Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5118c0ae-3c95-490d-9a25-46d08dc22994/84467682f3131065d8f0d40bfe4d91cc377f6cc6.roa
File:                     84467682f3131065d8f0d40bfe4d91cc377f6cc6.roa (raw, json)
Hash identifier:          5QXqHBhluhs0bXJ/bmClQOygR8+R93wccUle+/FP+MI=
Subject key identifier:   E9:4F:61:56:E2:3B:5D:DE:64:8E:3E:EB:EA:E0:BB:A2:A9:FC:72:97
Certificate issuer:       /CN=ee42e5a432e083cea8550e05b2516cca17761923
Certificate serial:       0101F9
Authority key identifier: A7:7F:03:85:AD:0C:BA:96:76:57:49:DF:DE:03:EA:98:13:3A:17:0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee42e5a432e083cea8550e05b2516cca17761923.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5118c0ae-3c95-490d-9a25-46d08dc22994/84467682f3131065d8f0d40bfe4d91cc377f6cc6.roa
Signing time:             Tue 06 Jun 2023 20:41:57 +0000
ROA not before:           Mon 05 Jun 2023 20:41:57 +0000
ROA not after:            Fri 06 Jun 2025 20:41:57 +0000
asID:                     263241
IP address blocks:        2801:13:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66041 (0x101f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee42e5a432e083cea8550e05b2516cca17761923
        Validity
            Not Before: Jun  5 20:41:57 2023 GMT
            Not After : Jun  6 20:41:57 2025 GMT
        Subject: CN=84467682f3131065d8f0d40bfe4d91cc377f6cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c5:16:ed:58:f0:3e:05:4d:02:9f:1e:bd:a0:
                    82:95:9e:7e:8f:d3:f0:3f:14:df:48:71:eb:81:13:
                    18:e0:59:eb:67:76:59:47:52:f1:50:fa:9d:4e:32:
                    a0:a9:fa:23:82:ab:2b:a9:3a:8e:fb:c9:54:a5:fa:
                    0a:61:e3:86:52:08:c9:c3:18:be:de:5e:4a:25:87:
                    bf:17:48:b9:2c:bb:bc:9f:f4:9a:81:cc:e9:e5:1b:
                    0e:e2:59:f2:79:60:56:2f:e8:71:e9:97:26:50:17:
                    36:9f:0d:c8:9a:5a:c7:29:32:97:bd:53:09:38:d1:
                    5a:2c:44:a0:0f:69:6f:70:19:e2:14:f2:75:c8:01:
                    cb:3c:05:00:f0:84:cc:e1:e4:00:e8:f0:37:c1:91:
                    06:6e:70:f0:f6:16:f7:4b:82:62:d4:9d:c9:eb:9a:
                    ee:5d:f4:56:ee:e1:1b:b9:25:da:c6:69:ea:57:50:
                    51:23:cd:0e:72:c7:9d:6b:80:59:62:b1:74:92:b1:
                    1e:26:3a:d2:bc:f1:ae:cb:17:9e:c6:77:16:e1:75:
                    40:e6:da:bd:e5:6b:7a:64:fb:08:fa:4e:c4:60:56:
                    d5:88:05:5c:c6:ae:f2:db:f3:16:7b:3a:7f:0f:54:
                    84:00:a2:70:8a:5c:20:19:85:71:1e:f3:31:b7:30:
                    ea:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:4F:61:56:E2:3B:5D:DE:64:8E:3E:EB:EA:E0:BB:A2:A9:FC:72:97
            X509v3 Authority Key Identifier:
                keyid:A7:7F:03:85:AD:0C:BA:96:76:57:49:DF:DE:03:EA:98:13:3A:17:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee42e5a432e083cea8550e05b2516cca17761923.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5118c0ae-3c95-490d-9a25-46d08dc22994/84467682f3131065d8f0d40bfe4d91cc377f6cc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5118c0ae-3c95-490d-9a25-46d08dc22994/ee42e5a432e083cea8550e05b2516cca17761923.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:50:47:bf:78:73:2d:08:84:9c:97:bb:99:89:e1:8e:f3:59:
         a6:ab:2f:82:43:7c:5b:ad:b2:56:dd:90:76:b4:2c:9c:77:97:
         44:d1:2c:c4:e4:26:cb:a8:3c:0d:a4:6a:2b:ce:17:af:71:e6:
         63:0c:1a:7d:64:91:ef:be:e2:f0:50:f6:13:bd:0e:df:c0:a7:
         9a:ba:49:6f:00:e4:2d:11:94:06:66:79:68:46:f3:25:e1:8c:
         de:54:c4:a1:78:2d:9f:9f:06:b7:18:81:ce:18:1f:d3:51:fd:
         4b:d1:b5:c2:8a:2f:b4:bd:f8:a6:b7:d3:4f:b3:3b:75:5c:b9:
         d6:b0:eb:17:f2:0d:ec:68:e6:0b:a9:f2:ba:b5:e3:72:37:30:
         0e:7b:f9:98:b0:b6:3b:55:2e:76:ff:1c:fa:63:70:57:cd:5c:
         01:93:bb:f7:8f:8d:6e:4f:10:32:19:63:ae:66:77:73:1f:dc:
         29:11:fe:c6:d1:bf:2a:5d:31:41:c2:55:f4:49:76:5f:eb:12:
         64:a3:ac:26:c6:48:3f:9b:58:e3:03:8b:57:cc:1b:79:ad:54:
         0e:70:e4:22:d0:cc:cb:87:8c:61:eb:01:0e:1c:1c:58:1c:e8:
         37:d6:95:f5:78:d4:84:ed:4b:13:6f:a5:a6:eb:dc:3a:c2:71:
         47:f7:33:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----