Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/8ef667b20a7c3f09d4090f65a176bcbd8a5c7f5f.roa
File:                     8ef667b20a7c3f09d4090f65a176bcbd8a5c7f5f.roa (raw, json)
Hash identifier:          nD/Bdd+eju71SxcpUPwFpAGtQj3Gn5HBB+rAhURmyTk=
Subject key identifier:   F6:E3:AC:1C:15:DB:5A:49:FD:88:5B:20:D2:2B:5A:29:A4:07:58:E9
Certificate issuer:       /CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
Certificate serial:       2A5A2B
Authority key identifier: E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/8ef667b20a7c3f09d4090f65a176bcbd8a5c7f5f.roa
Signing time:             Thu 18 Jan 2024 14:39:45 +0000
ROA not before:           Thu 18 Jan 2024 14:39:31 +0000
ROA not after:            Thu 18 Jan 2029 14:39:31 +0000
asID:                     394353
IP address blocks:        2801:1b8:10::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2775595 (0x2a5a2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c0f314c1d3ae8c8fbd69f9c3163397243f8766e
        Validity
            Not Before: Jan 18 14:39:31 2024 GMT
            Not After : Jan 18 14:39:31 2029 GMT
        Subject: CN=8ef667b20a7c3f09d4090f65a176bcbd8a5c7f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:6a:c6:c5:f2:62:5d:9d:94:04:4b:cc:0c:
                    3d:74:5a:7c:38:73:67:50:c4:ce:68:c2:2c:d6:dc:
                    44:8f:79:de:33:0d:bb:a8:35:7f:cf:e6:7a:12:a4:
                    4a:6e:3e:e0:39:da:74:b4:c8:26:b7:c1:19:78:60:
                    04:5e:f5:ce:c8:4c:86:47:0f:e2:2b:d5:76:b1:d3:
                    ee:de:ac:b8:9f:88:b8:12:9b:00:94:ce:84:43:3e:
                    a2:03:4b:62:8b:88:df:dc:2f:c7:31:6e:3d:96:32:
                    fe:9a:ad:f1:79:79:18:d6:e5:1e:ed:5b:e2:83:82:
                    54:02:b9:7a:46:9d:58:5f:b4:94:87:02:2d:29:2b:
                    30:2c:8c:61:7b:c3:37:e1:e2:83:fd:52:13:8b:ca:
                    1b:c6:6a:18:16:c0:c7:0b:18:f8:51:5f:0a:a8:54:
                    49:97:76:e2:52:b2:fb:7d:66:d8:e4:4e:89:b8:26:
                    9f:f1:d5:dc:44:c5:79:bf:38:fa:fe:57:8c:43:92:
                    2a:7d:3f:5a:d1:ce:bf:24:71:6c:97:e7:cb:ec:d0:
                    3e:48:fe:db:6b:e3:d6:48:86:18:fe:f8:56:ac:7f:
                    d7:6f:c7:57:f4:40:be:2f:89:4a:15:2e:ff:44:06:
                    fe:60:5a:cd:d6:ee:bd:c3:ba:64:31:42:fc:ef:ac:
                    0f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E3:AC:1C:15:DB:5A:49:FD:88:5B:20:D2:2B:5A:29:A4:07:58:E9
            X509v3 Authority Key Identifier:
                keyid:E7:0F:90:71:1A:2B:71:90:DF:5A:AD:73:41:16:3D:FA:E1:58:2C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/8ef667b20a7c3f09d4090f65a176bcbd8a5c7f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/7c0f314c1d3ae8c8fbd69f9c3163397243f8766e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b8:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         18:0c:87:77:61:b2:71:f7:11:93:7a:97:b5:12:51:c4:24:d1:
         c3:9d:d9:7c:69:29:b0:a4:e0:cf:12:8c:91:5b:f4:37:50:c8:
         02:b8:0d:f4:7c:53:bf:80:c3:c1:ef:fb:9e:d2:e0:d5:e7:a4:
         82:da:18:1a:0d:f3:93:b1:ce:ad:7c:87:c4:64:b5:0d:ac:7f:
         db:ba:63:1c:12:2b:57:77:75:5b:b6:2c:38:5a:93:0a:a4:24:
         c6:96:14:5f:8d:70:65:dd:c6:05:bd:5f:15:2b:b4:61:b1:f9:
         f8:01:d3:7c:eb:d8:f3:07:70:a9:fa:a8:bb:ae:bc:9f:17:e7:
         1c:4f:2a:35:f0:9d:ed:2a:83:b2:23:a1:b0:73:de:60:52:2c:
         00:6b:7f:a4:ee:46:18:e8:12:73:63:40:7c:76:30:c7:37:c9:
         f6:f0:2d:e8:ae:bb:c0:dd:b1:bc:12:0c:3c:91:44:2a:5e:48:
         4e:8a:d3:38:df:62:e9:a6:fb:1e:a3:77:d3:7b:70:2c:29:dd:
         b9:e0:be:fa:52:b9:10:1c:ea:0e:cc:42:ce:a9:83:c6:e5:92:
         b1:53:a7:0d:ed:47:0a:f2:e8:a9:6b:25:aa:4b:1c:f1:73:05:
         03:33:5e:4f:39:38:b8:1d:f2:18:01:5d:05:7a:69:e2:de:89:
         7d:b1:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----