Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/d52076f93c9b3cb9007f731117462422ac14e1cb.roa
File:                     d52076f93c9b3cb9007f731117462422ac14e1cb.roa (raw, json)
Hash identifier:          Am/6a+OIX9cqfNEAENPBVxS2L6HqjWmfP+R5VHa2OdA=
Subject key identifier:   03:58:94:C5:75:3E:FF:8C:06:AF:2E:8D:10:3B:51:9A:48:8E:0B:CC
Certificate issuer:       /CN=17e63b4149d0b23e7b741a7cccfb0b544a043d7b
Certificate serial:       2908DD
Authority key identifier: 7D:BF:36:DC:91:A2:4C:E6:1D:EA:8F:47:24:E7:9C:88:DA:69:03:D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/d52076f93c9b3cb9007f731117462422ac14e1cb.roa
Signing time:             Thu 29 Feb 2024 01:32:00 +0000
ROA not before:           Thu 29 Feb 2024 01:31:39 +0000
ROA not after:            Thu 01 Mar 2029 01:31:39 +0000
asID:                     262212
IP address blocks:        2800:68:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2689245 (0x2908dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e63b4149d0b23e7b741a7cccfb0b544a043d7b
        Validity
            Not Before: Feb 29 01:31:39 2024 GMT
            Not After : Mar  1 01:31:39 2029 GMT
        Subject: CN=d52076f93c9b3cb9007f731117462422ac14e1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:1c:e7:1a:45:bf:70:c9:a6:1b:9f:f3:63:
                    fd:30:03:55:e1:03:db:0a:f2:a9:a9:82:44:38:21:
                    33:9c:e8:dc:7c:b2:c7:c7:34:b4:c5:86:06:e6:6a:
                    e9:ae:05:b9:a2:58:1e:6a:58:2d:0a:ab:4e:39:31:
                    86:72:f8:3d:8f:29:cf:d6:13:7d:eb:51:b6:03:ac:
                    cf:17:8e:e7:30:81:65:7d:83:f4:91:44:f3:a8:72:
                    17:70:a5:83:9f:97:db:1d:1f:19:da:61:1b:df:2e:
                    9f:df:de:fe:0e:f9:80:7a:bb:79:af:8e:fc:3c:99:
                    6d:2b:8c:80:f2:19:3b:49:ab:8e:08:dc:aa:ef:9f:
                    b4:49:01:d6:d7:de:43:63:07:42:0e:26:7d:7e:fa:
                    63:d7:16:34:0c:11:93:67:91:84:b6:4e:ce:70:64:
                    72:4d:39:19:9f:ae:d7:4d:00:2e:e4:b1:1e:6a:9c:
                    6e:9a:35:5f:1b:0b:6c:ef:b4:10:c4:4e:45:71:cb:
                    1e:00:a2:80:cf:3a:e4:44:a1:ce:ab:b0:f4:6e:1c:
                    cc:bd:dc:08:d7:d9:ef:3c:81:11:7d:61:04:14:de:
                    98:60:04:2a:5e:4b:a5:8f:4d:0e:f0:23:d6:d8:cf:
                    2f:e6:45:56:c0:22:f8:2a:f8:31:40:79:20:33:ce:
                    91:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:58:94:C5:75:3E:FF:8C:06:AF:2E:8D:10:3B:51:9A:48:8E:0B:CC
            X509v3 Authority Key Identifier:
                keyid:7D:BF:36:DC:91:A2:4C:E6:1D:EA:8F:47:24:E7:9C:88:DA:69:03:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/d52076f93c9b3cb9007f731117462422ac14e1cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8c794bd0-7d94-445f-8233-1200c9c6f2ec/17e63b4149d0b23e7b741a7cccfb0b544a043d7b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:68:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         33:5e:c7:40:dc:80:a9:da:0f:ff:27:64:19:56:ec:ca:5a:cf:
         fd:8f:7a:21:af:34:ae:ae:69:ee:18:ed:13:4f:19:b9:90:e7:
         0e:61:8d:d1:06:3f:a0:da:24:c6:a5:41:d8:71:dd:2a:33:86:
         1b:de:2a:f4:6f:4d:fb:ab:6d:a0:ee:10:5a:81:ee:df:9f:2a:
         55:6e:92:23:7f:fa:ae:a6:c8:91:66:4f:aa:6b:7c:2c:1d:a8:
         77:10:39:5e:da:10:b4:cb:8e:07:2b:a6:48:90:b6:26:40:87:
         9c:53:80:33:12:48:fd:d1:8d:86:75:50:96:26:52:1f:8b:b3:
         e2:ba:66:21:15:7b:65:5b:25:c6:7a:a7:fe:ed:da:d8:ee:a4:
         6e:2a:d5:d6:f5:ec:fc:b4:38:02:1b:3b:d9:e4:4b:36:79:1c:
         30:ce:76:ef:a6:d5:35:90:2f:58:4f:6b:1a:66:82:a7:24:e5:
         9f:fa:cf:bc:bf:1e:52:37:46:35:b4:51:c2:f1:cf:6b:20:e9:
         17:43:ef:e6:d5:84:71:b7:a1:8a:67:4e:df:b3:c9:05:8a:f7:
         53:38:d3:1f:27:12:af:18:45:e3:9d:0c:72:de:e6:27:a8:2f:
         5a:19:1a:f4:90:ec:58:7c:37:43:3a:98:e4:69:2c:28:3f:96:
         2a:8b:58:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----