Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/6b626d0a5d9d2f5b11bacd5522989f6aae5f1edc.roa
File:                     6b626d0a5d9d2f5b11bacd5522989f6aae5f1edc.roa (raw, json)
Hash identifier:          bS6kAidMrGovxvBeJ6MVyMQLaZHr1/pyFLUfUgu3PgE=
Subject key identifier:   27:87:23:D6:8D:82:BB:40:3B:AD:87:E2:F1:05:17:FB:02:A6:97:58
Certificate issuer:       /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Certificate serial:       14B1B8
Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/6b626d0a5d9d2f5b11bacd5522989f6aae5f1edc.roa
Signing time:             Fri 02 Feb 2024 03:21:34 +0000
ROA not before:           Fri 02 Feb 2024 03:21:33 +0000
ROA not after:            Mon 02 Feb 2026 03:21:33 +0000
asID:                     22822
IP address blocks:        2801:114::/44 maxlen: 48
                          2803:9310::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1356216 (0x14b1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
        Validity
            Not Before: Feb  2 03:21:33 2024 GMT
            Not After : Feb  2 03:21:33 2026 GMT
        Subject: CN=6b626d0a5d9d2f5b11bacd5522989f6aae5f1edc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:07:ef:d0:ef:6b:3c:2a:c2:72:a0:1d:07:e6:
                    e9:01:c1:d7:be:27:5e:ed:12:29:1d:04:12:9b:67:
                    0d:2a:4c:b2:5c:a1:29:d4:79:5c:2c:1f:92:2a:3c:
                    f8:8f:d9:ad:93:9c:63:ce:e0:4c:b2:c8:d0:16:c4:
                    72:ab:c9:cf:a6:88:eb:66:e8:2c:3b:cc:db:93:c9:
                    7b:88:79:5d:25:bb:96:f8:ad:4b:2a:ab:2d:2d:87:
                    8b:9e:ab:8d:33:99:37:de:a8:b9:fc:9a:71:16:56:
                    8e:bd:c5:91:c6:de:e6:53:c2:4e:5a:0d:fe:fe:19:
                    88:b8:de:82:cd:ef:f3:ba:22:16:d1:19:ae:d8:d5:
                    b7:21:dc:e2:48:bf:14:36:57:93:46:71:13:6c:e8:
                    6f:60:b7:fb:01:0c:e1:c9:5c:f5:cb:61:43:4c:a3:
                    e9:13:c9:e2:21:dc:c5:d0:b8:59:56:66:8f:8e:bf:
                    b4:b2:b6:29:6e:a7:ea:7e:ce:31:53:e8:54:8d:77:
                    b1:1f:d4:56:9d:9a:96:ef:f2:1e:4a:17:19:f1:1b:
                    92:fe:62:b8:9d:cc:b6:f5:c8:5c:82:5e:7e:23:40:
                    5e:51:2d:98:4d:8d:a8:24:96:81:ec:29:d1:eb:51:
                    b2:c4:d6:51:5b:c4:33:17:85:7f:84:49:88:05:03:
                    bf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:87:23:D6:8D:82:BB:40:3B:AD:87:E2:F1:05:17:FB:02:A6:97:58
            X509v3 Authority Key Identifier:
                keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/6b626d0a5d9d2f5b11bacd5522989f6aae5f1edc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:114::/44
                  2803:9310::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:94:28:3b:b9:34:97:87:bd:ce:56:a7:56:ca:40:db:ac:08:
         a4:55:0c:bf:01:9a:c3:99:36:03:59:9f:ae:db:31:2e:bf:98:
         ee:36:aa:53:f8:7e:2e:66:34:b8:0e:e5:07:da:f4:0b:99:0a:
         ed:98:43:87:80:4e:cc:58:ec:11:4d:48:9c:51:34:72:0f:bd:
         14:78:d8:97:29:4f:a2:d8:c1:5a:eb:bd:73:fb:bb:3c:ef:8e:
         41:56:ca:08:be:8b:c6:49:7a:77:e8:08:21:64:10:14:55:0b:
         8a:dd:83:ac:f6:aa:f3:2d:50:be:63:0f:1e:0f:53:0c:79:54:
         80:42:0a:e2:95:21:11:86:dd:33:ed:4b:51:60:c5:2f:6b:bc:
         18:2b:ce:31:bb:52:98:7a:de:02:de:b2:be:0f:74:0c:00:1e:
         b1:71:b2:a4:ec:e2:ee:83:6d:30:22:df:e0:cb:6e:68:85:c2:
         db:2e:0d:b1:fb:fc:c3:66:f8:00:76:9c:3e:5e:07:63:2a:95:
         8c:fa:8c:00:c8:4c:c3:ca:45:96:ff:2b:d7:4b:e8:4e:bc:29:
         4d:6a:10:2a:e5:3d:72:03:53:9e:4e:40:c6:4b:40:ce:62:18:
         cb:46:18:b8:9c:e0:f0:02:61:28:4a:7b:d3:bd:ca:c6:3c:e7:
         a1:61:f3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----