Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/fa836da152ee6a8616f7660a0cc76a6a3366ab36.roa
File:                     fa836da152ee6a8616f7660a0cc76a6a3366ab36.roa (raw, json)
Hash identifier:          feVhZfEyEXpMY/hbLgCJjLPBXviZPhomZbxYnAvz9Fo=
Subject key identifier:   BE:59:38:69:B2:01:72:BE:49:72:22:CE:09:24:42:30:81:08:87:BF
Certificate issuer:       /CN=5b7dbb1482b4705c4115f4698d018750070bcecb
Certificate serial:       102FA9
Authority key identifier: 2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/fa836da152ee6a8616f7660a0cc76a6a3366ab36.roa
Signing time:             Wed 21 Jun 2023 18:58:37 +0000
ROA not before:           Tue 20 Jun 2023 18:58:37 +0000
ROA not after:            Sat 21 Jun 2025 18:58:37 +0000
asID:                     3790
IP address blocks:        2801:151::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1060777 (0x102fa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b7dbb1482b4705c4115f4698d018750070bcecb
        Validity
            Not Before: Jun 20 18:58:37 2023 GMT
            Not After : Jun 21 18:58:37 2025 GMT
        Subject: CN=fa836da152ee6a8616f7660a0cc76a6a3366ab36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:43:cb:4c:1f:14:3b:d4:6b:fb:57:38:ed:
                    9f:d0:99:28:43:50:19:e3:f5:ce:bb:43:4b:55:11:
                    04:ed:a3:6f:23:af:58:03:5f:f8:80:7e:10:01:e3:
                    aa:9a:a4:83:b7:a1:d3:6e:03:6d:20:fd:91:e5:64:
                    1d:2e:1e:0b:27:9b:dd:40:31:13:72:d2:98:f8:bd:
                    1e:a3:97:ce:f7:0c:25:72:70:3d:88:15:b2:5e:8d:
                    71:6a:c5:a9:78:56:a9:d2:86:bb:91:0c:3f:5b:78:
                    75:a8:44:c9:23:d5:ed:a6:20:86:dd:e0:5b:05:44:
                    6b:f4:42:5e:73:06:3b:ed:15:5f:7b:a5:44:31:09:
                    9a:f9:4f:c4:dc:a2:96:02:c6:a6:d2:4a:de:ec:d4:
                    7b:a5:62:4a:f4:e5:d3:dc:be:d9:4f:88:a1:29:fa:
                    5b:96:d6:a5:26:d5:83:cd:ea:08:ac:7f:1d:6a:82:
                    4d:a5:f8:a9:92:36:7e:9f:e1:5b:26:30:aa:cd:22:
                    60:71:5c:ee:cd:ab:af:2d:0c:86:82:7b:c9:ab:53:
                    49:54:ea:bd:b4:79:29:e6:4d:aa:82:02:db:61:7d:
                    97:be:bd:09:20:b6:d7:e5:70:4c:7e:d1:21:c9:20:
                    db:94:a9:42:71:65:ad:c4:7f:fa:0b:ad:de:50:2b:
                    8a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:59:38:69:B2:01:72:BE:49:72:22:CE:09:24:42:30:81:08:87:BF
            X509v3 Authority Key Identifier:
                keyid:2B:3B:AC:72:9D:0E:A7:42:1F:BD:B8:90:D9:23:BD:A4:77:D7:CA:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b7dbb1482b4705c4115f4698d018750070bcecb.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/fa836da152ee6a8616f7660a0cc76a6a3366ab36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/5b7dbb1482b4705c4115f4698d018750070bcecb.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:151::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:ec:6a:6e:e7:b2:75:c4:bd:77:24:e0:a6:3d:21:41:e2:63:
         c2:4f:77:d5:c5:06:09:a9:85:04:ae:29:fa:1e:3e:16:35:6c:
         88:8c:39:b6:12:ca:9b:08:4d:83:a7:e5:cf:ac:93:7f:22:3b:
         a2:4d:2e:46:d4:08:cb:45:dc:0a:cf:51:94:08:4d:5a:32:9d:
         f4:be:6a:e9:1b:c4:8e:ef:8d:6f:12:50:25:fe:df:92:e4:a5:
         a4:29:5a:a8:81:75:89:28:e3:29:1b:10:4c:35:b3:0d:13:43:
         7d:71:8f:c5:bf:90:ec:ce:70:6d:9a:47:90:d8:e7:23:b4:b9:
         81:6e:a4:3f:99:8d:33:65:ad:eb:d4:d5:4f:a2:d5:77:e2:a9:
         32:95:02:5c:d7:0e:52:05:f3:02:b1:31:66:a9:02:b6:06:8e:
         a2:93:f5:11:d3:60:00:3c:78:75:f2:c5:23:4a:9f:c2:81:3d:
         6f:01:88:3f:cb:19:6f:f2:bc:16:64:a9:5c:71:8d:24:fc:e5:
         3c:b6:62:e7:d4:17:ba:25:3e:55:0d:af:eb:b0:b1:cc:06:7b:
         8d:8a:9e:be:eb:ff:0d:e2:11:5b:9c:d1:4c:64:b9:00:e9:77:
         f3:18:fc:39:e6:74:28:83:18:7a:43:a6:c6:33:35:8b:b3:e9:
         50:31:ec:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----