Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c86e61812ba61b171e6414936b4148275cff35b.roa
File:                     7c86e61812ba61b171e6414936b4148275cff35b.roa (raw, json)
Hash identifier:          ELrtFpj6HOqCITyh59f5L3T/YyRlQJxtMQRorzDdFDQ=
Subject key identifier:   AA:E9:8C:77:78:F1:92:FB:8A:74:E8:F1:BC:AF:4E:D1:1A:AB:7E:C5
Certificate issuer:       /CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
Certificate serial:       2267CD
Authority key identifier: 7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c86e61812ba61b171e6414936b4148275cff35b.roa
Signing time:             Thu 27 Apr 2023 15:29:36 +0000
ROA not before:           Wed 26 Apr 2023 15:29:36 +0000
ROA not after:            Sun 27 Apr 2025 15:29:36 +0000
asID:                     394353
IP address blocks:        2801:1b8:10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2254797 (0x2267cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Validity
            Not Before: Apr 26 15:29:36 2023 GMT
            Not After : Apr 27 15:29:36 2025 GMT
        Subject: CN=7c86e61812ba61b171e6414936b4148275cff35b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:89:9d:d7:12:95:32:c1:f5:11:2e:ce:25:88:
                    34:a5:b9:02:5d:95:8e:98:6a:e6:f3:7a:91:d7:73:
                    e4:f5:45:49:b0:ed:bf:b8:87:f1:09:2d:ca:fc:c7:
                    42:af:8d:d7:9d:c3:e6:c5:1a:6c:b5:57:37:85:46:
                    10:97:2c:2c:1e:01:25:12:7f:9f:34:d7:46:ef:dd:
                    d0:7f:2c:6a:01:09:36:9c:c0:39:36:f8:1c:47:22:
                    e0:96:fe:a2:22:a7:a9:42:26:52:4b:0d:aa:d3:78:
                    fd:a0:61:ae:88:78:97:c4:00:76:ac:dc:1d:a5:69:
                    fb:77:dd:74:4d:fd:d5:10:48:6f:ce:7c:27:01:dd:
                    6c:c0:6a:cf:d8:50:3e:12:c5:6c:ba:9c:14:85:c8:
                    eb:c9:80:e6:9f:d7:bf:33:ad:96:ed:78:f7:49:ed:
                    f2:c1:22:90:ca:c1:55:c4:67:34:d1:49:98:fd:39:
                    5c:04:c7:1b:93:4e:fa:0e:1b:d7:da:ca:fc:47:30:
                    e8:fe:03:07:e5:69:11:5c:a1:88:b6:f9:a4:7a:4a:
                    1c:1c:c9:f1:bf:7f:43:98:33:fa:a8:75:8c:9d:10:
                    4f:cc:66:e9:0e:13:9d:97:ff:a6:4b:33:03:2d:62:
                    15:0d:a4:bb:29:64:fe:76:78:92:0a:2f:59:e8:51:
                    9d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E9:8C:77:78:F1:92:FB:8A:74:E8:F1:BC:AF:4E:D1:1A:AB:7E:C5
            X509v3 Authority Key Identifier:
                keyid:7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c86e61812ba61b171e6414936b4148275cff35b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         1f:ab:bc:25:e9:6d:fa:68:d5:75:e9:28:1b:ef:5c:43:6b:86:
         bb:fe:82:df:5c:c3:f4:aa:d8:1e:0b:9c:43:51:82:fa:d1:f0:
         45:64:b0:e0:6c:47:d7:ca:98:28:e0:9c:59:0e:e1:24:a4:c8:
         17:0c:f1:bc:94:57:ab:6b:92:de:d8:26:ff:05:ae:b7:34:eb:
         de:d2:4e:69:02:62:1f:dd:f0:53:cb:28:eb:d4:af:53:ca:61:
         04:d4:bb:9a:a8:b8:4b:04:b9:30:89:45:7c:95:8f:59:e0:51:
         4f:3b:67:d3:4f:0b:19:5e:fa:37:f1:95:01:19:4e:72:e5:25:
         ac:9d:13:1f:d3:18:99:c7:e9:53:13:f9:4e:b0:a9:5f:02:66:
         5e:af:3a:2b:a6:f8:27:71:7d:a0:42:0b:15:23:65:48:2f:95:
         67:ba:92:fb:0e:b8:b9:43:e5:a9:f7:be:53:7e:00:67:bd:8a:
         ad:a7:d8:24:ce:79:bb:24:cb:03:4e:06:0a:e5:61:48:1d:33:
         53:f8:2f:d6:98:ba:04:41:6b:c1:2a:e0:23:07:b2:9a:7d:c0:
         c9:6f:78:8f:ed:e5:3c:5c:3e:1f:d9:76:ac:f3:a6:36:b1:d4:
         08:6e:7b:28:e6:46:ff:a9:4d:0a:fc:a8:22:af:36:f3:9c:c4:
         d4:4c:7a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----