Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ca563d57a57a4180818c68e09765cf72e803db19.roa
File:                     ca563d57a57a4180818c68e09765cf72e803db19.roa (raw, json)
Hash identifier:          K6hG+ADjrRJxOwiT7OqKGLj/UyIDVBOK7iB6GS8CfAA=
Subject key identifier:   C6:BF:2B:D7:41:59:97:DC:87:CC:49:98:96:B2:A1:34:8E:9C:26:F5
Certificate issuer:       /CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
Certificate serial:       144CA9
Authority key identifier: 76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ca563d57a57a4180818c68e09765cf72e803db19.roa
Signing time:             Thu 01 Feb 2024 00:05:31 +0000
ROA not before:           Thu 01 Feb 2024 00:05:31 +0000
ROA not after:            Sun 01 Feb 2026 00:05:31 +0000
asID:                     22927
IP address blocks:        2800:381:6504::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1330345 (0x144ca9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Validity
            Not Before: Feb  1 00:05:31 2024 GMT
            Not After : Feb  1 00:05:31 2026 GMT
        Subject: CN=ca563d57a57a4180818c68e09765cf72e803db19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e5:2f:cc:29:32:69:62:f4:52:40:b9:2f:33:
                    3e:4d:16:c9:9e:d8:d3:17:a3:2a:07:0e:56:8a:85:
                    39:4a:f7:53:f2:6a:a8:de:e9:a2:7d:ef:79:2b:9f:
                    43:78:bb:88:29:3e:73:86:29:1b:0c:2f:d0:58:57:
                    f8:ff:b1:56:6f:a2:7d:c3:8a:15:91:5e:ba:e0:88:
                    02:4c:cf:b5:3f:6c:89:57:9f:13:30:9f:91:6d:4a:
                    f9:b4:06:ce:23:40:ef:84:a5:6a:2a:6d:73:5f:e5:
                    f3:49:5d:91:58:8d:fb:f1:3f:72:64:48:c5:b1:bc:
                    39:2a:a2:4e:69:bc:c8:b6:ce:ad:80:1f:f4:f5:a1:
                    58:1c:92:d3:7e:23:26:c3:65:ab:9d:4a:f8:85:6c:
                    ca:56:27:00:9a:98:3a:73:64:49:98:bc:01:64:51:
                    8f:6c:42:86:9b:51:7c:a8:91:f9:19:f2:94:37:18:
                    96:c0:65:19:76:26:7d:c0:20:26:05:ff:ec:b5:7e:
                    ae:a3:2b:c4:59:f1:72:a0:06:45:d3:11:1c:41:df:
                    3f:e6:65:82:1c:10:23:67:59:80:0a:a8:fa:1e:4a:
                    4e:76:b4:9a:87:0e:50:54:6a:a3:7c:08:38:53:ea:
                    c9:47:55:13:49:f4:f1:95:18:15:1f:b8:1b:92:7e:
                    a3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BF:2B:D7:41:59:97:DC:87:CC:49:98:96:B2:A1:34:8E:9C:26:F5
            X509v3 Authority Key Identifier:
                keyid:76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/ca563d57a57a4180818c68e09765cf72e803db19.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:381:6504::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:10:b7:75:9b:81:3e:fe:17:b8:14:ce:82:52:5e:04:f3:4b:
         b5:0c:9f:f7:50:3c:15:b3:54:08:89:38:c9:c7:20:24:65:82:
         d2:b0:12:5b:cf:3d:56:82:12:c0:0e:78:a3:61:95:32:17:1d:
         32:c5:3a:ce:01:c1:e0:b3:d2:9e:f6:5e:38:47:95:aa:59:da:
         bb:70:e4:1f:a6:b4:65:b9:84:ec:ee:ed:f5:ea:da:de:61:19:
         d4:74:69:8c:2c:54:ee:a5:9c:39:ea:9b:a7:9d:1c:ba:ea:8e:
         37:de:fc:c7:9b:83:cd:05:d5:b9:97:50:b4:58:e3:34:34:38:
         55:28:f4:2f:26:ad:c3:c2:db:b7:3c:46:df:0d:aa:04:b0:29:
         6e:ee:67:fd:c8:0a:d3:ed:b2:d4:8d:1d:63:a9:04:2e:8b:b8:
         90:5e:fe:49:81:1e:89:26:e8:a1:14:15:d4:33:88:4f:2f:d3:
         8d:fc:4b:8a:23:28:43:69:5d:23:28:2c:f7:a9:4c:41:ad:39:
         60:eb:5a:82:cc:6f:3f:24:59:a7:97:af:20:8f:6f:e6:73:0d:
         ad:70:92:66:42:8b:eb:de:d7:9d:b2:3b:1f:a2:15:c8:cb:b5:
         e2:3d:a9:dc:9f:89:04:d0:94:ff:6b:3e:2f:e0:f8:df:3b:e7:
         42:1f:40:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----