Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/8e5c180f-ad69-4685-857d-60da248b236d/f8f159ddc041ead04cdd1f1c281318818b42e6b0.roa
File:                     f8f159ddc041ead04cdd1f1c281318818b42e6b0.roa (raw, json)
Hash identifier:          +WPbFocmYvEcJpcSwxpRIOWU6aWFNcIg0J+ly6esnqE=
Subject key identifier:   00:D6:4E:88:AD:45:F4:84:3A:79:96:0A:3C:97:CD:30:DB:2D:9C:FC
Certificate issuer:       /CN=033367e5ad5492626298a00d7acc4757c59b9b8b
Certificate serial:       0F6B
Authority key identifier: 71:1E:07:4E:6A:25:14:F3:AC:18:7B:69:8A:E7:F8:14:46:CB:6E:6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/033367e5ad5492626298a00d7acc4757c59b9b8b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/8e5c180f-ad69-4685-857d-60da248b236d/f8f159ddc041ead04cdd1f1c281318818b42e6b0.roa
Signing time:             Tue 21 Feb 2023 19:14:10 +0000
ROA not before:           Mon 20 Feb 2023 19:13:52 +0000
ROA not after:            Fri 21 Feb 2025 19:13:52 +0000
asID:                     262589
IP address blocks:        2801:14:3800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3947 (0xf6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=033367e5ad5492626298a00d7acc4757c59b9b8b
        Validity
            Not Before: Feb 20 19:13:52 2023 GMT
            Not After : Feb 21 19:13:52 2025 GMT
        Subject: CN=f8f159ddc041ead04cdd1f1c281318818b42e6b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:68:b9:d7:8c:3e:e3:dc:c2:b9:5b:0e:23:04:
                    f7:de:41:d3:1f:97:23:12:de:e5:ef:20:f9:29:8d:
                    8a:b7:00:ad:4e:81:53:f3:36:e6:a9:f6:83:02:f8:
                    54:19:2d:85:d0:27:36:77:db:05:dd:56:9e:1e:e6:
                    57:ae:c4:ee:ce:60:1c:84:ca:74:8c:54:07:33:2a:
                    a1:47:1b:89:fd:c6:7c:8d:58:e7:d6:ba:d0:9c:22:
                    4c:c3:b1:13:4e:21:db:98:88:2d:90:71:fc:39:5a:
                    f8:ac:d8:f6:c8:2a:64:b8:38:bc:bc:c9:b3:c0:2e:
                    78:93:37:14:56:de:58:cb:c3:02:1c:cb:d7:2a:0d:
                    4c:3f:46:7f:2d:76:4d:d3:74:9b:40:97:0c:90:36:
                    3a:38:16:93:a4:c9:86:f0:cd:14:2f:58:8f:8d:59:
                    2a:de:19:89:94:89:4c:6e:fa:fc:10:c6:d6:a3:c8:
                    1a:77:b5:65:e2:e5:5c:ca:8b:f4:13:95:e7:4d:14:
                    22:f1:86:f0:05:c6:d1:2d:e2:d9:fb:fe:00:5c:61:
                    ed:63:47:13:c4:0a:9e:4b:4f:9f:6e:2e:18:ce:b9:
                    21:a5:cd:f5:ca:61:f8:5d:21:32:5e:16:45:6d:35:
                    ce:77:b9:d7:dd:57:10:de:9e:2a:6d:d7:15:72:60:
                    1b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D6:4E:88:AD:45:F4:84:3A:79:96:0A:3C:97:CD:30:DB:2D:9C:FC
            X509v3 Authority Key Identifier:
                keyid:71:1E:07:4E:6A:25:14:F3:AC:18:7B:69:8A:E7:F8:14:46:CB:6E:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/033367e5ad5492626298a00d7acc4757c59b9b8b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/8e5c180f-ad69-4685-857d-60da248b236d/f8f159ddc041ead04cdd1f1c281318818b42e6b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/8e5c180f-ad69-4685-857d-60da248b236d/033367e5ad5492626298a00d7acc4757c59b9b8b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:aa:b3:56:0b:19:96:27:fd:db:2e:db:17:c3:ef:45:bd:85:
         f2:62:bf:a2:f8:6b:a0:55:03:e2:09:68:1d:6b:db:5f:ee:20:
         57:84:06:1f:66:e6:d1:81:e1:8c:fb:73:31:9f:e7:93:f9:53:
         6b:8a:75:11:05:de:41:70:9f:36:84:7d:bc:be:c3:20:5a:92:
         0d:80:5b:28:18:48:45:82:a0:3c:93:9f:ca:8c:ee:89:6f:ea:
         db:48:30:fc:e7:cb:52:7c:ff:03:ec:df:6e:f6:f7:79:ba:f1:
         4c:e7:b4:6d:3d:43:af:01:85:de:0a:b4:b4:c4:89:7f:e2:bc:
         f2:f1:3d:ad:b8:46:75:fa:a2:76:a9:0d:c1:1b:76:48:64:51:
         5e:e7:6e:8a:ba:3c:e1:4f:5e:cf:bb:65:1b:1f:7c:8f:2f:a9:
         6e:e0:25:07:93:27:35:41:f0:67:76:7b:58:f5:f1:24:18:37:
         fe:cb:e5:10:6b:d6:7d:52:eb:5f:8a:2c:47:c3:fd:21:24:b4:
         53:cd:fd:08:80:0e:f2:80:0a:e4:e6:dc:34:ad:af:5e:03:2b:
         cb:cb:60:a7:85:6d:15:e1:fd:2e:24:e8:c5:5b:dd:4c:3e:93:
         62:25:3f:42:f9:c1:6d:fa:d1:c4:ff:4e:94:eb:6d:72:2c:ee:
         f5:bb:4e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----