Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/a3a33a49e3df36a977e25559e08c23bb60febcf5.roa
File:                     a3a33a49e3df36a977e25559e08c23bb60febcf5.roa (raw, json)
Hash identifier:          YRu0OxSXbGBiEpKF0j1xfhh3BPj0LTzExgg1Mtm7dus=
Subject key identifier:   B0:1B:7A:B1:E7:4C:E6:51:26:EB:60:A2:5F:65:87:ED:00:86:E1:A3
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       13175B
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/a3a33a49e3df36a977e25559e08c23bb60febcf5.roa
Signing time:             Mon 16 Oct 2023 19:42:35 +0000
ROA not before:           Sun 15 Oct 2023 19:42:34 +0000
ROA not after:            Thu 16 Oct 2025 19:42:34 +0000
asID:                     3790
IP address blocks:        2801:151:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1251163 (0x13175b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Oct 15 19:42:34 2023 GMT
            Not After : Oct 16 19:42:34 2025 GMT
        Subject: CN=a3a33a49e3df36a977e25559e08c23bb60febcf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:b5:7e:ad:2f:32:c2:25:6e:4d:5a:f7:0a:
                    f0:a2:5c:07:2f:7f:9b:8e:24:10:8d:04:4a:7a:9f:
                    3b:e4:77:62:a6:9b:41:5f:3e:b3:19:61:c4:7d:0e:
                    63:c2:42:df:cf:45:d5:14:51:ca:63:e8:e3:3c:5c:
                    bf:5d:c6:06:df:7c:29:f8:c3:d9:60:47:2b:7b:32:
                    30:42:78:b0:cb:d7:7a:ff:50:9f:56:54:9f:51:e8:
                    41:17:52:4a:b4:5d:77:f7:13:92:77:b5:6c:e3:30:
                    55:3b:9a:09:ce:1c:1d:2f:4e:86:6f:bd:71:c6:25:
                    31:84:8c:25:ea:72:86:33:59:a2:05:15:c9:58:e4:
                    90:a4:6c:44:6e:5c:4b:f0:08:67:f0:e9:5f:31:fa:
                    bd:b2:9a:ef:f4:7a:d6:61:de:0c:79:aa:9a:3b:72:
                    01:4a:4c:26:aa:01:0f:05:d1:17:58:98:f9:c8:0b:
                    82:e3:1e:20:0d:fd:2d:a0:2d:7e:56:74:0f:d4:e6:
                    70:56:15:88:9e:cc:ba:b6:4f:e4:6a:87:d4:21:57:
                    d6:de:c2:0b:9e:4f:a8:e3:2d:21:df:f2:bc:58:ed:
                    70:92:4a:21:97:af:c5:a9:2d:d2:56:4b:9b:3d:e8:
                    05:64:c8:ea:5e:21:07:7e:d1:bd:a3:a1:3d:60:e3:
                    f9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:1B:7A:B1:E7:4C:E6:51:26:EB:60:A2:5F:65:87:ED:00:86:E1:A3
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/a3a33a49e3df36a977e25559e08c23bb60febcf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:90:ee:77:d1:d2:3f:09:eb:e7:0b:c0:ce:68:48:2d:2a:5f:
         84:70:85:49:78:0f:87:ed:3c:20:fc:84:6d:a4:cb:1c:b7:93:
         fc:88:7c:6b:b5:f8:4c:92:61:c8:91:30:9d:e1:65:57:56:a7:
         da:e6:84:f5:c2:b8:a4:02:88:da:ca:33:c6:64:94:7c:63:2e:
         28:2b:69:7e:cc:4b:70:8e:d7:42:2f:f8:0f:4f:0b:c8:05:2a:
         83:14:03:f4:77:c1:02:27:53:63:f5:72:63:33:1b:af:07:13:
         f1:ea:ec:a5:0f:b0:2f:b1:74:f1:5b:cf:d1:00:2d:9b:6c:24:
         4b:95:65:c8:d1:2c:14:d6:e5:f3:00:b7:fb:ce:54:f6:99:50:
         1c:c5:b0:ed:32:b8:1c:ff:6e:78:4a:2f:28:ad:98:98:40:53:
         c6:53:1f:bc:38:df:1d:69:f7:55:81:77:2d:2a:1b:76:8f:10:
         58:24:43:29:f2:f1:35:98:f8:50:00:9d:f2:e2:c6:da:f7:b2:
         d4:d2:87:9c:f6:d6:62:29:2b:41:31:86:f4:66:de:43:5e:47:
         48:c7:3a:eb:41:89:8a:a4:48:e1:f4:93:6c:c5:da:ae:17:e8:
         c4:a0:ef:e7:c1:c1:44:45:7d:5e:cd:54:03:04:12:47:04:cd:
         78:5c:06:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----