Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/f61d09d11f794fc1836fa6ddc9bd6184fb38b3c0.roa
File:                     f61d09d11f794fc1836fa6ddc9bd6184fb38b3c0.roa (raw, json)
Hash identifier:          EkpeuAVZPi954rliY4UewQSebIksNCc9WZlonItGjwY=
Subject key identifier:   5C:2C:51:F7:BD:11:2F:6D:76:2E:02:E3:0E:7B:EA:BE:03:EB:4E:60
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       0E3A64
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/f61d09d11f794fc1836fa6ddc9bd6184fb38b3c0.roa
Signing time:             Wed 19 Apr 2023 17:51:57 +0000
ROA not before:           Tue 18 Apr 2023 17:51:57 +0000
ROA not after:            Sat 19 Apr 2025 17:51:57 +0000
asID:                     11830
IP address blocks:        2801:151:f::/48 maxlen: 48
                          2801:151:3::/48 maxlen: 48
                          2801:151:c3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932452 (0xe3a64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Apr 18 17:51:57 2023 GMT
            Not After : Apr 19 17:51:57 2025 GMT
        Subject: CN=f61d09d11f794fc1836fa6ddc9bd6184fb38b3c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5d:96:de:70:7a:66:13:32:be:c9:26:f9:b8:
                    cf:e3:17:64:68:8a:c4:15:23:ed:bb:ab:43:c5:34:
                    57:e0:17:fd:be:e5:4e:8f:c5:dc:b5:35:63:dd:8e:
                    09:d3:7d:ea:e8:15:6a:43:4e:57:4a:5d:56:27:87:
                    2c:05:86:03:fc:c3:b2:21:3b:e4:a0:de:53:6c:cc:
                    f2:5c:8e:3a:e5:4d:71:6a:b2:8a:98:64:7d:57:4a:
                    3f:eb:4a:f1:5d:cd:a5:3a:33:69:c1:71:25:bb:3a:
                    8d:66:e1:bc:69:78:26:75:06:03:ce:d7:ea:c4:99:
                    63:1c:c4:8a:92:8f:5f:d4:74:d7:e6:c5:61:7b:c1:
                    48:bf:6b:0a:31:da:dd:d9:0d:c4:48:76:b7:6e:5e:
                    1e:cc:0e:23:ed:59:d2:06:e5:23:f9:ca:de:06:4e:
                    ce:db:91:c4:a2:f3:4e:c7:af:ba:3f:d9:cf:4c:91:
                    f5:ee:9b:55:3f:43:4c:8d:12:3a:64:20:31:0f:41:
                    65:6a:4a:33:21:38:45:0b:a8:98:db:69:be:e3:10:
                    d8:29:e2:77:04:45:21:b5:37:c0:9d:9a:13:13:4b:
                    cc:ae:32:49:ca:43:a6:3f:3a:81:b1:38:00:67:86:
                    15:9b:51:48:33:b8:ec:a2:3e:9c:95:38:82:b7:45:
                    30:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2C:51:F7:BD:11:2F:6D:76:2E:02:E3:0E:7B:EA:BE:03:EB:4E:60
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/f61d09d11f794fc1836fa6ddc9bd6184fb38b3c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151:3::/48
                  2801:151:f::/48
                  2801:151:c3::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:c8:3c:19:1b:1d:70:4e:c3:82:70:b4:e7:9b:90:71:91:b7:
         e7:4a:c9:71:bb:4c:2d:c6:f0:bf:9a:e5:af:6d:4b:16:c5:3c:
         20:3a:52:9d:4b:e7:d9:70:d2:f1:fa:20:83:d2:10:9b:3e:0c:
         c6:a1:c7:11:d4:3f:a6:36:99:ad:63:d7:50:5a:2c:63:f6:3e:
         4e:4c:1b:1f:bc:73:4d:c8:cc:b8:21:04:33:0e:db:35:be:44:
         b3:3a:6e:09:0c:0a:19:24:07:2a:f9:65:d9:2b:ff:08:bb:11:
         61:fe:1a:62:1c:1b:08:73:ac:6a:3b:8e:93:e1:7e:09:6f:75:
         ce:aa:23:90:6b:46:06:26:32:04:b5:6b:23:14:5a:9b:92:49:
         f8:70:17:bb:f4:11:c3:d5:7b:f6:3f:a3:ad:6d:88:a9:80:3e:
         01:2e:9f:64:eb:08:e2:c2:b5:52:c6:ff:07:b3:68:c6:b7:62:
         c1:11:a1:86:6c:2e:45:16:48:88:fa:3b:26:f8:59:b6:5b:e3:
         e2:a2:92:b3:2f:83:f6:e7:bf:8b:0a:e3:a2:02:1f:7d:92:4a:
         55:be:62:15:27:ab:b4:5c:21:13:d8:a2:02:7b:6c:92:59:ba:
         0a:f6:cf:18:57:ff:e0:08:85:55:64:0b:b3:b5:8f:8b:11:6d:
         f5:47:6f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----