Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/d34c81457c4323b9d24ce1ebc56e5997d09e5e1b.roa
File:                     d34c81457c4323b9d24ce1ebc56e5997d09e5e1b.roa (raw, json)
Hash identifier:          t+iOJmEveUgIBLwu/mYShmuPlPZ5mu7pDEnR9qdcYZg=
Subject key identifier:   D4:0F:DA:1E:18:B6:40:2F:3E:CD:8B:3D:3F:FB:F8:94:43:DF:33:83
Certificate issuer:       /CN=a515f3deed148bd93535c46d07e413ea6586a83e
Certificate serial:       02F815
Authority key identifier: D4:CB:45:3A:65:BC:36:CC:DE:0C:C9:AF:34:91:45:E5:81:44:51:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a515f3deed148bd93535c46d07e413ea6586a83e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/d34c81457c4323b9d24ce1ebc56e5997d09e5e1b.roa
Signing time:             Mon 12 Feb 2024 19:03:04 +0000
ROA not before:           Mon 12 Feb 2024 19:03:04 +0000
ROA not after:            Thu 12 Feb 2026 19:03:04 +0000
asID:                     28428
IP address blocks:        2806:325::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194581 (0x2f815)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a515f3deed148bd93535c46d07e413ea6586a83e
        Validity
            Not Before: Feb 12 19:03:04 2024 GMT
            Not After : Feb 12 19:03:04 2026 GMT
        Subject: CN=d34c81457c4323b9d24ce1ebc56e5997d09e5e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dd:01:e6:07:9a:e0:9c:9f:55:5c:ff:08:1e:
                    f7:53:81:f5:99:ca:d0:03:ad:8f:44:62:08:37:97:
                    62:6c:7c:f6:bc:64:50:2b:64:5b:0e:e5:60:b0:45:
                    9c:ca:5c:45:20:b7:e5:03:c3:b4:f3:ff:e2:92:93:
                    4b:7b:5f:7a:87:fe:9a:d5:dd:3c:5a:6c:cd:70:ab:
                    1c:62:cf:12:f7:78:b7:ea:6e:93:bd:e5:66:7c:41:
                    c7:d2:cb:94:0a:81:b1:7e:81:91:94:76:15:80:4c:
                    61:f8:6e:44:e6:f0:68:c6:0b:73:8a:51:6e:82:62:
                    76:58:61:b8:84:39:ce:92:d7:ab:05:45:99:d2:9a:
                    32:e4:1c:e6:5c:8a:bc:16:ad:14:1f:ab:a5:d2:31:
                    49:73:d6:d2:bc:8d:5d:ab:00:42:6a:b0:d9:5a:fe:
                    3b:a7:2d:83:11:5a:a7:a9:d1:1a:4b:42:a2:ed:51:
                    1b:1f:cf:6c:a6:d6:33:27:5c:aa:6f:97:b6:35:39:
                    eb:24:d0:e4:4e:1d:e1:a1:b2:b2:f6:75:f5:4a:d3:
                    48:ee:6e:f2:0c:7e:c8:41:51:be:72:5a:2c:49:d7:
                    21:6f:13:fd:3d:81:22:c6:09:b4:aa:87:b4:c5:12:
                    18:aa:7e:d6:8d:a4:43:5f:c6:13:9e:59:77:83:fc:
                    5b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:0F:DA:1E:18:B6:40:2F:3E:CD:8B:3D:3F:FB:F8:94:43:DF:33:83
            X509v3 Authority Key Identifier:
                keyid:D4:CB:45:3A:65:BC:36:CC:DE:0C:C9:AF:34:91:45:E5:81:44:51:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a515f3deed148bd93535c46d07e413ea6586a83e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/d34c81457c4323b9d24ce1ebc56e5997d09e5e1b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/a515f3deed148bd93535c46d07e413ea6586a83e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:325::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:81:ae:d5:ec:23:1d:eb:09:e0:8b:16:89:52:7a:1e:5f:24:
         d0:bf:ff:86:e9:39:b7:38:d8:83:01:c1:34:82:3d:b0:5f:d1:
         8f:aa:a4:5a:6f:67:b0:52:7c:54:80:4f:7a:dc:da:65:fa:e5:
         d3:40:c5:ee:92:1d:56:13:81:b1:a0:e5:2c:0f:b0:41:a9:79:
         16:d1:69:84:e5:18:fa:87:9e:28:77:80:f3:21:7a:fc:6b:30:
         fc:9e:d0:0a:6b:83:02:d8:5a:bc:40:a4:84:42:91:6c:2e:21:
         e7:d3:fc:d9:12:9a:bd:da:0d:70:44:83:9d:15:f7:fe:ed:b0:
         09:2a:2b:21:87:3b:a5:6f:69:13:36:7e:43:53:2e:f8:27:76:
         95:e7:c9:f8:08:db:09:44:0c:53:69:0c:d5:11:23:10:2b:cd:
         5b:92:be:5e:8f:0f:c8:19:9b:64:5b:c8:ee:45:c9:0a:2c:1b:
         12:1f:e7:c7:fa:16:58:e2:70:b0:75:8b:21:60:13:c1:47:23:
         33:e7:af:1f:ff:f0:38:b0:64:c1:c8:c8:9a:34:18:89:0a:22:
         d8:bb:c2:8c:b0:12:27:a2:ba:34:74:0d:1b:05:2f:ba:ed:2b:
         44:3f:cd:97:44:32:c1:ba:90:62:03:8c:51:a4:5f:cf:76:2a:
         19:e1:70:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----