Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e1f919a40fea242e8aee7cc7ec738123c4bfc8d5.roa
File:                     e1f919a40fea242e8aee7cc7ec738123c4bfc8d5.roa (raw, json)
Hash identifier:          CR6m7TDOUk6DYQvhBAcuRW1/6s+84k1pa2+mJvDpCys=
Subject key identifier:   9F:8B:F0:A1:CA:E8:54:F9:C4:F7:C9:CF:AA:07:CF:4C:68:C2:D3:70
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       133759
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e1f919a40fea242e8aee7cc7ec738123c4bfc8d5.roa
Signing time:             Thu 19 Oct 2023 16:10:28 +0000
ROA not before:           Thu 19 Oct 2023 16:10:28 +0000
ROA not after:            Sun 19 Oct 2025 16:10:28 +0000
asID:                     11830
IP address blocks:        2801:151:5::/48 maxlen: 48
                          2801:151:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1259353 (0x133759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Oct 19 16:10:28 2023 GMT
            Not After : Oct 19 16:10:28 2025 GMT
        Subject: CN=e1f919a40fea242e8aee7cc7ec738123c4bfc8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e6:e6:04:8d:74:9d:3b:2e:8f:fb:c5:b3:46:
                    d1:86:fc:61:19:6c:02:25:7e:c3:03:76:6e:e5:57:
                    b8:7c:c9:af:9d:c4:3b:c9:d8:5b:8f:50:35:58:42:
                    7c:e1:5a:2d:f8:0a:4a:5e:6e:15:8c:87:4f:a0:ea:
                    a5:e9:f7:0c:2c:86:14:0f:dc:50:1b:d8:ea:46:a0:
                    36:b1:a8:c4:8f:83:f3:dc:77:4c:7e:fd:4f:3a:07:
                    20:12:60:3d:a3:65:72:12:fb:76:13:3a:ef:eb:94:
                    3e:24:54:07:b5:e6:21:2b:67:fd:90:8d:be:5f:8b:
                    9b:cf:57:41:ff:bc:5e:1c:76:ae:bc:ac:67:d8:44:
                    0f:48:4b:95:7c:81:1a:83:70:6c:30:63:67:b3:ce:
                    48:bf:d2:f6:00:af:6d:ae:5f:f5:7a:17:9d:9f:84:
                    9d:20:e2:e2:87:ee:7b:8d:e1:e3:66:04:ad:6d:8f:
                    3e:79:08:20:c9:19:1e:81:de:bf:f3:ce:3a:fb:e5:
                    c9:9e:d4:78:32:d7:16:11:86:bf:2a:24:7d:a7:8b:
                    92:9f:68:a1:99:d0:11:38:1d:85:58:19:c6:10:a9:
                    52:46:93:78:2a:a1:dc:79:ea:7b:1c:8d:86:c3:8d:
                    fb:90:33:05:15:3d:b9:b8:1c:86:a9:3f:a1:d1:26:
                    d2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8B:F0:A1:CA:E8:54:F9:C4:F7:C9:CF:AA:07:CF:4C:68:C2:D3:70
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/e1f919a40fea242e8aee7cc7ec738123c4bfc8d5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:5::-2801:151:6:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         a4:1c:dc:b0:80:22:d6:80:a1:ba:90:dc:65:f3:41:9f:a1:1a:
         8e:05:71:fa:78:c8:45:88:d8:2d:0c:ab:b1:42:a2:c1:ab:2e:
         1f:34:40:22:b4:2f:c3:26:0f:c3:9b:1d:aa:70:90:99:0b:a7:
         40:65:6b:c1:d0:2a:d8:67:09:d7:37:52:05:22:b0:0d:49:64:
         ba:9e:b3:35:df:cc:0b:c6:0d:99:46:47:3a:ff:3f:ca:ba:f6:
         8e:9a:6a:36:6e:3d:11:17:40:b7:2c:68:18:a1:98:84:b9:6d:
         c3:7d:f0:c4:7a:ec:73:b6:02:a5:9c:1f:47:ed:41:d8:a6:e9:
         70:77:4b:99:32:67:2f:b2:16:60:c8:80:da:e7:da:f0:02:b5:
         30:ac:85:1c:d7:6d:91:0c:7c:0c:2b:ac:0b:8b:78:8b:e3:f9:
         cb:41:bd:bd:9a:cc:2e:ac:a7:c3:c8:10:5e:1f:e6:eb:72:05:
         87:53:26:b6:9c:07:b5:ca:ad:ed:ec:11:ba:76:7d:40:d1:0d:
         00:6a:67:0d:7d:d1:ee:48:b9:55:d9:46:b6:46:5a:c1:4f:a6:
         55:45:f0:12:06:4d:6d:c9:12:08:b8:f7:e8:d6:b9:cb:a9:01:
         ae:10:aa:ca:4f:a4:18:2e:d2:9c:5a:2e:66:fe:0d:fe:e4:e1:
         2c:ca:14:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----