Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/1f2118846d9136feb8f83b78d8f54394d3ed1995.roa
File:                     1f2118846d9136feb8f83b78d8f54394d3ed1995.roa (raw, json)
Hash identifier:          lds40uH4CwNeiElTWnWgkU0/JisrKLsdxB8ZHsY+ONg=
Subject key identifier:   46:6F:CA:D9:F5:09:E1:CE:9D:99:80:A1:CC:2F:49:4A:6C:40:AD:0C
Certificate issuer:       /CN=6930ea902e7534388d28d0e3ac75b7e3026edd6c
Certificate serial:       1FA168
Authority key identifier: 00:AF:5D:8C:2B:F3:24:E0:01:53:6B:43:3D:55:C6:2E:41:22:ED:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6930ea902e7534388d28d0e3ac75b7e3026edd6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/1f2118846d9136feb8f83b78d8f54394d3ed1995.roa
Signing time:             Fri 24 Mar 2023 08:31:46 +0000
ROA not before:           Thu 23 Mar 2023 08:31:46 +0000
ROA not after:            Sat 22 Mar 2025 08:31:46 +0000
asID:                     6568
IP address blocks:        2800:cd0:3a00::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2072936 (0x1fa168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6930ea902e7534388d28d0e3ac75b7e3026edd6c
        Validity
            Not Before: Mar 23 08:31:46 2023 GMT
            Not After : Mar 22 08:31:46 2025 GMT
        Subject: CN=1f2118846d9136feb8f83b78d8f54394d3ed1995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:af:da:6f:5c:41:7c:96:cb:9e:5e:ff:ea:
                    c7:26:b1:df:f8:60:8c:d3:df:aa:32:d2:40:ea:27:
                    bb:17:68:ef:76:e1:87:42:04:9d:43:83:e7:83:e0:
                    36:23:a8:b0:a2:7b:76:49:71:02:63:fa:61:1d:c0:
                    78:9f:21:ce:4b:95:ff:84:88:18:9e:fa:02:15:cc:
                    92:3d:c2:e2:1f:67:01:66:62:ad:11:bc:e5:fa:a8:
                    69:15:a1:bd:c0:ad:4c:0e:d4:80:d9:50:b3:24:67:
                    ca:3f:7b:ca:ee:9e:cc:4b:c5:9d:bb:b2:ec:98:48:
                    23:8f:e3:9f:c4:f4:e4:97:cf:56:11:a4:21:31:ab:
                    a1:72:68:cc:4c:43:c5:fc:fd:13:15:c8:25:d7:2f:
                    c5:ae:ee:47:ae:79:eb:3b:8b:26:e0:45:fc:f3:81:
                    b5:e0:dc:c3:81:61:8e:98:95:b0:4b:38:e3:be:9b:
                    e4:3b:a9:41:3e:74:88:d6:a2:0b:4e:1a:7e:13:d9:
                    9b:a3:8d:fc:42:4c:3a:4c:74:f8:ff:11:fc:f7:06:
                    80:0e:bd:25:85:49:11:d7:d0:72:3e:08:42:58:6e:
                    a9:54:9c:76:69:b5:11:40:31:69:4a:64:f6:a5:a7:
                    d7:3b:8a:18:d6:03:24:6a:35:ac:09:e9:aa:14:2f:
                    5f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6F:CA:D9:F5:09:E1:CE:9D:99:80:A1:CC:2F:49:4A:6C:40:AD:0C
            X509v3 Authority Key Identifier:
                keyid:00:AF:5D:8C:2B:F3:24:E0:01:53:6B:43:3D:55:C6:2E:41:22:ED:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6930ea902e7534388d28d0e3ac75b7e3026edd6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/1f2118846d9136feb8f83b78d8f54394d3ed1995.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/6930ea902e7534388d28d0e3ac75b7e3026edd6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:cd0:3a00::/48

    Signature Algorithm: sha256WithRSAEncryption
         36:06:2c:2a:a5:66:c7:12:31:4a:8d:bc:e6:a7:cd:6d:71:32:
         b6:78:91:b6:9a:de:0d:60:c3:be:d8:46:ae:03:dd:42:84:1e:
         42:66:20:7c:9f:a6:42:a3:24:81:0b:eb:82:bc:7f:88:76:81:
         6b:9e:ef:85:75:f6:7f:5a:71:2c:fa:9e:2b:5a:81:a8:a5:2b:
         fe:75:b0:6b:83:b4:ba:24:2c:20:4f:3f:c2:6c:75:32:ee:94:
         81:6f:51:fb:d1:78:c5:32:90:7b:a7:e8:c1:ed:6d:bc:4d:c9:
         8c:7e:2f:24:9a:38:27:ad:d9:60:e8:99:ab:cc:15:12:e5:a5:
         95:3d:44:d6:39:10:7e:c8:a4:99:3e:22:4b:ab:f5:5b:22:d3:
         26:cb:24:f8:28:08:58:83:73:2a:ca:73:53:86:73:eb:d1:51:
         d2:d3:2d:6c:ee:a4:95:16:a6:7f:84:26:0d:fd:a5:df:6c:e6:
         5f:69:f0:19:6d:de:72:7e:7d:ca:cc:5f:c7:0c:1e:5d:43:f4:
         ee:5d:91:ae:81:c9:22:45:fa:f1:c2:24:7b:21:0e:34:ac:c2:
         77:9b:ff:2f:3e:8a:2c:2d:59:6f:d0:ac:b9:88:6e:ba:f9:ea:
         a6:b9:34:4b:24:39:0b:97:7d:16:06:03:8d:8c:e3:c2:85:14:
         3f:15:32:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----