Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4c6d3201-6538-49ed-8149-5a7bd4922202/bf37bdf0310a51a9f65dd0b5316782c6a6d640c0.roa
File:                     bf37bdf0310a51a9f65dd0b5316782c6a6d640c0.roa (raw, json)
Hash identifier:          cl6qTup/5w7xE4435ERvMGrU+GJ50fuiB/xZPYjqEbc=
Subject key identifier:   9F:CC:F4:5E:3A:05:72:00:76:31:7E:5D:07:88:63:88:4C:A3:59:EC
Certificate issuer:       /CN=7d1cf578607bddf5774ec2de09aa770ef8e6b54f
Certificate serial:       22BDF3
Authority key identifier: D4:C1:53:10:1C:ED:B0:5C:54:4B:7C:47:0F:A8:10:3F:F7:28:BE:43
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4c6d3201-6538-49ed-8149-5a7bd4922202/bf37bdf0310a51a9f65dd0b5316782c6a6d640c0.roa
Signing time:             Tue 26 Dec 2023 07:30:00 +0000
ROA not before:           Tue 26 Dec 2023 07:30:00 +0000
ROA not after:            Thu 25 Dec 2025 07:30:00 +0000
asID:                     3816
IP address blocks:        2801:14a:c0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2276851 (0x22bdf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d1cf578607bddf5774ec2de09aa770ef8e6b54f
        Validity
            Not Before: Dec 26 07:30:00 2023 GMT
            Not After : Dec 25 07:30:00 2025 GMT
        Subject: CN=bf37bdf0310a51a9f65dd0b5316782c6a6d640c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:54:fb:96:28:ac:d7:18:7a:0c:33:98:6f:
                    ac:11:b9:65:c3:7c:7f:40:c5:39:81:c7:24:7c:65:
                    5a:42:47:12:3c:8f:45:3d:9d:8f:24:85:89:08:29:
                    83:46:f8:a1:3c:49:eb:89:0f:27:fa:5a:5e:e5:59:
                    36:21:9b:d5:85:e6:7c:7b:0f:06:a8:b9:40:6b:b5:
                    94:c0:4e:68:e0:84:7b:18:fc:99:bc:bb:2c:79:ac:
                    d0:c3:b4:b1:82:51:86:af:7b:33:55:87:e2:58:ba:
                    5c:1b:47:46:06:0c:29:15:34:b5:dd:02:f1:cf:57:
                    e8:15:42:70:be:df:0d:34:8e:bb:d0:86:69:94:85:
                    60:6e:64:19:79:be:81:ac:cc:f1:f3:2c:22:bc:6f:
                    2e:98:5b:d5:a8:b8:69:2f:47:13:33:82:ec:78:ae:
                    11:c2:bf:ea:c1:ea:0f:fe:21:3b:98:40:ec:57:97:
                    23:e1:ca:fd:10:10:cb:2e:2e:70:98:5b:92:cc:28:
                    f5:65:d3:b2:0f:71:40:33:05:fd:85:a0:8b:b8:ad:
                    71:c4:aa:db:b1:ab:e5:9e:5f:60:ba:20:e0:9e:44:
                    80:96:5d:44:91:83:3b:08:be:46:44:50:04:1c:e1:
                    50:c1:5b:13:08:04:7d:e6:9e:9c:f1:78:74:df:9a:
                    6b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:CC:F4:5E:3A:05:72:00:76:31:7E:5D:07:88:63:88:4C:A3:59:EC
            X509v3 Authority Key Identifier:
                keyid:D4:C1:53:10:1C:ED:B0:5C:54:4B:7C:47:0F:A8:10:3F:F7:28:BE:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4c6d3201-6538-49ed-8149-5a7bd4922202/bf37bdf0310a51a9f65dd0b5316782c6a6d640c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4c6d3201-6538-49ed-8149-5a7bd4922202/7d1cf578607bddf5774ec2de09aa770ef8e6b54f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14a:c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:7e:7c:76:7f:8d:eb:24:5e:43:57:2a:f0:24:af:43:98:3a:
         55:70:25:c4:d3:1c:67:58:23:1f:47:f4:a4:ec:28:55:03:8d:
         42:ed:3a:e8:1b:79:d9:0f:f0:46:a5:10:a0:13:94:f1:7f:d3:
         35:15:a0:2d:c4:e7:e0:c8:6d:4b:7c:74:3e:d1:fa:0f:a9:02:
         79:48:65:89:26:31:9f:ff:bc:de:8b:e5:bd:78:cb:44:09:17:
         53:41:97:55:fb:e2:85:e3:94:4b:5e:48:63:c2:33:7d:51:97:
         b0:4a:f9:f5:a2:d7:eb:3a:00:c5:fa:87:72:d9:09:f3:ec:fb:
         f9:8b:87:1a:f2:5e:4c:58:c3:c5:76:3b:65:20:dc:65:03:97:
         7a:0c:6d:3d:af:9f:06:cd:24:86:bc:43:05:cf:31:c6:f1:a5:
         93:05:12:24:ee:6f:8d:aa:e6:3e:fa:ae:28:db:19:8c:18:04:
         ff:e4:85:c3:d8:2a:78:4d:31:db:7a:2a:17:4b:bb:55:02:f0:
         31:65:2d:7b:64:63:70:91:9d:36:56:f0:52:70:ac:92:a9:b0:
         0e:c2:ff:7e:6e:8d:91:d9:99:0c:09:e2:6c:cb:7d:b6:84:60:
         36:45:81:34:01:c5:69:21:fb:d1:44:7c:9f:5a:ba:1a:3e:56:
         4e:8d:4f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----