Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8137807c-9877-479b-8660-329dc17fdf80/a58df8842596ebf1f027a4cd106d4d7caef3c01f.roa
File:                     a58df8842596ebf1f027a4cd106d4d7caef3c01f.roa (raw, json)
Hash identifier:          Oqo8XxE4p0riW+LdE9huPAMme3Hm7ZWkWbevawOGkEI=
Subject key identifier:   50:52:34:77:5A:95:AD:AE:32:AD:6E:56:95:3F:7B:66:F6:AF:84:61
Certificate issuer:       /CN=9cc6a73aafa68160f0cf809b15e30275ae5fa69e
Certificate serial:       258748
Authority key identifier: 66:86:FC:01:CD:8A:EE:8E:34:9C:2E:DF:68:90:85:FB:02:1F:5B:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cc6a73aafa68160f0cf809b15e30275ae5fa69e.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8137807c-9877-479b-8660-329dc17fdf80/a58df8842596ebf1f027a4cd106d4d7caef3c01f.roa
Signing time:             Tue 05 Mar 2024 16:32:18 +0000
ROA not before:           Tue 05 Mar 2024 16:32:18 +0000
ROA not after:            Thu 05 Mar 2026 16:32:18 +0000
asID:                     14080
IP address blocks:        2801:112::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2459464 (0x258748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc6a73aafa68160f0cf809b15e30275ae5fa69e
        Validity
            Not Before: Mar  5 16:32:18 2024 GMT
            Not After : Mar  5 16:32:18 2026 GMT
        Subject: CN=a58df8842596ebf1f027a4cd106d4d7caef3c01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0f:ff:ab:7e:9f:ca:ae:c4:c3:d1:6e:66:fe:
                    b4:37:7c:0a:fb:d9:90:f6:96:ae:1e:51:58:40:3c:
                    37:68:ca:3d:b5:91:56:53:9c:46:ff:53:8c:e3:5f:
                    e5:fb:4d:33:35:1d:70:07:51:59:5e:8e:93:d9:dc:
                    20:5b:63:77:b9:5c:d8:cc:3c:e1:2d:fc:64:d0:03:
                    8e:3b:f9:11:37:35:37:38:50:22:4d:b8:b4:2e:99:
                    b0:84:c5:00:0b:6b:5e:18:6d:d5:7d:df:31:d4:36:
                    0f:26:d6:62:73:a9:6b:d6:10:ad:bc:7a:c1:4f:be:
                    6f:1e:16:61:34:f2:96:c4:32:52:d7:91:1e:28:3e:
                    85:c0:ad:12:11:83:03:ed:c0:5c:f9:f9:18:8f:6a:
                    1d:0e:46:5d:9c:76:dd:27:c3:eb:40:6d:a0:84:d7:
                    ad:c2:be:c3:b3:7e:94:ce:24:d6:89:f7:39:45:75:
                    ff:a7:60:fc:f7:c2:58:a1:5e:18:14:78:c8:9d:a5:
                    0e:be:0f:82:a3:ab:74:c4:9c:e5:66:75:c6:f3:ce:
                    43:0a:42:d0:4e:6c:82:f1:28:e0:37:5d:7a:08:88:
                    ea:17:0f:5a:f2:96:c4:85:06:ed:b8:0c:05:50:bd:
                    c6:fc:f9:31:35:a3:fe:7d:9e:a9:27:01:41:b1:49:
                    57:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:52:34:77:5A:95:AD:AE:32:AD:6E:56:95:3F:7B:66:F6:AF:84:61
            X509v3 Authority Key Identifier:
                keyid:66:86:FC:01:CD:8A:EE:8E:34:9C:2E:DF:68:90:85:FB:02:1F:5B:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9cc6a73aafa68160f0cf809b15e30275ae5fa69e.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8137807c-9877-479b-8660-329dc17fdf80/a58df8842596ebf1f027a4cd106d4d7caef3c01f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8137807c-9877-479b-8660-329dc17fdf80/9cc6a73aafa68160f0cf809b15e30275ae5fa69e.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:112::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:14:f7:0c:4f:8a:80:1b:51:45:3b:8a:67:97:49:07:42:9b:
         35:2e:f1:d9:2d:0c:47:dc:b1:75:4f:b5:45:e9:dd:51:34:06:
         66:c8:d7:3a:23:c4:ba:5d:1c:01:77:88:06:55:a1:90:9d:e0:
         cc:ed:ea:6a:f7:18:a4:3f:50:19:27:c1:3e:52:b6:18:94:43:
         d3:bf:4f:6e:7e:07:c2:a9:bd:97:fd:68:bc:8e:fe:d2:18:45:
         f3:f6:f6:cb:cc:47:11:6a:89:67:db:c0:d3:8e:08:9a:86:46:
         a7:59:9c:da:fc:13:da:e2:1b:5f:d5:80:5a:8e:5a:79:e6:f3:
         7f:67:1f:76:c3:1e:25:0b:5d:26:ca:9a:79:41:24:fc:7a:fc:
         4c:22:82:d7:a9:fb:81:42:af:cd:78:ca:89:b1:51:98:fd:35:
         88:0c:1f:77:49:3b:ef:e5:fe:ac:cb:1c:73:85:1f:9d:99:62:
         35:85:8f:cf:46:52:8e:78:1b:c9:8c:75:c6:8e:58:81:e0:c5:
         90:9d:0b:02:1a:cc:1a:9c:08:71:99:84:7d:27:b3:9d:c6:31:
         c2:0e:04:ac:a2:d0:24:d4:0a:0c:cd:9a:bf:24:ad:f3:e4:aa:
         81:63:32:8c:e6:77:b2:39:17:40:8b:30:5b:90:2e:f6:e3:4a:
         67:05:e3:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----