Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/5ce17407-b77a-4401-b851-8b99296c063d/7a4b4cca41869ae7563ca3e3e93f22e66279f882.roa
File:                     7a4b4cca41869ae7563ca3e3e93f22e66279f882.roa (raw, json)
Hash identifier:          24rOU5WU14+Hv+kUnjT6Hsp8/axZmPlyWkpl63t2t0c=
Subject key identifier:   B6:7D:A0:FE:DB:CC:72:BA:17:AE:9E:B2:0A:54:AC:09:DE:24:F0:5B
Certificate issuer:       /CN=eec3d97f2e06217cc93ff6f74a07df5b958dd56d
Certificate serial:       09684B
Authority key identifier: 63:0A:F9:F9:39:BC:61:02:4C:AF:AA:9C:B7:58:EB:4D:B8:2D:D2:02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec3d97f2e06217cc93ff6f74a07df5b958dd56d.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/5ce17407-b77a-4401-b851-8b99296c063d/7a4b4cca41869ae7563ca3e3e93f22e66279f882.roa
Signing time:             Tue 23 Jan 2024 03:47:11 +0000
ROA not before:           Tue 23 Jan 2024 03:47:11 +0000
ROA not after:            Fri 23 Jan 2026 03:47:11 +0000
asID:                     270180
IP address blocks:        2806:3f2::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 616523 (0x9684b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eec3d97f2e06217cc93ff6f74a07df5b958dd56d
        Validity
            Not Before: Jan 23 03:47:11 2024 GMT
            Not After : Jan 23 03:47:11 2026 GMT
        Subject: CN=7a4b4cca41869ae7563ca3e3e93f22e66279f882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:21:d5:d4:c9:66:8c:dc:d6:d1:7b:22:28:4d:
                    64:79:66:eb:09:27:aa:51:86:f1:a4:e8:d6:41:b5:
                    6f:97:4a:9c:6d:05:6d:47:42:fd:6a:41:28:d2:89:
                    14:b5:b3:6e:83:54:32:e1:05:be:c5:55:d2:27:46:
                    57:5f:c0:63:3f:6d:69:79:59:82:c3:2c:4e:78:62:
                    6c:f5:e7:71:65:da:16:ae:b1:72:f6:70:e2:54:d5:
                    92:84:bd:65:c5:ab:ea:6f:b2:80:bb:0b:db:62:63:
                    04:e4:a7:d6:02:63:8d:d1:26:90:68:cf:a2:e5:70:
                    52:56:0c:1c:74:2e:e6:69:94:aa:28:09:43:c6:69:
                    c5:11:c4:ce:5a:95:4f:a6:6d:de:e3:0e:0f:12:78:
                    3a:2a:68:44:7e:c8:ff:16:0d:4f:a0:65:ce:1e:8f:
                    f6:15:b2:6f:2f:28:eb:2b:bc:38:0f:3a:60:f1:55:
                    de:0d:94:c1:8d:10:81:0a:48:0e:0b:98:95:37:46:
                    9c:63:4d:e7:9c:c3:47:48:0c:96:9b:b1:1e:27:fc:
                    fd:4d:c9:ea:e2:81:d1:24:81:16:84:82:c7:2c:b2:
                    5f:aa:0c:56:69:2f:cd:83:fd:2d:f6:e2:8d:c5:49:
                    fa:be:3d:5f:50:5e:07:8f:c2:8e:d3:30:f4:56:47:
                    90:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7D:A0:FE:DB:CC:72:BA:17:AE:9E:B2:0A:54:AC:09:DE:24:F0:5B
            X509v3 Authority Key Identifier:
                keyid:63:0A:F9:F9:39:BC:61:02:4C:AF:AA:9C:B7:58:EB:4D:B8:2D:D2:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eec3d97f2e06217cc93ff6f74a07df5b958dd56d.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/5ce17407-b77a-4401-b851-8b99296c063d/7a4b4cca41869ae7563ca3e3e93f22e66279f882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/5ce17407-b77a-4401-b851-8b99296c063d/eec3d97f2e06217cc93ff6f74a07df5b958dd56d.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3f2::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:2b:2e:5e:ff:4d:25:f9:a5:5b:1a:1a:df:82:a8:81:cc:cf:
         c6:97:05:3e:ce:b8:16:8e:84:2d:02:99:5e:9a:85:ba:1b:2b:
         36:85:9a:f4:f1:88:2b:ad:90:1b:7d:92:77:1b:a4:9e:a2:5e:
         4b:e0:98:a3:9f:21:db:f0:e3:e9:ed:eb:58:a8:91:7e:07:52:
         af:93:4c:1a:c1:5c:54:f1:dd:2f:c2:41:3e:8c:54:32:71:df:
         04:df:8b:5a:b7:12:5a:9c:95:1a:83:7e:55:93:a1:d3:a0:1e:
         87:4f:c5:01:a9:93:37:58:06:a9:b6:fc:01:2f:1c:68:a0:fe:
         ac:16:72:63:47:45:88:96:37:9c:83:a0:09:aa:c0:ff:b0:e4:
         7d:cb:fd:4c:2e:08:37:44:a6:59:8d:2a:ac:0b:42:5e:54:0b:
         eb:39:51:da:86:64:b9:24:a2:0e:f3:44:af:9d:2e:40:61:cd:
         a6:df:c8:71:1f:9b:43:a3:33:62:4c:42:59:6e:fd:8e:ee:6e:
         f1:6e:0b:7d:25:40:c5:9f:a2:17:f0:c8:31:90:69:2b:da:d6:
         e2:df:e5:fc:c0:3d:67:40:e5:a5:7f:27:29:70:5a:2a:39:23:
         a0:44:6f:91:8c:01:dc:05:ac:07:e2:30:e1:26:d8:25:0e:46:
         06:ff:ed:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----