Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/36311802db91a696bbb98a39e0320733651398f7.roa
File:                     36311802db91a696bbb98a39e0320733651398f7.roa (raw, json)
Hash identifier:          n9FvTgx8JMNBp5DwNGaUlTJ2TnUTyv6VC/ArOXgNgJE=
Subject key identifier:   01:1C:4D:69:EA:3D:8C:9E:A8:90:A5:DA:A4:2E:C8:E5:41:BD:92:C2
Certificate issuer:       /CN=702a8ccc0bc2940e8862741717474a0961649f65
Certificate serial:       22DE6E
Authority key identifier: 2A:BE:3A:F9:99:D4:0C:CA:AC:54:7E:5C:BF:25:FA:51:AF:C5:C0:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/702a8ccc0bc2940e8862741717474a0961649f65.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/36311802db91a696bbb98a39e0320733651398f7.roa
Signing time:             Tue 29 Aug 2023 16:03:18 +0000
ROA not before:           Mon 28 Aug 2023 16:03:17 +0000
ROA not after:            Fri 29 Aug 2025 16:03:17 +0000
asID:                     18747
IP address blocks:        2801:10:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2285166 (0x22de6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=702a8ccc0bc2940e8862741717474a0961649f65
        Validity
            Not Before: Aug 28 16:03:17 2023 GMT
            Not After : Aug 29 16:03:17 2025 GMT
        Subject: CN=36311802db91a696bbb98a39e0320733651398f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:1b:59:cf:33:98:5e:b6:fd:0e:b6:2d:b1:40:
                    4c:e0:17:73:6e:44:f0:60:a3:a9:60:cb:e7:34:cc:
                    5e:bb:9e:05:37:74:1f:f4:bd:57:e0:13:f0:03:17:
                    04:2c:73:23:6c:ed:6d:68:62:5b:d8:3d:28:a2:12:
                    c3:1d:8f:d8:05:ad:00:2d:68:75:a2:d5:d6:fd:cc:
                    52:97:70:24:be:35:fd:4a:af:e9:e7:b4:95:6c:d1:
                    63:17:80:84:06:37:aa:96:4f:30:f8:fa:d2:07:4a:
                    3f:2d:a1:66:9b:20:91:c0:b9:59:bc:13:57:08:2d:
                    eb:fe:5d:6a:fa:fe:13:70:77:ef:fb:be:49:ad:8f:
                    c9:bb:bd:f5:28:f2:bd:43:c8:d2:67:c6:b6:b3:d0:
                    cb:99:6a:b5:0b:77:be:f7:85:c3:29:83:dd:75:43:
                    5d:f0:a4:4c:07:63:7f:f7:68:e0:bc:d2:67:ba:be:
                    10:6f:04:33:6e:30:f0:5b:87:e9:5e:26:9a:d2:83:
                    68:c0:75:6e:dd:02:7d:72:a2:9d:b1:eb:2f:79:b8:
                    f1:65:75:a0:cb:c4:6d:2b:81:97:93:de:6d:f8:ed:
                    c9:a2:83:a9:8e:75:b4:f7:5f:b7:0c:48:fb:f5:7e:
                    89:ff:7d:bc:07:02:d7:23:f6:63:e7:b9:97:f2:4f:
                    26:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:1C:4D:69:EA:3D:8C:9E:A8:90:A5:DA:A4:2E:C8:E5:41:BD:92:C2
            X509v3 Authority Key Identifier:
                keyid:2A:BE:3A:F9:99:D4:0C:CA:AC:54:7E:5C:BF:25:FA:51:AF:C5:C0:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/702a8ccc0bc2940e8862741717474a0961649f65.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/36311802db91a696bbb98a39e0320733651398f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b18d4b9-6f7d-47da-bc32-f8b96b67e279/702a8ccc0bc2940e8862741717474a0961649f65.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:68:2a:d2:cb:a3:20:47:1c:a2:d9:13:42:cd:1e:42:89:3f:
         b7:05:ae:57:1f:fe:76:b4:96:72:df:a0:29:9f:b3:0e:03:7e:
         b4:f2:7b:06:b2:9b:4f:14:69:ee:84:8e:59:da:60:64:a3:78:
         7d:df:ba:e2:02:18:1d:13:0d:23:69:1d:e0:de:1c:86:17:bc:
         6e:f3:f8:05:91:82:84:a1:1e:d2:88:96:d2:94:8d:25:24:fa:
         f8:28:d8:c2:bc:2b:d6:0d:27:b5:8b:53:03:d1:a1:22:97:29:
         b8:fb:4f:3d:9f:4d:35:fa:37:c6:ef:df:02:43:b8:8e:ab:cb:
         4a:2a:65:76:df:84:d5:ae:1e:7c:ea:e7:55:7a:8f:c1:12:67:
         b4:70:bd:e1:c4:62:00:8d:f1:4b:9e:75:32:e5:27:bd:18:68:
         93:d8:1b:8e:c9:13:53:26:6f:40:6a:22:bd:55:56:f2:2a:3b:
         bd:d3:4d:aa:40:c5:11:ef:6a:db:fc:99:ba:86:ec:0c:da:8b:
         50:e3:c5:ff:dc:8c:5d:5a:05:c4:f9:7d:ba:3f:51:7c:70:28:
         b5:cf:a2:19:09:6d:29:a2:04:77:b8:ab:0f:d3:77:e2:13:2f:
         88:e4:92:26:31:51:91:d2:24:c4:18:df:17:17:d9:ec:fa:fa:
         c0:db:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----