Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/683d913fff41a111bb7bc3baabb2672342adbed7.roa
File:                     683d913fff41a111bb7bc3baabb2672342adbed7.roa (raw, json)
Hash identifier:          9+NLre2tQny6Zx50FSbyoC5L25pNEiBlAZ/su65A5lY=
Subject key identifier:   EB:74:7F:F2:EA:3C:61:F4:28:C3:0F:9A:6E:AC:4C:C4:DE:18:AB:D1
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       1004A6
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/683d913fff41a111bb7bc3baabb2672342adbed7.roa
Signing time:             Thu 15 Jun 2023 17:03:37 +0000
ROA not before:           Wed 14 Jun 2023 17:03:37 +0000
ROA not after:            Sun 15 Jun 2025 17:03:37 +0000
asID:                     271891
IP address blocks:        2801:151:fa::/48 maxlen: 48
                          2801:151:3f::/48 maxlen: 48
                          2801:151:48::/48 maxlen: 48
                          2801:151:4e::/48 maxlen: 48
                          2801:151:54::/48 maxlen: 48
                          2801:151:5d::/48 maxlen: 48
                          2801:151:63::/48 maxlen: 48
                          2801:151:69::/48 maxlen: 48
                          2801:151:6c::/48 maxlen: 48
                          2801:151:35::/48 maxlen: 48
                          2801:151:101::/48 maxlen: 48
                          2801:151:104::/48 maxlen: 48
                          2801:151:106::/48 maxlen: 48
                          2801:151:108::/48 maxlen: 48
                          2801:151:36::/48 maxlen: 48
                          2801:151:38::/48 maxlen: 48
                          2801:151:f7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1049766 (0x1004a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Jun 14 17:03:37 2023 GMT
            Not After : Jun 15 17:03:37 2025 GMT
        Subject: CN=683d913fff41a111bb7bc3baabb2672342adbed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:cd:f9:5b:95:1b:10:ea:a3:a3:35:83:38:70:
                    97:af:4f:8b:f9:7b:44:e3:c9:82:dc:92:d9:0e:09:
                    92:13:03:e9:16:94:58:7c:e6:75:99:df:b9:60:6c:
                    13:31:01:5c:e6:35:8a:46:ee:c7:1b:a7:5a:74:da:
                    96:89:36:8d:3e:61:e4:0e:38:2f:51:dc:1d:14:b0:
                    aa:5f:87:47:93:ed:25:c7:f5:72:da:9c:8a:e4:bc:
                    1d:bb:e1:d3:f3:fa:dc:98:1e:02:c2:7b:dc:a4:63:
                    20:0b:36:bd:7f:bd:6b:9d:38:93:92:ed:90:e3:16:
                    3e:c3:31:d9:45:7f:cc:4d:0d:99:e0:96:7d:06:6d:
                    76:d9:5a:5d:92:9d:85:55:01:5d:7b:84:0c:e1:ce:
                    59:d9:57:43:18:4a:dd:38:3d:fa:76:5c:46:aa:8f:
                    80:8e:36:ac:24:6b:da:df:bd:ff:08:b3:27:84:03:
                    c3:3e:61:02:17:2e:18:2f:4e:b1:e4:2a:5a:dc:8c:
                    55:25:a3:d3:ac:9d:8b:91:31:07:ed:73:4f:90:35:
                    e1:86:d2:53:c6:28:cf:ca:be:72:2d:c3:30:3e:2a:
                    a5:e8:d5:5a:c5:ba:c0:8e:42:a5:4d:b9:ae:f0:09:
                    22:d9:9c:be:6a:20:8d:30:05:3b:88:b6:f7:71:bf:
                    f6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:74:7F:F2:EA:3C:61:F4:28:C3:0F:9A:6E:AC:4C:C4:DE:18:AB:D1
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/683d913fff41a111bb7bc3baabb2672342adbed7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:35::-2801:151:36:ffff:ffff:ffff:ffff:ffff
                  2801:151:38::/48
                  2801:151:3f::/48
                  2801:151:48::/48
                  2801:151:4e::/48
                  2801:151:54::/48
                  2801:151:5d::/48
                  2801:151:63::/48
                  2801:151:69::/48
                  2801:151:6c::/48
                  2801:151:f7::/48
                  2801:151:fa::/48
                  2801:151:101::/48
                  2801:151:104::/48
                  2801:151:106::/48
                  2801:151:108::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:ec:19:dd:8a:d4:66:da:04:6a:23:7e:d7:76:56:67:07:28:
         ad:df:7f:23:23:39:8c:b7:a1:0f:21:c7:81:5a:f3:2a:14:6f:
         9b:88:2b:45:90:79:f7:20:c8:7c:25:df:97:3f:49:ec:04:a4:
         fa:60:d7:2c:de:c8:aa:32:99:a2:d2:c4:0d:74:f7:f1:98:96:
         34:bc:86:ac:af:ec:04:e0:42:f4:53:82:25:92:56:27:82:9c:
         1b:89:5b:af:6f:76:35:ef:5d:66:06:aa:9d:ec:cd:0a:e8:bb:
         cb:82:d2:1e:53:b1:59:59:31:6b:40:71:4c:20:ea:27:e7:8f:
         a2:8f:0b:5e:9d:f7:16:97:87:63:bd:c8:f3:8e:a7:d9:ea:6b:
         ea:33:03:8d:0d:ad:79:a6:af:15:40:a7:6c:33:10:34:44:de:
         7e:a8:c8:c7:de:85:2f:da:90:1d:e0:fd:f1:49:79:0b:49:83:
         bf:35:20:d3:32:00:f8:88:a9:f6:c9:a4:09:b4:c1:2c:45:12:
         83:50:bc:ff:b6:35:0a:28:14:4f:84:1d:37:f0:81:39:97:b6:
         c1:80:cd:e5:1d:1e:ee:31:1b:0a:09:60:91:ac:30:4e:12:84:
         f9:bb:9c:fd:aa:c8:6a:85:28:e6:dc:0b:4e:92:28:fa:df:aa:
         83:fb:b3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----