Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/2a6bac1b6f867d451d1d29947eeec89f7bebfc54.roa
File:                     2a6bac1b6f867d451d1d29947eeec89f7bebfc54.roa (raw, json)
Hash identifier:          XDFdpnjpgF9AFn4toktx06/QtERs2sHknNqwuZkctls=
Subject key identifier:   4F:8D:2E:4B:EF:A6:4C:D4:24:64:7F:33:5C:51:8E:66:07:1D:18:32
Certificate issuer:       /CN=54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16
Certificate serial:       02E2FB
Authority key identifier: 33:5A:49:E7:92:32:3D:59:06:A8:41:7C:8D:12:54:B8:4A:BB:E4:A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/2a6bac1b6f867d451d1d29947eeec89f7bebfc54.roa
Signing time:             Sat 13 May 2023 19:50:20 +0000
ROA not before:           Fri 12 May 2023 19:50:20 +0000
ROA not after:            Tue 13 May 2025 19:50:20 +0000
asID:                     28432
IP address blocks:        2806:214::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189179 (0x2e2fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16
        Validity
            Not Before: May 12 19:50:20 2023 GMT
            Not After : May 13 19:50:20 2025 GMT
        Subject: CN=2a6bac1b6f867d451d1d29947eeec89f7bebfc54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a6:db:8a:ac:a6:d9:d7:33:df:cf:11:cb:44:
                    f9:a6:a0:66:db:d3:a9:6e:b5:ec:b0:0c:f0:f0:e9:
                    dd:12:82:70:93:a2:49:b8:90:7b:72:62:30:74:03:
                    a7:65:b0:17:95:d0:be:8c:a0:f4:73:26:f9:87:2f:
                    3b:09:2c:0f:3e:47:85:5b:c6:1a:0e:81:53:0b:7c:
                    a6:0c:98:59:3b:70:6a:2a:73:b2:7c:22:07:d1:61:
                    fa:d4:fc:a1:78:34:f8:5c:13:c1:ec:b7:e3:b4:38:
                    7d:ae:50:82:cd:7d:08:6c:cb:78:d8:c1:b9:73:1f:
                    83:46:8e:ae:07:8f:f6:a6:0e:5c:cd:d3:59:fb:9f:
                    00:78:3e:ac:cf:39:05:5d:10:a3:54:cb:6b:43:09:
                    46:c5:66:a8:5f:ce:3e:c0:63:f4:9c:d5:58:7a:f0:
                    5f:e4:6d:76:d1:0d:3e:a8:50:15:60:db:3b:76:14:
                    42:0c:1d:9d:7d:6c:78:49:8f:6d:30:4f:d5:f6:de:
                    f3:53:2f:79:fe:e9:84:bf:11:06:80:e5:87:69:62:
                    55:5b:12:08:e3:63:13:44:07:bb:f0:00:f6:cd:57:
                    8d:94:68:40:42:8b:9f:54:c0:47:89:df:a3:bc:18:
                    a4:c9:dd:cc:72:ce:8f:dd:fa:2a:4a:26:80:82:e0:
                    63:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8D:2E:4B:EF:A6:4C:D4:24:64:7F:33:5C:51:8E:66:07:1D:18:32
            X509v3 Authority Key Identifier:
                keyid:33:5A:49:E7:92:32:3D:59:06:A8:41:7C:8D:12:54:B8:4A:BB:E4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/2a6bac1b6f867d451d1d29947eeec89f7bebfc54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:214::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:48:d2:7e:79:11:3b:5a:13:02:34:d8:05:b4:0b:a6:c3:c9:
         d5:d5:cf:e4:7a:36:31:c7:bf:e4:fc:15:83:57:49:d9:4a:66:
         f5:bd:99:5e:a4:c1:07:91:16:66:6e:f5:59:19:8d:3f:c4:eb:
         db:36:3f:d2:28:a7:dd:3e:df:94:9a:41:bc:d8:1e:d7:8c:ab:
         53:3c:fc:ea:a7:7b:bd:ad:d1:bc:bc:81:de:4b:9b:03:c4:8d:
         cc:35:e8:2c:99:27:1f:27:46:16:1a:ec:07:43:05:de:2f:14:
         b8:5c:40:06:b9:6a:65:a3:48:86:b0:5b:7f:fa:37:22:f3:bd:
         24:83:f3:3a:22:dc:25:ff:23:b5:88:2f:cb:1a:ce:4d:5b:23:
         2b:7f:9c:3b:2f:76:ed:30:0b:c9:c2:2e:f7:02:56:27:e6:92:
         20:7f:f1:b6:8e:32:ee:08:d9:28:b7:b9:0d:a1:c1:7c:f4:ac:
         c2:ba:b6:20:fa:0c:0b:37:59:7e:70:fa:86:d8:4f:e5:07:b4:
         81:4a:96:89:09:31:11:35:78:13:d1:73:1b:9f:c6:6f:a9:64:
         cc:1b:40:21:f6:d2:e9:34:4e:68:4d:af:9d:2e:c4:08:72:7a:
         d7:cb:20:76:83:a1:07:66:5a:e5:f7:66:3a:ac:a8:71:4f:eb:
         8d:b8:a3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----