Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/8e77f13bfa333c50636b546fa253d7d596d200b8.roa
File:                     8e77f13bfa333c50636b546fa253d7d596d200b8.roa (raw, json)
Hash identifier:          87W9+QyO9atIE1M+2SbnVvScbCJy3HvmJmYcbOjUJA0=
Subject key identifier:   C2:83:D5:61:85:C5:55:0E:AC:E9:F7:AD:98:0A:A5:2D:55:F4:B9:6A
Certificate issuer:       /CN=17e63b4149d0b23e7b741a7cccfb0b544a043d7b
Certificate serial:       28F6E7
Authority key identifier: 7D:BF:36:DC:91:A2:4C:E6:1D:EA:8F:47:24:E7:9C:88:DA:69:03:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/8e77f13bfa333c50636b546fa253d7d596d200b8.roa
Signing time:             Thu 29 Feb 2024 01:31:43 +0000
ROA not before:           Thu 29 Feb 2024 01:31:39 +0000
ROA not after:            Thu 01 Mar 2029 01:31:39 +0000
asID:                     269844
IP address blocks:        2800:68:33::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2684647 (0x28f6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e63b4149d0b23e7b741a7cccfb0b544a043d7b
        Validity
            Not Before: Feb 29 01:31:39 2024 GMT
            Not After : Mar  1 01:31:39 2029 GMT
        Subject: CN=8e77f13bfa333c50636b546fa253d7d596d200b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3f:ae:d8:a8:72:15:fa:44:fe:92:8d:da:68:
                    43:dd:24:c8:28:65:87:21:6a:31:e0:77:50:bc:27:
                    75:6d:30:67:6f:7b:46:14:e2:17:95:70:ab:9d:7f:
                    13:be:ab:ce:a8:8b:40:1d:e7:5f:a6:92:68:01:11:
                    87:75:46:a0:1c:9e:83:35:41:41:73:ea:c0:a4:14:
                    69:f9:10:f1:4c:3d:c0:16:73:ce:05:7f:a7:e0:22:
                    07:94:c9:6c:a4:66:2f:bf:c3:04:ae:eb:ed:ff:2d:
                    77:ea:c1:4b:9e:53:86:8b:6e:66:b7:fa:0e:ea:3d:
                    60:d2:21:df:b1:31:e5:40:be:1f:24:ef:37:56:85:
                    88:e3:4b:b4:b7:a9:19:43:ca:c5:3f:ae:eb:76:29:
                    41:3a:7b:67:81:44:18:b4:2a:f3:19:c4:d1:b4:1a:
                    c5:3d:44:84:7b:9b:30:ed:55:e1:4b:b2:0e:a6:bf:
                    ed:ce:5e:4b:14:b6:76:f2:fc:58:ad:1f:a7:32:a4:
                    92:69:7a:a1:b7:88:56:9a:ac:f5:8e:8d:9c:27:8d:
                    93:10:8c:1f:fb:4a:fe:b3:07:96:7b:99:ea:19:a1:
                    f9:34:55:52:23:23:67:8f:3f:dc:86:fe:56:d8:a1:
                    d2:b6:8a:06:3e:27:21:d4:44:63:48:c7:af:14:26:
                    82:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:83:D5:61:85:C5:55:0E:AC:E9:F7:AD:98:0A:A5:2D:55:F4:B9:6A
            X509v3 Authority Key Identifier:
                keyid:7D:BF:36:DC:91:A2:4C:E6:1D:EA:8F:47:24:E7:9C:88:DA:69:03:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/8e77f13bfa333c50636b546fa253d7d596d200b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:33::/48

    Signature Algorithm: sha256WithRSAEncryption
         16:cf:01:b1:51:31:e6:a7:87:ca:d9:00:15:d1:e0:f4:55:ef:
         39:2c:b9:fe:6e:b0:dd:ea:b8:21:dd:e3:46:71:44:34:3d:2f:
         62:f0:94:5a:e5:b5:a6:93:7b:dd:77:95:dc:b6:17:84:fb:d0:
         ec:00:e2:c9:39:a3:9b:69:a8:de:56:3f:85:bd:a0:a3:11:8b:
         a8:8e:7c:1e:db:ca:85:1b:c5:03:99:aa:0c:ec:e0:ef:2b:15:
         fe:05:34:81:a6:5d:b5:fb:9e:9c:91:92:04:7d:d0:60:d7:1e:
         22:9e:0c:be:7d:f2:da:fc:1a:18:49:b7:a1:f5:c5:40:00:bb:
         a3:c3:7a:77:a4:8f:5a:e0:65:9e:ce:a9:3b:0b:be:5e:4b:5c:
         2b:42:9b:c7:4a:08:5b:99:f6:14:86:90:b4:e6:f2:6a:48:b0:
         63:e4:20:6b:98:39:01:e1:9e:9c:2e:b9:da:70:55:ef:18:fb:
         d6:52:e7:c4:81:cc:80:a0:00:15:6c:a7:f0:86:64:98:b6:c8:
         e3:76:ef:48:a5:b4:50:ac:b1:b9:45:2a:15:64:57:20:d2:c9:
         be:1a:ff:25:5e:7a:fc:f9:d9:04:92:f0:bc:d8:e0:61:a7:53:
         d4:5e:59:f5:83:41:65:ab:60:72:7e:dc:36:7b:93:01:4b:0f:
         77:74:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----