Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/64be4256-47cf-41c9-aef7-c6ff7fb6c33c/7b26fe4d6ca3435617eda5efe1a36a781742bb58.roa
File:                     7b26fe4d6ca3435617eda5efe1a36a781742bb58.roa (raw, json)
Hash identifier:          3gw4tWBlR8HfYnMKkXGo86QTYGayaU/Aqf3zzaXtYT0=
Subject key identifier:   A5:D2:B3:AC:64:82:87:1F:3E:0E:25:A6:06:9A:91:CF:E4:96:52:01
Certificate issuer:       /CN=2841b92f480790c95087b23abaa6ab50dfc95e5b
Certificate serial:       119AAC
Authority key identifier: A0:78:60:58:21:2C:D7:4C:DB:49:76:D5:8D:9B:78:59:DF:C9:01:8A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2841b92f480790c95087b23abaa6ab50dfc95e5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/64be4256-47cf-41c9-aef7-c6ff7fb6c33c/7b26fe4d6ca3435617eda5efe1a36a781742bb58.roa
Signing time:             Sat 30 Sep 2023 08:30:00 +0000
ROA not before:           Fri 29 Sep 2023 08:30:00 +0000
ROA not after:            Sun 28 Sep 2025 08:30:00 +0000
asID:                     14080
IP address blocks:        2801:11:800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1153708 (0x119aac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2841b92f480790c95087b23abaa6ab50dfc95e5b
        Validity
            Not Before: Sep 29 08:30:00 2023 GMT
            Not After : Sep 28 08:30:00 2025 GMT
        Subject: CN=7b26fe4d6ca3435617eda5efe1a36a781742bb58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:96:85:e3:21:92:a7:8c:b6:26:f0:f4:0c:08:
                    7c:d4:e1:2e:d0:36:22:20:3a:85:63:92:62:1c:e2:
                    40:2b:f0:c1:7a:8e:eb:be:81:2f:9f:cb:86:ba:39:
                    ca:92:81:ea:b1:36:91:be:ed:af:30:c3:51:2d:f0:
                    76:d0:b4:fb:02:2e:22:e1:62:e0:a8:11:d2:6f:50:
                    ab:9f:3a:16:ac:06:ed:d5:45:35:cf:0d:af:19:b7:
                    f6:0a:84:6d:be:b9:89:da:ec:38:c9:90:9a:e2:ca:
                    15:e9:af:09:67:11:f3:db:1c:94:4f:0d:ec:6e:eb:
                    41:ac:57:5a:7b:9b:ae:cf:82:cb:6f:b9:75:c0:33:
                    f9:c6:5f:99:f4:61:c9:0f:dc:39:5b:3e:4f:d6:dc:
                    86:a1:5c:1b:0d:5e:87:53:aa:26:7e:03:52:dd:6f:
                    99:5d:89:4c:d2:d3:a8:8b:74:20:97:6c:05:3e:5c:
                    09:15:7b:0f:36:00:e2:d4:e7:8d:77:2c:ca:0d:9d:
                    6c:95:88:14:b0:8e:d6:eb:75:38:fa:1d:64:32:62:
                    dd:31:5f:b6:e7:ab:9f:d8:0d:e2:2b:cd:15:55:6f:
                    70:07:a1:b6:a5:ca:3f:4a:78:4d:1e:2b:29:6d:a9:
                    9a:48:d8:9a:2e:b4:36:9a:c6:cd:99:69:2b:4c:08:
                    73:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D2:B3:AC:64:82:87:1F:3E:0E:25:A6:06:9A:91:CF:E4:96:52:01
            X509v3 Authority Key Identifier:
                keyid:A0:78:60:58:21:2C:D7:4C:DB:49:76:D5:8D:9B:78:59:DF:C9:01:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2841b92f480790c95087b23abaa6ab50dfc95e5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/64be4256-47cf-41c9-aef7-c6ff7fb6c33c/7b26fe4d6ca3435617eda5efe1a36a781742bb58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/64be4256-47cf-41c9-aef7-c6ff7fb6c33c/2841b92f480790c95087b23abaa6ab50dfc95e5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:3f:93:22:ac:0c:5e:9d:a3:62:81:08:57:3f:25:9f:87:68:
         f3:9a:d8:45:7e:aa:03:5f:16:eb:bc:7d:ab:bf:bb:df:a3:08:
         e1:d0:2c:b2:3d:89:6f:68:f4:b3:40:63:d1:12:d7:ca:89:e4:
         72:4a:92:ed:22:c5:75:00:8f:f7:a5:b5:b1:33:3f:76:72:d7:
         39:39:1b:53:47:80:8c:1f:4c:f4:25:3c:30:1e:63:20:28:7e:
         25:7b:2c:a2:c6:2c:b7:a2:f2:83:5d:a6:30:ef:73:11:67:9d:
         5c:cd:0a:62:bf:2c:cd:db:65:eb:4f:12:12:2b:2c:e0:42:35:
         66:15:bc:6b:19:72:a6:6b:07:c7:ec:68:6d:63:d2:2d:aa:c3:
         32:f9:23:ca:3e:da:42:d9:d8:a0:64:a7:34:16:4d:37:bb:4c:
         ef:9c:4b:e7:dd:34:bf:a4:19:a1:cf:69:c9:a2:da:e3:c3:2a:
         f8:92:d8:00:9a:4d:2a:ab:68:17:aa:bc:20:a5:8a:4f:fb:1b:
         94:d1:96:62:81:c2:ae:42:4b:55:5c:cb:a3:fd:6d:99:a5:56:
         65:39:78:86:4c:d7:1f:19:46:fe:06:8c:9b:41:79:38:c2:51:
         75:37:79:e7:aa:07:a0:93:33:f6:5e:a3:e1:c4:c5:c7:6f:04:
         7e:f4:8f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----