Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/338881877e9f45727466f29e958a454c392fd059.roa
File:                     338881877e9f45727466f29e958a454c392fd059.roa (raw, json)
Hash identifier:          Akm1KtRK1YINzs2kmZe9VVMXZKPOZJzDnVNpUTEsbMw=
Subject key identifier:   6A:C3:5B:04:04:34:70:DC:19:86:2D:4D:03:70:D5:25:3C:6B:84:09
Certificate issuer:       /CN=9de7850c99ebea3e5574cd6cb0998b06089c80ae
Certificate serial:       11AE9B
Authority key identifier: CB:94:67:DC:64:53:FD:B1:43:31:D5:79:91:D9:F7:B3:ED:81:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9de7850c99ebea3e5574cd6cb0998b06089c80ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/338881877e9f45727466f29e958a454c392fd059.roa
Signing time:             Wed 10 Apr 2024 08:30:00 +0000
ROA not before:           Wed 10 Apr 2024 08:30:00 +0000
ROA not after:            Fri 10 Apr 2026 08:30:00 +0000
asID:                     272115
IP address blocks:        2801:171::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1158811 (0x11ae9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de7850c99ebea3e5574cd6cb0998b06089c80ae
        Validity
            Not Before: Apr 10 08:30:00 2024 GMT
            Not After : Apr 10 08:30:00 2026 GMT
        Subject: CN=338881877e9f45727466f29e958a454c392fd059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:fb:41:20:50:c5:ad:b5:8f:81:24:1f:b2:
                    21:0e:05:bd:b7:4f:e1:ab:e9:11:7e:d4:bf:5a:b4:
                    3b:10:8d:50:4b:6c:81:3e:42:c9:01:e0:b3:21:46:
                    11:ca:21:b1:0e:83:30:9b:98:5c:78:75:cd:e7:8b:
                    e5:40:11:59:39:8f:73:13:14:81:94:05:38:a2:00:
                    67:db:f2:d9:a3:14:69:76:1f:b2:ec:87:54:49:c2:
                    97:79:5c:30:d9:58:36:19:60:4b:d4:44:fc:c1:5a:
                    97:25:a7:21:80:92:ac:c7:9e:68:1e:04:65:88:2e:
                    65:36:e1:ff:84:d7:29:ed:32:6c:4d:57:30:04:20:
                    e0:32:1b:c4:32:68:bc:7c:e3:5e:f2:12:b4:f7:1d:
                    9a:6f:36:4d:6b:80:47:05:f9:96:12:ed:2e:74:70:
                    ff:02:97:68:55:91:5a:ce:af:ee:07:d5:3f:15:39:
                    d6:89:51:18:de:0e:ef:de:b4:5e:95:f1:e0:eb:fc:
                    53:ff:8a:54:a0:c5:f9:5f:79:b2:e7:43:0f:23:bf:
                    bd:ab:6d:ec:d0:a8:08:b8:62:53:e2:68:37:2c:44:
                    25:b8:8a:83:a4:1d:3c:09:3c:e1:0a:8e:97:03:ca:
                    0f:5a:53:71:0f:da:7a:67:f0:c7:9d:87:37:56:05:
                    8f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:C3:5B:04:04:34:70:DC:19:86:2D:4D:03:70:D5:25:3C:6B:84:09
            X509v3 Authority Key Identifier:
                keyid:CB:94:67:DC:64:53:FD:B1:43:31:D5:79:91:D9:F7:B3:ED:81:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9de7850c99ebea3e5574cd6cb0998b06089c80ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/338881877e9f45727466f29e958a454c392fd059.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/9de7850c99ebea3e5574cd6cb0998b06089c80ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:171::/45

    Signature Algorithm: sha256WithRSAEncryption
         68:c0:87:de:94:0e:b5:30:a1:ec:c5:82:47:46:ef:fe:72:44:
         6b:92:a1:65:9b:eb:b0:e2:08:d9:9e:df:be:b3:60:e2:7d:7d:
         a1:13:99:ab:33:44:ce:3e:1b:d1:5f:56:7f:e8:7e:02:cc:28:
         a9:7b:08:c0:4e:77:dd:2d:32:19:7e:c2:41:24:ec:f2:73:0d:
         fd:a0:27:94:94:a1:76:ff:45:8b:4a:14:7d:ac:63:96:ce:f8:
         f0:76:ae:2a:9e:b9:c9:8f:fb:4a:3c:c0:08:3d:2a:93:74:21:
         95:ee:42:6c:44:94:f8:40:d6:61:ef:af:50:2c:23:5f:a8:c5:
         d1:65:ac:18:b6:bd:2e:12:8c:ca:83:21:2d:5f:aa:0f:4b:f3:
         01:40:4f:47:e7:9b:ae:b3:b2:1d:f0:ef:d6:4f:f1:50:e9:79:
         53:82:e9:31:42:e5:82:f1:0a:bb:18:1c:84:7c:47:cc:2f:ce:
         80:9a:bc:1d:25:ec:05:b8:f7:10:cb:ed:1d:77:8d:27:a7:15:
         28:5b:af:a4:0c:cc:57:d9:53:14:f1:5b:e0:50:bb:b5:f8:e1:
         16:3e:98:3a:62:66:36:bc:40:fe:4d:cf:e8:c8:29:72:05:7d:
         2b:45:88:ab:37:56:e5:b2:20:0a:b7:1f:51:17:5f:c8:b7:8f:
         1e:b6:69:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----