Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/7b9ad883fb6d23f009ebf43354b968a24f97fa68.roa
File:                     7b9ad883fb6d23f009ebf43354b968a24f97fa68.roa (raw, json)
Hash identifier:          K99HTwAA+Rt2R/fC/PIFWYrH7OIbjX4RJrFXotulVlo=
Subject key identifier:   1A:32:16:01:36:27:CE:A0:74:F6:87:B4:77:51:C3:68:3F:0D:82:74
Certificate issuer:       /CN=5d102c8f4fcf978ba445fa1b13f0a5937e71aa61
Certificate serial:       05D3A8
Authority key identifier: 41:2A:96:24:5B:F9:A8:5F:E1:C6:10:35:B1:5E:38:06:D3:D4:BC:51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d102c8f4fcf978ba445fa1b13f0a5937e71aa61.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/7b9ad883fb6d23f009ebf43354b968a24f97fa68.roa
Signing time:             Fri 24 Feb 2023 17:14:37 +0000
ROA not before:           Thu 23 Feb 2023 17:11:07 +0000
ROA not after:            Mon 24 Feb 2025 17:11:07 +0000
asID:                     266720
IP address blocks:        2801:1d4:40::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381864 (0x5d3a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d102c8f4fcf978ba445fa1b13f0a5937e71aa61
        Validity
            Not Before: Feb 23 17:11:07 2023 GMT
            Not After : Feb 24 17:11:07 2025 GMT
        Subject: CN=7b9ad883fb6d23f009ebf43354b968a24f97fa68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:48:22:0e:3c:76:46:15:10:03:f9:eb:e3:1f:
                    11:1e:4b:af:d0:13:87:70:9b:5d:b1:9a:4e:29:39:
                    67:ba:b1:26:b2:bc:34:bf:8e:e3:bc:14:78:df:9d:
                    c0:45:df:63:4e:b4:c2:f3:05:37:43:78:9b:f9:6d:
                    ac:e0:e9:cc:da:79:f1:86:8d:e5:33:1f:16:de:f6:
                    0a:11:21:87:f4:49:1a:ed:4c:3c:49:e3:90:8b:f2:
                    f8:59:50:4a:42:6a:b4:59:f0:db:4a:b0:34:e5:b3:
                    25:97:58:3d:62:1d:4d:b2:08:c0:88:f6:ee:52:d8:
                    65:60:a8:95:12:5a:23:07:fa:e8:41:97:f8:04:11:
                    9b:0e:c7:c2:da:59:40:fe:aa:8e:9e:43:bf:31:75:
                    69:61:f1:fc:7b:5a:6d:0b:49:69:9c:7c:cb:04:9d:
                    e7:1c:95:61:54:aa:64:03:54:d7:95:66:d5:83:a1:
                    fa:42:10:0e:0b:0a:5f:ab:a1:04:f5:66:0a:b6:ce:
                    72:cc:30:d0:40:d6:9a:e1:ea:62:f7:41:1c:f1:6f:
                    d0:d9:25:9d:b8:22:66:9e:81:b9:1f:bb:3c:96:12:
                    2b:8c:be:31:bc:18:0d:bd:8a:74:56:3b:a7:ec:45:
                    08:0c:94:9f:a2:64:44:43:3b:93:25:8c:03:10:1c:
                    f4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:32:16:01:36:27:CE:A0:74:F6:87:B4:77:51:C3:68:3F:0D:82:74
            X509v3 Authority Key Identifier:
                keyid:41:2A:96:24:5B:F9:A8:5F:E1:C6:10:35:B1:5E:38:06:D3:D4:BC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d102c8f4fcf978ba445fa1b13f0a5937e71aa61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/7b9ad883fb6d23f009ebf43354b968a24f97fa68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/74d493fb-3015-42c2-ace6-eebd4b932c0b/5d102c8f4fcf978ba445fa1b13f0a5937e71aa61.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d4:40::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:17:20:ac:f4:5d:b2:0d:19:dd:96:c5:e7:57:23:7c:38:a0:
         dc:ca:60:27:a3:70:0f:92:be:50:12:23:24:aa:fb:74:9a:62:
         c9:13:47:0f:68:9c:d7:2d:5e:35:f7:c1:1f:c1:25:1c:1a:18:
         55:96:2a:7c:f7:ae:4a:ac:bd:80:85:e8:59:e3:83:40:13:f3:
         a9:58:2e:1d:09:23:f4:67:40:c5:07:e4:34:44:19:12:2a:36:
         96:fd:b5:2e:fd:52:5b:51:bd:74:7e:94:27:39:34:5e:c3:a6:
         c6:6a:0e:56:ae:fa:5c:db:5d:19:0f:80:4e:16:5e:8a:2f:c8:
         54:ce:9f:26:6b:48:55:fe:de:92:ea:e6:99:a8:ae:40:e3:47:
         87:27:fd:a6:4b:27:92:08:d2:ed:22:1c:b1:99:ce:ed:a2:3b:
         46:1c:91:d0:8c:59:2e:d1:05:7b:7d:a9:7e:05:7b:e0:59:b1:
         22:6f:9b:b0:ae:3f:49:14:61:4c:f5:63:26:f8:b7:ed:2b:09:
         f6:c2:0f:5c:db:1b:22:bf:69:6b:09:87:94:cc:45:d1:23:17:
         1d:f6:11:18:f4:13:68:ef:82:24:e6:2e:be:3f:40:52:e8:5a:
         74:57:11:78:d3:af:ea:84:85:fa:50:9f:48:da:9d:d9:31:58:
         c3:a4:31:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----