Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/70ea99fdfe5692afa65a1dd6921d52c25989baee.roa
File:                     70ea99fdfe5692afa65a1dd6921d52c25989baee.roa (raw, json)
Hash identifier:          uaaKeZrmrxUuBt75/+ZT8fh1JQqTSevRkz/grFrkb9A=
Subject key identifier:   3D:D8:E5:27:02:6B:DA:7F:62:66:5A:B0:77:B5:21:8F:10:57:20:77
Certificate issuer:       /CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
Certificate serial:       125FCC
Authority key identifier: 8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/70ea99fdfe5692afa65a1dd6921d52c25989baee.roa
Signing time:             Thu 25 Jan 2024 18:53:51 +0000
ROA not before:           Thu 25 Jan 2024 18:53:51 +0000
ROA not after:            Sun 25 Jan 2026 18:53:51 +0000
asID:                     22927
IP address blocks:        2800:a00:da00::/41 maxlen: 41
                          2800:a00:da80::/41 maxlen: 41
                          2800:a00:de00::/41 maxlen: 41
                          2800:a00:de80::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204172 (0x125fcc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
        Validity
            Not Before: Jan 25 18:53:51 2024 GMT
            Not After : Jan 25 18:53:51 2026 GMT
        Subject: CN=70ea99fdfe5692afa65a1dd6921d52c25989baee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fe:3b:21:a0:42:ec:ae:6b:7a:e3:67:58:2e:
                    2d:81:7c:24:b0:f8:8f:90:47:87:0e:fc:32:7d:7e:
                    0b:20:da:82:bc:8d:7a:3d:cf:7d:73:0d:d5:bc:c1:
                    0e:7f:02:b2:fa:9f:6e:20:48:a9:85:05:21:97:05:
                    b7:91:e1:0f:13:f3:85:17:50:e7:82:e2:74:a0:d8:
                    3c:f6:08:22:3f:41:84:9a:1c:8b:86:a1:f4:e5:ee:
                    dc:8b:bf:8a:fb:fc:77:6f:e9:78:b5:cb:c1:94:c8:
                    4d:ae:47:5c:2f:0d:d1:fc:09:7b:a8:ef:06:4d:54:
                    22:c4:df:f1:1b:62:2e:d4:d9:d4:e8:cd:37:3b:df:
                    86:14:d9:71:c6:c9:52:6c:9a:1c:d4:f6:c0:cb:17:
                    19:ce:a8:36:ca:fb:f8:9d:9a:fd:48:30:60:cb:74:
                    3b:97:a5:97:8a:93:d9:b0:49:31:fe:d0:54:4a:82:
                    fa:43:62:c7:fe:15:0e:bc:a9:92:41:eb:45:a8:ce:
                    45:b3:f3:06:54:bc:c3:90:14:cc:49:b2:1f:ea:27:
                    ac:86:70:15:59:3f:56:19:cd:b1:ed:d6:c0:b3:3b:
                    9e:96:db:8c:72:d9:97:ef:84:b4:b9:50:20:a3:33:
                    71:47:69:14:36:65:32:37:e4:23:b0:b4:50:d5:a9:
                    76:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:D8:E5:27:02:6B:DA:7F:62:66:5A:B0:77:B5:21:8F:10:57:20:77
            X509v3 Authority Key Identifier:
                keyid:8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/70ea99fdfe5692afa65a1dd6921d52c25989baee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:a00:da00::/40
                  2800:a00:de00::/40

    Signature Algorithm: sha256WithRSAEncryption
         88:a2:7d:eb:5d:16:25:ed:c5:c3:10:57:ea:ac:fb:ee:1b:bf:
         38:39:d4:30:e4:78:25:0d:6e:45:cc:a4:b4:7f:99:6b:f6:78:
         07:84:ea:9b:a4:a3:fc:9f:48:11:6b:ac:e2:3c:b0:7e:7e:1f:
         ac:b7:7e:a2:2e:dd:fa:63:99:5f:c7:a8:4d:6c:f7:ac:78:75:
         65:8c:31:bd:c4:c5:52:ef:95:db:ca:dc:86:60:11:57:9e:a1:
         0e:7a:d7:fc:8f:58:28:b4:fe:32:d4:6e:28:d0:60:8b:3e:bd:
         64:12:ad:fe:8d:f7:0e:30:5c:fa:2a:92:b2:ec:7a:26:d9:bd:
         0d:1d:3f:09:71:dd:5b:f2:8d:89:3d:2b:be:f6:ed:c7:c8:9e:
         c7:a5:ff:01:4b:cb:7b:1e:81:a2:d7:39:c3:44:e4:91:51:af:
         4e:e6:4d:31:55:0e:f5:b0:f6:68:e6:be:64:a8:9f:f8:24:ac:
         a5:5f:ac:b2:15:e3:63:b4:61:91:99:49:ab:fc:3b:80:00:26:
         c3:80:4b:58:e4:df:86:d6:00:6f:68:17:d8:c0:22:f8:36:be:
         14:13:87:3b:6f:91:0b:6a:21:1d:a8:07:b7:5f:ed:97:b5:d8:
         74:cb:28:d1:82:42:5e:8c:f8:bf:72:48:3b:46:55:30:59:e9:
         ff:e0:ff:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----