Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7b876cb8-cab4-4b2d-ba0c-6388a05976c6/4b631d3da2788fee9aa684c5609d92984044cea7.roa
File:                     4b631d3da2788fee9aa684c5609d92984044cea7.roa (raw, json)
Hash identifier:          6Wnb2dz+sWTW16GDUjyRYuJtQ5ngopW7gDA0kmYNEyc=
Subject key identifier:   59:C6:09:88:6F:88:03:0B:D2:CF:5F:11:78:BC:01:D1:A7:3E:42:9C
Certificate issuer:       /CN=b59fce5e85d2dc16f93293a57f50b4e366191cb8
Certificate serial:       11B001
Authority key identifier: 82:B7:0C:38:78:1D:D3:9B:04:0E:5B:8C:D0:86:20:E5:78:F7:96:24
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b59fce5e85d2dc16f93293a57f50b4e366191cb8.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7b876cb8-cab4-4b2d-ba0c-6388a05976c6/4b631d3da2788fee9aa684c5609d92984044cea7.roa
Signing time:             Thu 03 Aug 2023 21:32:18 +0000
ROA not before:           Wed 02 Aug 2023 21:32:18 +0000
ROA not after:            Sun 03 Aug 2025 21:32:18 +0000
asID:                     262589
IP address blocks:        2801:17:e800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159169 (0x11b001)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b59fce5e85d2dc16f93293a57f50b4e366191cb8
        Validity
            Not Before: Aug  2 21:32:18 2023 GMT
            Not After : Aug  3 21:32:18 2025 GMT
        Subject: CN=4b631d3da2788fee9aa684c5609d92984044cea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:70:00:fe:b0:33:88:95:56:d2:58:4b:74:
                    af:7a:20:76:ce:16:4d:39:a9:08:b7:14:13:4c:d4:
                    46:12:70:92:03:58:74:cd:c8:86:06:f1:18:36:09:
                    10:c4:76:b3:e4:2e:be:f6:97:6e:b7:98:b5:ac:c2:
                    60:1d:f6:fa:d6:25:56:6d:d1:4c:ca:52:0d:08:af:
                    e0:9f:a7:0f:7f:c8:39:78:93:63:fa:04:dc:b6:9d:
                    9d:6f:4c:e1:41:fa:cd:b4:e5:fd:95:df:86:6a:18:
                    14:77:06:73:ff:a7:eb:c5:c5:20:14:ec:2e:f7:a6:
                    19:d0:93:af:ac:9f:59:c4:dc:40:47:a2:6f:6b:d6:
                    76:67:66:96:1f:73:b1:af:10:2e:f5:c5:96:7c:18:
                    32:f1:65:3f:a6:6c:c9:a7:ce:cd:56:ed:e2:ca:66:
                    f8:27:d1:c9:4b:0d:4d:9c:88:05:81:62:3f:08:66:
                    eb:2f:eb:7e:34:a1:4a:a8:86:35:7d:8d:7b:c8:ba:
                    82:fa:ed:6d:49:64:da:ef:ea:d1:79:06:6b:c7:c4:
                    2c:fc:34:f7:4a:aa:a7:b0:a5:00:ac:05:e5:e9:da:
                    bc:d2:cf:bf:36:5f:17:3d:9c:3d:92:6d:57:c0:52:
                    1f:2f:c0:c1:73:58:ee:25:0c:e3:94:d0:b6:12:3c:
                    91:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C6:09:88:6F:88:03:0B:D2:CF:5F:11:78:BC:01:D1:A7:3E:42:9C
            X509v3 Authority Key Identifier:
                keyid:82:B7:0C:38:78:1D:D3:9B:04:0E:5B:8C:D0:86:20:E5:78:F7:96:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b59fce5e85d2dc16f93293a57f50b4e366191cb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7b876cb8-cab4-4b2d-ba0c-6388a05976c6/4b631d3da2788fee9aa684c5609d92984044cea7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7b876cb8-cab4-4b2d-ba0c-6388a05976c6/b59fce5e85d2dc16f93293a57f50b4e366191cb8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:21:b0:dc:92:d9:95:2d:a1:1d:b6:c1:17:b1:c5:ae:1e:b7:
         8a:a8:62:0a:5e:2c:a6:fa:5c:c9:44:e2:2a:14:a5:26:50:69:
         c9:67:fb:e6:7b:1b:dc:20:dd:75:de:5b:d6:17:cc:dd:cb:ce:
         74:4c:65:fd:10:cc:c4:96:49:d4:35:a2:dc:b8:a7:a5:bb:da:
         ee:a4:80:e0:e1:41:0d:4b:67:fd:4c:b6:05:36:59:fa:8e:c9:
         9c:18:f3:0c:a4:68:b1:5a:e0:44:06:16:e9:f5:25:60:62:2f:
         d9:22:a4:82:14:b4:7b:5b:c2:d3:33:59:94:31:49:11:d4:10:
         25:85:b4:2c:63:34:44:b6:08:2e:14:03:e5:a8:6b:07:b2:69:
         a0:4a:b8:19:10:9b:49:59:82:c4:49:68:a9:f3:cb:a2:f0:bf:
         ce:08:51:4c:6c:87:ed:8e:35:96:52:1f:e6:f2:6e:b3:b7:30:
         74:64:ee:2d:47:9a:54:4c:bd:cc:37:2f:a9:20:27:74:37:7f:
         83:86:cb:d3:30:b6:6d:c5:6e:94:f0:22:66:75:97:f9:8e:ab:
         39:89:11:86:e5:83:c5:32:0e:80:ff:3e:aa:61:11:46:30:63:
         be:01:7e:89:79:df:9a:34:45:84:c1:08:30:db:f9:49:1c:02:
         87:b1:1a:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----