Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/40af7643-fa2a-4083-ada1-49a87a35a2d1/07c41108f01f00973a041e001b4e1b14ac1085f1.roa
File:                     07c41108f01f00973a041e001b4e1b14ac1085f1.roa (raw, json)
Hash identifier:          j6b/mv31SW1AzmHlhBjGA8pVg4JqXFbcnzRT32t5wgM=
Subject key identifier:   B2:5F:D1:35:99:0C:E2:E3:19:89:A6:0C:5F:8B:37:7E:12:5E:6A:5D
Certificate issuer:       /CN=1ec5ed55fab0f69b190a1b4095b040503dca3b82
Certificate serial:       0170
Authority key identifier: 64:F2:FC:EA:F9:87:CF:69:25:A6:46:E4:EB:EA:1B:6C:C8:FA:A1:5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ec5ed55fab0f69b190a1b4095b040503dca3b82.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/40af7643-fa2a-4083-ada1-49a87a35a2d1/07c41108f01f00973a041e001b4e1b14ac1085f1.roa
Signing time:             Thu 26 Jan 2023 19:32:53 +0000
ROA not before:           Wed 25 Jan 2023 19:25:34 +0000
ROA not after:            Sun 26 Jan 2025 19:25:34 +0000
asID:                     270167
IP address blocks:        2801:c4:e0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ec5ed55fab0f69b190a1b4095b040503dca3b82
        Validity
            Not Before: Jan 25 19:25:34 2023 GMT
            Not After : Jan 26 19:25:34 2025 GMT
        Subject: CN=07c41108f01f00973a041e001b4e1b14ac1085f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:96:16:c7:67:c4:72:2e:be:12:be:8c:26:f8:
                    8e:58:58:0c:52:66:b0:2e:72:0b:96:31:11:18:64:
                    be:92:6e:7f:1c:c5:e1:be:fd:40:c7:ef:8a:a9:79:
                    dd:db:06:fa:2b:36:17:e2:1e:dd:cb:db:8c:12:9c:
                    f4:f0:d7:71:f2:f8:5c:15:87:e1:4e:0f:3d:85:5f:
                    7c:6e:c2:ec:aa:1e:48:5e:21:43:02:ef:de:c2:83:
                    2c:cd:ab:03:f3:71:29:63:77:7d:c0:b3:3e:0f:98:
                    a5:2f:dd:c4:8a:26:70:e4:db:fa:a1:1f:00:6f:a8:
                    99:a9:e1:78:6d:17:d0:da:c8:83:01:a6:1d:92:be:
                    ae:73:b9:69:1d:3f:f9:9f:3c:fd:a2:f1:8d:23:24:
                    0e:2c:24:71:ad:51:a3:b8:d6:fb:98:ac:20:1f:be:
                    c3:24:66:e9:ae:25:7a:6b:d2:4d:f9:ef:8d:21:e8:
                    ae:e1:fb:c3:e8:b5:43:76:9c:cd:c8:70:cd:e3:60:
                    13:32:ae:48:3a:a7:a6:d2:0a:2c:e6:2a:96:bf:be:
                    ca:b9:3f:f9:12:38:61:82:c4:36:9a:2c:e2:c8:c5:
                    7a:c0:35:5d:62:8a:2f:c3:f2:fe:1d:d9:69:f5:3d:
                    00:d9:7d:4b:6e:45:c1:4c:74:b8:85:0f:e9:64:04:
                    57:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5F:D1:35:99:0C:E2:E3:19:89:A6:0C:5F:8B:37:7E:12:5E:6A:5D
            X509v3 Authority Key Identifier:
                keyid:64:F2:FC:EA:F9:87:CF:69:25:A6:46:E4:EB:EA:1B:6C:C8:FA:A1:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ec5ed55fab0f69b190a1b4095b040503dca3b82.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/40af7643-fa2a-4083-ada1-49a87a35a2d1/07c41108f01f00973a041e001b4e1b14ac1085f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/40af7643-fa2a-4083-ada1-49a87a35a2d1/1ec5ed55fab0f69b190a1b4095b040503dca3b82.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         83:96:18:9a:15:57:04:3c:e2:64:eb:c0:7b:f7:75:c9:71:ee:
         d7:3a:94:31:76:78:a4:7a:3b:4d:5d:4c:5d:b7:34:33:d4:2b:
         6c:df:55:40:05:9d:a0:d7:1f:fe:b8:bd:1f:5a:87:54:6b:75:
         ca:52:e9:5b:5e:e3:2b:49:b6:72:53:b6:f0:7e:ac:c2:4f:49:
         11:b8:31:df:80:69:eb:df:13:61:c7:d3:65:fb:8c:e7:d9:17:
         ad:c8:2a:5d:1c:39:48:de:79:1a:3d:98:43:8b:ed:75:f8:a6:
         ba:5a:24:fb:b7:3f:cb:60:70:62:11:af:d9:94:6d:04:74:78:
         e1:f5:c6:d0:5f:14:00:e1:39:59:bf:41:8d:c4:c9:72:b2:bc:
         b4:df:46:e5:80:90:7d:ad:a0:7a:2f:39:46:40:f5:f5:9c:e1:
         78:20:13:a6:c1:59:b1:65:30:9b:52:b8:fa:a0:50:59:55:a6:
         73:9f:d8:b3:79:40:9b:f5:5a:7e:af:49:0f:a1:3f:89:2a:b5:
         39:3b:d2:7f:7c:33:4a:d1:5e:a7:e1:22:89:e4:89:72:13:7e:
         cf:68:95:be:69:07:d4:ab:c3:aa:74:e6:26:89:3e:7a:f0:62:
         f4:c8:39:71:f0:4a:ad:0e:13:a3:64:66:8a:fb:8f:55:b4:31:
         d3:13:9b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----