Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/1631ab7e39c5c8fe789b982ff4cc2e84c0ea63d3.roa
File:                     1631ab7e39c5c8fe789b982ff4cc2e84c0ea63d3.roa (raw, json)
Hash identifier:          Ec9JVS7RoRP30b6MxYk/iJxaM8tvpeh5+UwftrLd+M0=
Subject key identifier:   75:45:A3:67:B1:AB:84:EB:38:3D:6A:9D:52:7B:C6:A9:63:1C:6A:BE
Certificate issuer:       /CN=15c457b9e4c4fb2caeebe5d784653caec339f556
Certificate serial:       131FAB
Authority key identifier: 09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/1631ab7e39c5c8fe789b982ff4cc2e84c0ea63d3.roa
Signing time:             Fri 23 Feb 2024 04:13:07 +0000
ROA not before:           Fri 23 Feb 2024 04:13:05 +0000
ROA not after:            Mon 23 Feb 2026 04:13:05 +0000
asID:                     3549
IP address blocks:        2801:1b:1800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1253291 (0x131fab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c457b9e4c4fb2caeebe5d784653caec339f556
        Validity
            Not Before: Feb 23 04:13:05 2024 GMT
            Not After : Feb 23 04:13:05 2026 GMT
        Subject: CN=1631ab7e39c5c8fe789b982ff4cc2e84c0ea63d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:e2:f3:e4:38:34:6c:66:ab:62:ca:36:b3:
                    a4:bf:c4:e0:d4:85:dc:ea:48:ca:c0:d9:43:a0:b1:
                    cd:eb:92:9f:10:0a:66:5d:bf:fa:c9:a1:a2:9c:cb:
                    1b:13:29:1a:1a:d5:ce:e4:11:61:89:62:e5:23:4d:
                    14:07:78:61:04:ae:37:13:bb:49:1a:b7:65:27:5d:
                    61:1e:bc:2b:12:49:e0:98:32:71:c9:d4:71:70:e5:
                    c1:dc:91:f1:1d:8c:89:5c:c5:2a:99:8b:8d:b3:b4:
                    25:6b:ac:03:c9:0e:a9:e2:2e:9f:8d:e5:3f:41:27:
                    2a:48:bb:ea:ae:00:1a:bd:9d:82:42:e2:0a:00:df:
                    49:f9:0b:bc:38:b8:fd:27:c9:ca:36:47:7e:13:7d:
                    e4:8c:41:8b:c2:c2:97:dd:2d:b9:fc:32:b7:d4:5a:
                    ff:b7:11:5d:fa:5d:4c:9b:b6:2c:e2:6c:24:1f:48:
                    a5:d9:4b:10:72:1d:32:83:98:ec:6e:f2:7b:00:01:
                    d1:10:56:18:67:2b:88:66:3b:4a:ae:9a:9c:7e:e2:
                    ca:0f:a5:b4:92:bb:b3:e9:ef:af:f5:b3:c5:a7:ea:
                    69:7d:5b:e0:d7:4c:4e:63:aa:02:7b:b7:cb:94:3e:
                    a6:da:d2:29:26:81:29:fa:86:36:0a:cd:f8:94:53:
                    a3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:45:A3:67:B1:AB:84:EB:38:3D:6A:9D:52:7B:C6:A9:63:1C:6A:BE
            X509v3 Authority Key Identifier:
                keyid:09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/1631ab7e39c5c8fe789b982ff4cc2e84c0ea63d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/15c457b9e4c4fb2caeebe5d784653caec339f556.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:e9:55:d6:9e:28:17:4f:ba:6d:9f:34:24:0c:b4:83:76:23:
         73:9d:09:30:71:82:d7:54:e7:b3:79:d5:52:5c:82:97:4b:88:
         0f:d0:05:72:10:a7:f3:7f:6a:ed:71:9e:57:d5:02:f6:fb:cc:
         09:e3:08:58:71:a8:81:c0:1e:fa:07:40:83:68:aa:41:13:e5:
         54:d0:50:9b:0f:de:64:24:b4:fb:3d:73:15:4b:9b:a8:68:b2:
         59:3e:d7:1c:b3:e8:a1:32:04:f9:f5:83:19:6d:52:94:2d:33:
         d5:b2:36:b4:5f:07:a3:de:33:8e:0b:d2:54:88:80:25:00:26:
         20:64:c9:a7:a8:d6:c3:05:97:79:d8:e5:2a:b3:13:08:ad:55:
         53:71:33:4d:1f:61:56:4e:16:f9:fa:0e:16:be:19:83:13:d9:
         35:51:b7:09:6d:bd:e9:ba:bb:37:9b:ea:7a:c2:d0:5a:0a:1f:
         2d:48:4d:22:61:b1:5c:ff:10:dc:78:8c:f9:5a:48:02:4d:34:
         9a:70:77:16:1e:b0:f6:37:6e:44:3b:ce:0a:8b:8a:3e:1c:c3:
         ac:f7:66:42:13:1f:c2:02:cb:89:77:58:be:49:f5:ee:ad:bd:
         37:fe:0a:1b:05:14:84:73:ec:61:74:a7:64:cf:c3:d2:24:51:
         d8:1b:b8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----