Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/b1c2f3686a2f161b9f93f7ba17d736ab0d2a11b9.roa
File:                     b1c2f3686a2f161b9f93f7ba17d736ab0d2a11b9.roa (raw, json)
Hash identifier:          BCS7bkjPwxaWI0uy6KIIg1cZ7GkIEwvvTean3QlvsOA=
Subject key identifier:   14:4F:B5:DE:0B:F7:34:99:1C:5D:52:C8:EF:5A:A3:B0:AA:FF:E9:29
Certificate issuer:       /CN=6ab2d820979a406ed3e6351e0a821ee6b903737f
Certificate serial:       0BD3E4
Authority key identifier: 52:DD:7A:B5:DB:DD:AE:71:0C:36:54:38:55:ED:F9:6F:EF:26:47:C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ab2d820979a406ed3e6351e0a821ee6b903737f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/b1c2f3686a2f161b9f93f7ba17d736ab0d2a11b9.roa
Signing time:             Thu 11 May 2023 19:19:48 +0000
ROA not before:           Wed 10 May 2023 19:19:48 +0000
ROA not after:            Sun 11 May 2025 19:19:48 +0000
asID:                     265605
IP address blocks:        2806:361::/32 maxlen: 32
                          2806:361::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 775140 (0xbd3e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab2d820979a406ed3e6351e0a821ee6b903737f
        Validity
            Not Before: May 10 19:19:48 2023 GMT
            Not After : May 11 19:19:48 2025 GMT
        Subject: CN=b1c2f3686a2f161b9f93f7ba17d736ab0d2a11b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:86:cb:2a:30:6f:32:c4:5e:1c:35:16:b0:94:
                    00:b8:89:d4:cb:c6:9c:26:f6:e3:d7:19:8c:9d:c5:
                    6d:79:47:da:8b:42:d5:6e:28:90:56:16:fd:c2:6d:
                    68:c4:8e:ae:fa:22:7a:8f:f5:0d:7a:d5:ad:55:76:
                    38:2a:d2:2c:aa:8d:e8:0c:1c:d9:2f:4d:0f:07:1f:
                    20:2c:ed:bb:4e:14:9d:8d:7e:26:29:3b:cc:e7:14:
                    cd:41:46:04:99:97:8a:28:25:09:8f:ff:90:9e:c2:
                    fd:fe:59:4b:6a:e9:a7:6a:f1:52:42:d0:82:50:3a:
                    2d:6c:11:33:b0:1f:8c:41:1b:fb:11:15:c5:2d:bf:
                    5c:3a:a9:a4:7b:0c:08:87:b9:31:69:c6:77:f9:67:
                    a2:ae:40:51:a0:6a:11:3f:5c:6e:7b:03:97:b5:83:
                    a0:ab:f5:47:e1:eb:7c:8c:b6:d1:0c:62:db:b7:c8:
                    10:e1:19:92:77:65:ae:21:2c:ce:90:33:37:0c:de:
                    8a:fc:ae:ac:90:86:a5:78:f3:cd:cf:1f:70:ec:23:
                    7c:53:d0:fe:04:23:75:fc:ad:44:f9:54:30:1e:8a:
                    bc:8e:6f:e9:9a:e4:e1:59:35:ba:0f:7e:d0:8b:00:
                    99:c4:64:ff:91:9b:68:e3:d9:35:bf:18:f4:a2:98:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:4F:B5:DE:0B:F7:34:99:1C:5D:52:C8:EF:5A:A3:B0:AA:FF:E9:29
            X509v3 Authority Key Identifier:
                keyid:52:DD:7A:B5:DB:DD:AE:71:0C:36:54:38:55:ED:F9:6F:EF:26:47:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ab2d820979a406ed3e6351e0a821ee6b903737f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/b1c2f3686a2f161b9f93f7ba17d736ab0d2a11b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/54f51006-9dc5-4aad-8782-c1d52edd423e/6ab2d820979a406ed3e6351e0a821ee6b903737f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:361::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:2b:81:48:8b:b5:6d:ba:48:4c:74:31:16:6b:1d:4d:06:5c:
         96:6f:30:d8:76:f0:9c:12:c8:42:fc:b0:06:93:f0:04:0e:10:
         e8:b2:f8:4e:ec:09:83:18:16:15:46:5b:99:cd:8d:e9:d0:0c:
         e4:29:a1:7f:49:b9:02:b3:9e:78:6d:79:b2:ca:44:5f:a4:22:
         21:28:ef:16:0d:0d:e9:9f:4b:3a:bf:e3:36:5e:57:81:02:a9:
         dd:8b:54:0e:8f:3e:e0:94:4d:97:7c:f6:fc:36:a9:37:1e:4f:
         b3:7b:90:6d:e0:7e:bb:6b:25:5a:59:33:70:5c:db:b1:3f:54:
         08:ca:07:13:fd:3f:26:3a:fe:e0:08:ef:a3:23:bd:28:98:70:
         e2:8c:c1:ff:31:92:b0:f4:b3:38:c3:7d:56:57:9b:77:cf:81:
         53:91:d8:75:01:6f:fe:1e:14:42:ac:80:0a:5d:83:d7:67:1d:
         b7:d6:57:a5:63:ef:3e:74:de:a0:ce:e9:fd:ae:70:bf:d2:b9:
         e0:ba:1c:19:4b:8e:a4:59:e9:15:a5:57:66:a8:38:3b:f2:f2:
         c7:a9:fd:20:85:27:e4:c5:16:34:51:d2:c2:65:b2:13:47:78:
         52:40:82:62:b1:d6:53:b3:c1:80:0b:99:5b:13:ae:71:b5:8e:
         e6:b9:fe:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----