Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/53d87754a1d1e4c86a0fc6e3bbaac37fa2bc6a06.roa
File:                     53d87754a1d1e4c86a0fc6e3bbaac37fa2bc6a06.roa (raw, json)
Hash identifier:          bDQVLKmZ+RhS+f97EfWga8VgKUqWWDs3XGO0BoU9H8E=
Subject key identifier:   1C:CD:CB:0A:26:E3:D9:BB:80:F1:C7:DF:90:15:2E:09:52:46:FC:B9
Certificate issuer:       /CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Certificate serial:       1269FD
Authority key identifier: 8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/53d87754a1d1e4c86a0fc6e3bbaac37fa2bc6a06.roa
Signing time:             Fri 26 Jan 2024 07:30:07 +0000
ROA not before:           Fri 26 Jan 2024 07:30:06 +0000
ROA not after:            Sun 25 Jan 2026 07:30:06 +0000
asID:                     11315
IP address blocks:        2800:a00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206781 (0x1269fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
        Validity
            Not Before: Jan 26 07:30:06 2024 GMT
            Not After : Jan 25 07:30:06 2026 GMT
        Subject: CN=53d87754a1d1e4c86a0fc6e3bbaac37fa2bc6a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:8c:7e:07:07:f1:21:08:37:61:bc:ed:22:
                    a0:c4:4c:70:23:00:86:cd:0e:0e:ea:b6:34:32:f7:
                    5a:06:06:ba:6f:c0:2a:7b:d5:29:a0:7f:f7:fb:07:
                    5a:08:24:58:e4:e4:2c:1f:16:20:8b:81:e6:03:6e:
                    a7:2a:97:4e:aa:43:a6:70:44:d8:10:cf:0b:f5:f8:
                    56:a4:e6:2b:a8:b2:c5:09:75:e9:ec:11:ff:15:4b:
                    79:98:02:68:01:71:2f:57:5a:1a:69:91:83:78:b4:
                    37:38:ec:21:6a:53:5d:ad:ac:50:cc:43:93:1e:ac:
                    b4:14:ef:1e:13:ce:c5:29:0b:e2:c4:e1:24:1f:b1:
                    a5:21:9f:f6:e6:86:2d:1b:33:27:ff:a5:ef:43:b0:
                    c5:05:8e:28:2e:b1:d8:7b:dd:76:c4:40:10:5b:0c:
                    37:3d:e6:6e:ec:10:dd:79:5c:5a:79:b4:ab:5f:59:
                    2b:50:fc:65:ef:93:27:57:0b:7a:49:97:9c:8b:d5:
                    4f:90:bb:5f:89:5c:b3:75:2d:01:a7:bd:41:f0:32:
                    9d:37:e6:de:e9:96:07:ad:cd:c8:69:bc:3f:4e:35:
                    94:8d:1d:c7:ac:18:4c:72:06:16:cb:55:c9:af:f7:
                    96:ed:9e:bf:b5:19:19:cc:2e:68:7a:48:57:f5:eb:
                    0f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CD:CB:0A:26:E3:D9:BB:80:F1:C7:DF:90:15:2E:09:52:46:FC:B9
            X509v3 Authority Key Identifier:
                keyid:8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/53d87754a1d1e4c86a0fc6e3bbaac37fa2bc6a06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:b1:44:ea:e8:50:a8:75:b4:d6:2e:8f:84:b1:3a:21:25:7f:
         41:58:0a:df:a3:5d:5e:9d:4a:08:6b:47:32:c9:9a:2e:44:0f:
         6d:29:67:62:c9:22:5b:f5:87:1f:6a:08:51:9c:a0:c7:3c:3a:
         4f:b9:80:7a:42:cb:0b:52:ab:4c:ff:bb:a5:04:cd:05:a1:40:
         97:66:1d:af:4b:77:14:d9:46:28:3e:89:5e:9f:f2:31:93:12:
         97:e3:63:c7:0a:05:2e:d8:bb:23:42:9c:5f:98:18:c5:51:01:
         4b:35:b8:ea:47:f8:68:b4:56:e3:58:ab:f3:56:70:05:8e:0a:
         ec:e3:a5:35:52:5d:42:9a:f1:53:37:58:92:15:e1:4a:b8:2a:
         5a:32:d1:6d:c2:61:32:a0:cc:13:ce:0f:79:7a:d5:de:30:d4:
         19:9f:56:37:a8:b7:64:d1:18:75:fa:f4:2b:eb:b1:5f:55:85:
         70:22:89:3a:af:15:b8:bb:86:05:35:2a:fe:19:64:85:ff:21:
         72:31:f6:23:ce:1a:f5:96:60:3f:5f:a5:bd:c2:73:23:e3:d0:
         3d:72:d5:e2:10:4b:13:24:13:a0:8e:30:51:79:6e:b8:28:cf:
         46:fa:91:73:0f:65:0a:ef:f2:27:6f:a1:24:0e:d2:da:76:d5:
         d9:24:48:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----