Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/dca30c616c2fa5d9bfde9d5a0816c005934f62ed.roa
File:                     dca30c616c2fa5d9bfde9d5a0816c005934f62ed.roa (raw, json)
Hash identifier:          0PQg0+DkrjMcsy5S9Nel0PX+Qlj9W57YlD7KfnaDpP8=
Subject key identifier:   9A:4A:22:96:DC:28:77:3A:9B:86:FF:14:E0:B2:25:A2:30:29:AA:96
Certificate issuer:       /CN=9de7850c99ebea3e5574cd6cb0998b06089c80ae
Certificate serial:       11B25B
Authority key identifier: CB:94:67:DC:64:53:FD:B1:43:31:D5:79:91:D9:F7:B3:ED:81:93:C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9de7850c99ebea3e5574cd6cb0998b06089c80ae.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/dca30c616c2fa5d9bfde9d5a0816c005934f62ed.roa
Signing time:             Wed 10 Apr 2024 08:30:01 +0000
ROA not before:           Wed 10 Apr 2024 08:30:01 +0000
ROA not after:            Fri 10 Apr 2026 08:30:01 +0000
asID:                     272115
IP address blocks:        2801:171:8::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159771 (0x11b25b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de7850c99ebea3e5574cd6cb0998b06089c80ae
        Validity
            Not Before: Apr 10 08:30:01 2024 GMT
            Not After : Apr 10 08:30:01 2026 GMT
        Subject: CN=dca30c616c2fa5d9bfde9d5a0816c005934f62ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:69:be:69:68:87:9d:a9:c9:a0:de:80:bc:
                    99:13:b1:97:a6:87:9e:76:8b:23:d3:0a:47:a8:bb:
                    e7:e5:3c:73:37:87:02:77:e9:34:c4:35:0f:6d:1f:
                    c5:d2:5b:c0:92:2d:54:22:31:a6:d9:a2:10:5b:94:
                    2c:5f:ec:b2:47:b5:c0:2f:a4:5d:b6:e3:15:ae:c9:
                    69:5e:32:d3:13:0c:72:79:3c:54:25:24:8b:c2:b9:
                    b3:87:ae:21:12:6b:4f:52:1d:39:af:5d:66:b0:a8:
                    ee:b2:d1:87:8b:65:2d:16:ee:4b:fc:56:6e:82:a7:
                    a0:2d:5a:49:f1:72:48:d7:2a:fd:c1:28:5f:b1:55:
                    ab:a3:b0:aa:65:b5:b8:ee:93:8e:04:8d:ff:99:fe:
                    12:df:1b:0b:12:ae:7b:aa:69:cc:a8:ea:31:4a:d8:
                    0d:bb:36:12:f2:aa:93:2a:20:c3:7d:f6:b5:48:34:
                    c8:ee:47:db:4c:15:bf:8a:26:59:e5:c9:83:40:54:
                    97:52:99:be:64:71:ef:20:79:75:ab:80:9b:6b:c7:
                    58:0c:01:3b:33:70:8e:a2:1a:0e:bb:6c:c0:74:d4:
                    44:6d:73:16:46:c4:ae:8c:a9:6b:7c:97:a4:f7:b0:
                    30:ff:23:df:1d:e9:3f:ac:55:fc:52:18:f2:45:37:
                    e4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:4A:22:96:DC:28:77:3A:9B:86:FF:14:E0:B2:25:A2:30:29:AA:96
            X509v3 Authority Key Identifier:
                keyid:CB:94:67:DC:64:53:FD:B1:43:31:D5:79:91:D9:F7:B3:ED:81:93:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9de7850c99ebea3e5574cd6cb0998b06089c80ae.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/dca30c616c2fa5d9bfde9d5a0816c005934f62ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4dba84dd-ae5d-4baa-9b17-679a55f42659/9de7850c99ebea3e5574cd6cb0998b06089c80ae.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:171:8::/45

    Signature Algorithm: sha256WithRSAEncryption
         97:b9:b6:5a:01:75:22:2b:67:94:5d:b4:95:5a:c8:7b:56:f7:
         57:30:0e:68:e5:12:25:16:32:a7:db:70:37:fe:76:c8:c6:dc:
         9a:d7:06:8a:8c:de:6a:17:23:38:a2:23:47:83:56:21:ea:a2:
         cd:59:37:ab:e2:17:d7:c9:cc:74:cb:7e:a4:e8:55:c0:70:48:
         08:bb:9b:8e:f8:cb:0d:ed:1f:b5:64:f1:df:b6:e6:05:4b:48:
         8b:64:eb:20:4a:e5:b7:6a:29:82:b1:a9:1a:9a:07:d9:95:ba:
         95:b9:da:c4:0c:46:be:f4:c5:3b:0c:3c:06:1e:69:51:42:7a:
         10:47:4b:b6:d3:1b:0e:6d:59:c3:f3:49:7d:21:2b:b0:29:96:
         f6:cb:44:b9:de:a7:5b:1f:c3:c5:58:a9:37:fb:61:b5:cb:07:
         dd:de:f6:f2:63:79:3f:a0:74:cf:59:15:44:8d:64:f5:a6:1d:
         d2:2e:e4:92:74:72:9b:34:fe:c3:db:91:f1:fb:b3:e4:85:f6:
         69:f4:54:3f:11:e5:eb:36:27:43:e9:e3:d2:ba:d3:10:a0:d3:
         b5:f5:12:6e:81:d0:0c:e4:da:df:ee:59:c4:c9:c4:6f:e1:a3:
         8c:4d:5a:67:95:98:02:63:1a:4a:92:4b:69:d2:25:68:21:09:
         a2:0a:69:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----