Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/9e5751de428c34876753a8280e4f16a40cf8f1dd.roa
File:                     9e5751de428c34876753a8280e4f16a40cf8f1dd.roa (raw, json)
Hash identifier:          MAbZvU1Bl/tjG+w3bfge73n9N9gHkbvfRkqbG5JbOBs=
Subject key identifier:   98:82:1E:9C:04:A5:57:9D:BA:BC:93:5B:53:F7:CF:C6:CA:70:91:31
Certificate issuer:       /CN=6930ea902e7534388d28d0e3ac75b7e3026edd6c
Certificate serial:       275431
Authority key identifier: 00:AF:5D:8C:2B:F3:24:E0:01:53:6B:43:3D:55:C6:2E:41:22:ED:B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6930ea902e7534388d28d0e3ac75b7e3026edd6c.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/9e5751de428c34876753a8280e4f16a40cf8f1dd.roa
Signing time:             Thu 15 Feb 2024 15:31:15 +0000
ROA not before:           Thu 15 Feb 2024 15:31:15 +0000
ROA not after:            Sun 15 Feb 2026 15:31:15 +0000
asID:                     6568
IP address blocks:        2800:cd0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2577457 (0x275431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6930ea902e7534388d28d0e3ac75b7e3026edd6c
        Validity
            Not Before: Feb 15 15:31:15 2024 GMT
            Not After : Feb 15 15:31:15 2026 GMT
        Subject: CN=9e5751de428c34876753a8280e4f16a40cf8f1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:55:91:ba:11:23:07:db:21:1e:dd:e1:47:5c:
                    97:56:ba:a6:23:5a:dc:29:95:bf:a7:c6:76:0a:78:
                    cf:36:4e:e9:85:c7:43:96:6e:32:22:ea:5d:d7:ed:
                    75:0b:20:0d:50:d8:32:18:c7:68:58:55:5b:93:e2:
                    6d:d7:71:91:01:41:a5:e3:14:1d:31:e0:46:64:81:
                    57:8d:b8:3f:4d:c0:80:1e:f1:11:31:71:a8:64:ba:
                    1e:55:c0:c1:f8:d5:56:02:28:2d:bf:2b:0d:45:da:
                    19:42:59:3e:b9:68:13:68:71:aa:ad:52:13:51:49:
                    a0:f7:32:d1:60:31:d3:dd:10:1b:bd:f1:10:34:21:
                    5f:e0:33:1d:c1:90:aa:ae:a0:55:6f:70:c3:bb:56:
                    bc:01:40:70:60:db:4d:e3:06:fc:8c:af:75:01:cf:
                    dd:dc:48:59:c3:48:ab:f7:69:1d:64:10:53:f4:93:
                    6f:9d:5d:b8:e0:fd:3e:76:3e:f9:af:d9:3e:da:a5:
                    ef:d3:8b:83:ac:3d:e0:80:24:21:00:ce:87:a7:b0:
                    6f:a9:a0:ab:db:d1:85:c7:b5:28:5f:5f:99:34:79:
                    b7:03:fb:3e:d6:a4:35:d4:0a:cf:b0:da:b7:c3:74:
                    42:01:7f:65:5f:69:70:e4:b7:b1:8a:04:01:27:ca:
                    2b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:82:1E:9C:04:A5:57:9D:BA:BC:93:5B:53:F7:CF:C6:CA:70:91:31
            X509v3 Authority Key Identifier:
                keyid:00:AF:5D:8C:2B:F3:24:E0:01:53:6B:43:3D:55:C6:2E:41:22:ED:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6930ea902e7534388d28d0e3ac75b7e3026edd6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/9e5751de428c34876753a8280e4f16a40cf8f1dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93ea0964-70a6-4adb-807f-1c251a091570/6930ea902e7534388d28d0e3ac75b7e3026edd6c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:cd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         86:a3:51:90:4a:f5:2a:f1:05:64:cd:31:8c:7c:75:7a:78:bd:
         97:24:79:06:f7:e3:7b:ec:4d:28:97:cb:45:14:ed:35:76:91:
         b1:d8:ad:72:33:e1:08:8d:e6:a3:ef:d2:7b:23:a6:f7:c7:c3:
         7d:c2:42:8e:01:0e:e3:62:66:49:ad:ec:09:b5:47:90:f6:d5:
         c7:2f:e5:3e:e6:c4:04:27:0d:ce:dd:bb:f3:f0:ef:e2:6e:94:
         9c:30:7a:59:04:26:a5:d7:95:4a:10:43:33:2c:ce:c3:af:7c:
         d1:96:96:0d:dc:38:2d:1a:91:7d:ae:bc:b4:4c:fa:45:25:21:
         1d:38:41:92:c7:46:72:a0:c8:a8:ee:19:69:80:40:c9:d9:57:
         c5:ef:a7:86:7d:25:b6:b4:47:8b:ce:08:e3:67:9d:c6:ea:94:
         75:99:27:33:33:d5:9f:80:eb:e3:26:4f:99:ff:b6:7d:53:57:
         18:15:18:d1:9f:90:17:08:a5:49:89:6d:1b:e3:23:1e:61:06:
         36:3b:2c:eb:f3:1d:6e:56:cd:12:ef:14:78:f3:d5:bf:24:72:
         d7:a0:6b:35:f0:06:cf:7b:b3:c6:44:23:32:27:0b:db:60:35:
         2f:86:5d:54:98:8a:10:10:7e:f2:81:40:27:42:ac:78:5b:b5:
         35:5e:4e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----