Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/867bccc555ebd0ab5a90a8625e5099a58f391631.roa
File:                     867bccc555ebd0ab5a90a8625e5099a58f391631.roa (raw, json)
Hash identifier:          PsVJAc9Hl8Rg8fKG8JQmOGjwOmOMo0NgPaZz7JWy2k8=
Subject key identifier:   AC:91:1F:67:30:CD:33:B9:B3:8D:97:CF:D6:52:42:E7:7D:89:08:92
Certificate issuer:       /CN=5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2
Certificate serial:       63CD
Authority key identifier: 5F:8C:67:63:71:E5:A8:C8:CA:7A:33:15:D7:E9:73:D0:07:D9:8A:AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/867bccc555ebd0ab5a90a8625e5099a58f391631.roa
Signing time:             Tue 09 May 2023 14:44:24 +0000
ROA not before:           Mon 08 May 2023 14:44:24 +0000
ROA not after:            Fri 09 May 2025 14:44:24 +0000
asID:                     272140
IP address blocks:        2801:18:5800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25549 (0x63cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2
        Validity
            Not Before: May  8 14:44:24 2023 GMT
            Not After : May  9 14:44:24 2025 GMT
        Subject: CN=867bccc555ebd0ab5a90a8625e5099a58f391631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:92:b2:ff:19:04:2a:b0:eb:ce:77:57:0d:13:
                    ca:d3:68:96:d3:c2:77:40:4b:ff:1b:d1:c0:a7:ad:
                    51:78:d9:60:ee:81:a4:b6:10:0a:64:44:a9:8c:82:
                    24:8a:ce:db:43:2e:32:98:61:41:8f:2e:4b:50:6f:
                    58:c4:55:4a:50:51:a0:86:95:a7:c0:f4:8e:f5:05:
                    03:38:ab:68:ca:66:90:f7:5f:2c:97:1f:ac:1a:30:
                    f2:fe:dd:8d:00:9d:8b:2f:43:bd:8d:d3:46:a0:b3:
                    7f:03:13:53:21:2f:23:d9:36:13:f4:df:73:cd:77:
                    e3:8e:b2:af:5b:76:29:14:7c:c3:22:80:40:9c:a1:
                    2d:3f:58:db:1b:f1:bb:d1:cc:58:d5:8c:b0:e8:b7:
                    31:7c:a3:6b:dc:6e:55:ec:71:50:a4:83:7b:3b:47:
                    6a:75:d6:54:e3:06:ee:3d:e7:d6:95:58:28:6b:85:
                    ab:d6:6e:de:fb:40:60:9f:52:8e:72:20:27:63:eb:
                    67:1f:3a:7f:1c:3c:0c:fc:2a:63:40:bb:96:ca:d7:
                    ba:1d:b0:cf:ec:e2:5d:12:68:1c:f0:b1:df:b6:09:
                    b3:47:a4:59:fe:98:05:43:8d:5f:e5:ca:6e:bd:3b:
                    f2:e9:d3:bb:9d:2b:20:1e:ec:36:35:ca:f3:c0:6c:
                    7b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:91:1F:67:30:CD:33:B9:B3:8D:97:CF:D6:52:42:E7:7D:89:08:92
            X509v3 Authority Key Identifier:
                keyid:5F:8C:67:63:71:E5:A8:C8:CA:7A:33:15:D7:E9:73:D0:07:D9:8A:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/867bccc555ebd0ab5a90a8625e5099a58f391631.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4742159e-e9be-4c33-89ef-4a54bbbcf1e6/5ca0ac86bebb8bd8e59ced6a2d9d6354e4ee88e2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:64:91:bb:05:a3:36:35:c3:d6:37:d8:46:9f:b7:dc:ef:aa:
         9c:58:26:dd:06:b2:64:e6:9a:c3:5f:c0:83:5b:50:95:8b:5c:
         51:c6:91:b1:41:bc:dc:91:ac:62:78:5e:80:8d:f1:65:27:12:
         af:56:1f:57:f9:23:ba:cb:f0:16:5e:37:d0:5e:70:f6:50:f7:
         6a:3f:51:35:90:fa:c3:a3:60:50:3c:8c:85:c9:9f:ba:4d:43:
         51:56:84:f1:1f:37:e0:0a:a0:d5:75:23:5c:65:3c:b8:c0:bd:
         bb:84:f5:3e:f5:22:e1:32:26:23:c6:d3:7a:c0:ae:17:9a:f7:
         95:69:18:66:ac:e3:20:e4:35:08:c6:02:92:d9:85:66:10:af:
         ef:da:79:8e:38:4c:b0:0e:fc:89:fe:eb:64:ee:37:d8:94:df:
         99:3b:ce:d6:1c:07:92:73:af:13:c1:3b:f0:d8:19:97:f0:a9:
         f8:42:df:90:f0:33:fc:03:27:c4:6a:6f:6d:62:12:b7:40:11:
         91:86:d3:3f:93:d4:7a:2e:7a:21:59:66:f6:48:6b:0e:11:f5:
         bf:8e:27:ad:9c:53:c7:54:13:ad:69:e2:9e:0c:01:f9:1d:34:
         31:9d:31:e5:18:9f:55:56:3c:d1:ab:0e:a8:65:2b:d0:d2:7f:
         64:89:d9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----