Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5c4b0cbe-d923-4a1b-8166-eb9b84398ccd/19fe94e745d4c52280536900581a1cc3c0f0f939.roa
File:                     19fe94e745d4c52280536900581a1cc3c0f0f939.roa (raw, json)
Hash identifier:          6bIITATp48dyuhhrj56wYnMURbTX30d1R2G6WrSZ2uw=
Subject key identifier:   B3:2F:5E:78:BB:FB:24:16:93:30:FA:19:8A:89:A4:84:61:F4:2B:E0
Certificate issuer:       /CN=a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067
Certificate serial:       119A06
Authority key identifier: C6:B0:16:87:4F:9F:72:2B:5D:95:07:39:75:8C:7A:D7:38:13:C6:5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5c4b0cbe-d923-4a1b-8166-eb9b84398ccd/19fe94e745d4c52280536900581a1cc3c0f0f939.roa
Signing time:             Tue 28 Nov 2023 07:30:01 +0000
ROA not before:           Tue 28 Nov 2023 07:30:01 +0000
ROA not after:            Thu 27 Nov 2025 07:30:01 +0000
asID:                     19429
IP address blocks:        2801:121::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153542 (0x119a06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067
        Validity
            Not Before: Nov 28 07:30:01 2023 GMT
            Not After : Nov 27 07:30:01 2025 GMT
        Subject: CN=19fe94e745d4c52280536900581a1cc3c0f0f939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:c7:89:0a:fe:ee:a9:51:46:7b:5c:a3:cc:
                    0e:cc:a3:44:c5:45:d1:c0:9b:49:c2:a7:41:d9:c4:
                    33:fd:b9:01:9a:57:f5:fd:1a:eb:45:8b:1f:5d:b5:
                    35:e1:64:6a:4f:90:6d:ed:96:ef:52:e7:78:f6:37:
                    51:10:4b:0f:20:38:af:46:3c:1a:a8:ff:1e:2b:f4:
                    ae:fd:6c:01:b5:76:e0:c4:7f:ee:aa:63:7b:f0:46:
                    2f:6c:29:72:bb:67:80:4c:c1:3b:b1:c3:4d:80:ce:
                    62:40:ee:98:d8:a2:97:9a:2d:03:77:8a:33:33:ec:
                    0c:a1:54:46:9a:87:a2:d8:aa:2f:fb:15:25:3e:c9:
                    f4:f8:06:ad:c7:29:99:99:06:e9:56:88:31:a6:0a:
                    b5:0f:72:a4:b3:5b:b2:df:33:92:53:34:31:8b:69:
                    d4:04:76:cf:12:c1:9b:c1:46:77:83:11:34:fd:73:
                    d5:e5:40:32:c1:31:f4:56:c8:fc:95:d7:59:c9:ca:
                    01:94:a2:a9:25:70:aa:05:30:a4:09:8e:5e:44:34:
                    4d:e3:4d:85:4b:dc:f1:d8:6e:12:48:32:6e:de:d1:
                    b6:50:7f:03:b2:21:91:00:a7:00:67:85:6c:ea:06:
                    ac:d8:05:f7:03:fa:8f:01:df:44:cc:6f:e2:73:02:
                    18:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2F:5E:78:BB:FB:24:16:93:30:FA:19:8A:89:A4:84:61:F4:2B:E0
            X509v3 Authority Key Identifier:
                keyid:C6:B0:16:87:4F:9F:72:2B:5D:95:07:39:75:8C:7A:D7:38:13:C6:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5c4b0cbe-d923-4a1b-8166-eb9b84398ccd/19fe94e745d4c52280536900581a1cc3c0f0f939.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5c4b0cbe-d923-4a1b-8166-eb9b84398ccd/a4cd8b3b1ed64faa792f1a7c857c169d8e5c4067.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:121::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:4a:ad:e9:8b:36:d6:47:35:ff:8b:47:e9:7a:f2:dd:dd:4d:
         d1:1f:49:5b:b5:54:2b:8e:cd:07:f6:35:4e:36:90:d6:79:20:
         b7:9d:6c:28:b8:d0:bc:7e:e7:64:a0:6e:c7:88:8a:17:29:b7:
         05:f7:76:1c:11:55:67:f5:49:17:3d:11:d4:11:e6:0b:b6:34:
         b6:2c:6c:0f:a1:41:8e:00:2a:8c:96:91:98:f0:17:36:e6:38:
         6f:b2:1c:27:23:a2:e4:94:f9:dc:d8:12:53:b0:1a:a4:fa:f4:
         28:fe:c1:34:6f:7c:e7:95:4c:b0:cb:4e:bb:f4:18:34:a4:63:
         03:b7:87:10:1a:65:e7:5c:ef:61:f5:cc:67:ff:9b:05:e6:06:
         c9:f2:f9:23:44:b8:4d:6d:2c:c3:0c:07:62:7e:1d:e4:f7:1e:
         a2:2c:aa:b5:55:28:3e:7f:df:ea:6d:57:25:25:10:38:5d:59:
         e1:f1:c9:e9:60:9d:e2:dd:7c:1e:61:59:91:53:82:ec:4b:8e:
         fc:a0:d5:b7:a3:a5:8c:3e:1c:ef:d7:f7:3d:ed:71:b9:14:74:
         bf:55:12:61:48:48:9d:78:eb:e6:bf:1e:bc:45:6a:ab:8e:45:
         84:a5:e2:89:e6:b2:20:fc:6a:19:36:62:ce:ce:28:ca:f3:c6:
         69:4f:6e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----