Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/56f19a7750d6f45e8b2dd03d174954d4ee47806f.roa
File:                     56f19a7750d6f45e8b2dd03d174954d4ee47806f.roa (raw, json)
Hash identifier:          zcTR28SXsdH5Ay377O60Pr7fndybvIAojG2nOuMThCM=
Subject key identifier:   4D:57:38:6F:36:3D:7D:66:57:94:3A:12:FE:DA:17:73:A8:4B:E4:B6
Certificate issuer:       /CN=15c457b9e4c4fb2caeebe5d784653caec339f556
Certificate serial:       140B4A
Authority key identifier: 09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/56f19a7750d6f45e8b2dd03d174954d4ee47806f.roa
Signing time:             Wed 27 Mar 2024 19:19:13 +0000
ROA not before:           Wed 27 Mar 2024 19:19:12 +0000
ROA not after:            Fri 27 Mar 2026 19:19:12 +0000
asID:                     3816
IP address blocks:        2801:1b:1801:4::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313610 (0x140b4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15c457b9e4c4fb2caeebe5d784653caec339f556
        Validity
            Not Before: Mar 27 19:19:12 2024 GMT
            Not After : Mar 27 19:19:12 2026 GMT
        Subject: CN=56f19a7750d6f45e8b2dd03d174954d4ee47806f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2b:69:7a:e4:04:08:7b:ab:cc:10:8c:ca:5a:
                    4f:52:23:ef:82:c7:39:e6:e1:5b:73:ce:7a:68:97:
                    7c:98:87:f6:14:68:41:cd:32:7b:78:45:0f:b6:72:
                    37:2e:e4:18:25:f3:c6:2b:8a:27:dc:79:cf:19:55:
                    58:07:19:15:f4:8d:e5:d8:0d:23:3c:12:c2:c3:91:
                    91:35:67:ea:0f:d2:0b:a3:2e:4f:d2:3f:23:40:2d:
                    58:a9:94:b3:1c:a3:84:ae:b2:a8:4c:18:4c:92:a7:
                    79:f7:4f:c6:72:23:0d:e1:08:14:4b:8d:fd:54:fc:
                    8e:66:02:b4:0a:9e:45:51:ae:f3:ba:05:2c:99:64:
                    e8:46:a0:7e:fd:8a:f4:43:39:50:29:ec:7c:a0:fe:
                    35:b9:15:0e:ad:92:d0:5c:b3:ab:79:6e:66:f3:52:
                    58:85:42:46:90:6a:60:d6:65:85:ab:d2:a0:da:b2:
                    cb:ee:9f:c0:10:e2:d9:6e:d8:de:99:d5:b7:13:4a:
                    36:e6:72:53:bc:d6:c4:3a:84:3e:7c:04:a0:96:6c:
                    1f:34:ef:a1:18:f0:45:97:2d:f7:a8:0f:90:e5:44:
                    be:3b:4c:3d:ef:b7:fd:90:44:d0:72:f9:85:e4:7f:
                    9a:02:69:bf:d8:65:e6:b9:35:1c:95:8e:86:e6:07:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:57:38:6F:36:3D:7D:66:57:94:3A:12:FE:DA:17:73:A8:4B:E4:B6
            X509v3 Authority Key Identifier:
                keyid:09:FF:22:D1:3E:2A:42:31:40:6D:21:B9:4E:28:06:40:A1:81:0C:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15c457b9e4c4fb2caeebe5d784653caec339f556.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/56f19a7750d6f45e8b2dd03d174954d4ee47806f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6c57146a-4992-42be-91d9-9bd8f746f3bf/15c457b9e4c4fb2caeebe5d784653caec339f556.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:1801:4::/64

    Signature Algorithm: sha256WithRSAEncryption
         5a:2a:e4:8d:4e:fb:4c:e6:40:e8:0c:7e:21:62:4d:d4:27:9e:
         ed:9e:c7:1f:67:6c:51:36:12:a6:14:5f:d0:38:05:b3:da:40:
         69:2f:59:35:24:11:89:94:8e:c9:f0:55:da:a3:0a:29:98:83:
         36:e7:00:32:f6:a5:ac:e2:3d:26:97:24:d4:91:a1:d5:75:b9:
         11:55:c1:f5:5a:d1:9f:46:3b:f7:57:55:4b:76:62:9e:e9:5a:
         c3:fa:e2:51:62:0b:d8:63:5e:86:0e:be:a6:ec:89:98:ff:9c:
         51:d6:af:18:1f:2a:04:fe:6e:23:de:5b:16:6e:a6:14:1c:f9:
         6e:e9:9b:1f:b2:cf:bc:08:1e:72:09:9c:7a:5f:a6:ea:7d:af:
         07:e4:a9:86:f2:05:69:a3:3c:b3:d7:1c:b5:4b:8a:47:52:b4:
         d4:87:11:1d:09:dd:59:ff:64:57:f3:b9:46:f6:2a:b5:fb:da:
         de:49:d9:b4:a7:ca:0b:ee:ac:99:b8:f4:56:c9:d6:08:e7:48:
         72:dc:96:89:5e:1c:0c:6d:bf:f0:f4:35:a5:2a:55:94:6e:3c:
         2d:7b:b2:5f:bf:58:f8:25:52:fe:35:43:3e:bd:34:de:f3:27:
         a3:c8:3d:5b:80:9b:a3:7e:b5:4f:5c:bb:c5:21:84:74:e3:10:
         36:95:73:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----