c:79:fa:90:fb:7d:51:
         b9:46:b3:b0:92:75:62:0b:90:75:b8:5b:72:eb:d3:ff:35:9e:
         bf:cf:b4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----