Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/979411df-5480-44ca-a2da-babacbd9f00f/9a58b4723e9de6ae6427a4a6aa4ce11462392597.roa
File:                     9a58b4723e9de6ae6427a4a6aa4ce11462392597.roa (raw, json)
Hash identifier:          S1hJfWErk3shrOv59J+7N+v7cBUnjE7k9teoPjDHxl4=
Subject key identifier:   E7:31:EE:DA:20:B3:8A:91:3D:D7:D3:DA:6B:74:EF:AB:C1:57:B8:5C
Certificate issuer:       /CN=136e911a34c97fedc18c6ee34d6299fe6a22dfdf
Certificate serial:       06C531
Authority key identifier: 0B:A9:C7:05:26:18:57:B9:C6:58:EC:28:BF:D8:1A:7B:3E:FF:8A:6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/136e911a34c97fedc18c6ee34d6299fe6a22dfdf.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/979411df-5480-44ca-a2da-babacbd9f00f/9a58b4723e9de6ae6427a4a6aa4ce11462392597.roa
Signing time:             Thu 11 Jan 2024 13:35:01 +0000
ROA not before:           Thu 11 Jan 2024 13:35:01 +0000
ROA not after:            Sun 11 Jan 2026 13:35:01 +0000
asID:                     272944
IP address blocks:        2801:1b:d800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443697 (0x6c531)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=136e911a34c97fedc18c6ee34d6299fe6a22dfdf
        Validity
            Not Before: Jan 11 13:35:01 2024 GMT
            Not After : Jan 11 13:35:01 2026 GMT
        Subject: CN=9a58b4723e9de6ae6427a4a6aa4ce11462392597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6b:e7:7d:ab:02:c8:3e:ff:c8:6e:fe:1f:fc:
                    4c:48:0e:74:5c:50:e9:a2:84:66:7f:7b:b4:ab:66:
                    79:a8:b8:61:2b:77:3b:a7:1c:2c:66:39:a8:49:e7:
                    e4:ca:08:e3:4b:c4:ac:15:a8:9e:ef:ba:98:c2:66:
                    10:3a:74:f2:cd:b2:6c:41:f9:cd:8e:c5:d2:7b:9e:
                    40:aa:40:0f:93:f5:3b:a5:17:99:15:97:a8:1b:d1:
                    88:99:bc:c2:23:0d:6c:1b:cb:46:a8:91:55:55:ef:
                    8f:ee:39:c2:9a:20:53:f9:e9:b5:13:60:d5:52:56:
                    48:3b:6e:97:29:82:1d:1d:b3:0b:42:32:67:de:1b:
                    72:54:e8:6d:3c:9d:b6:5a:b9:56:bd:a2:85:a3:67:
                    64:11:1f:cd:19:44:41:d0:0b:6b:e4:aa:09:dd:46:
                    4d:9e:05:d7:60:5a:c6:e1:b7:88:53:90:0c:73:41:
                    9a:e7:06:40:8f:f8:ad:82:4b:a0:b3:03:db:f2:d9:
                    89:1e:c0:cf:70:1d:24:54:7d:9c:9d:67:d3:bb:8b:
                    3d:7e:f2:36:7c:37:76:93:a1:f4:2a:a6:da:e7:da:
                    75:c9:4a:2c:8e:cf:ba:af:d5:13:24:f0:c2:28:12:
                    d3:ab:b2:8e:ea:ed:e4:5a:ad:2c:9f:50:8b:da:ba:
                    6f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:31:EE:DA:20:B3:8A:91:3D:D7:D3:DA:6B:74:EF:AB:C1:57:B8:5C
            X509v3 Authority Key Identifier:
                keyid:0B:A9:C7:05:26:18:57:B9:C6:58:EC:28:BF:D8:1A:7B:3E:FF:8A:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/136e911a34c97fedc18c6ee34d6299fe6a22dfdf.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/979411df-5480-44ca-a2da-babacbd9f00f/9a58b4723e9de6ae6427a4a6aa4ce11462392597.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/979411df-5480-44ca-a2da-babacbd9f00f/136e911a34c97fedc18c6ee34d6299fe6a22dfdf.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:b0:3e:95:99:ae:49:91:02:3e:e3:ee:e5:89:cb:0b:bc:2c:
         a6:d2:ab:f2:19:1b:75:a3:ab:5c:64:91:9c:5b:01:54:c7:71:
         dd:0e:aa:2c:c5:ab:e8:08:c7:bb:3c:40:ea:02:53:2c:cd:f3:
         14:f7:08:a0:25:4b:91:3a:e0:7b:27:e4:37:db:e9:e6:a4:3a:
         0b:f6:eb:27:c8:e8:57:ba:73:ba:b6:ea:ca:74:ee:fe:04:d9:
         a5:ed:de:bd:83:d6:95:d7:c6:b0:b9:ba:9d:db:f0:51:1c:e2:
         e1:8c:2a:d1:13:4d:e0:f1:ad:b2:f2:c7:68:58:b8:4b:cb:59:
         4a:fc:e7:b1:66:f3:4b:c7:2c:b1:bc:23:00:ce:bf:90:e2:64:
         a5:82:d0:ad:02:5e:ef:88:e4:75:45:fe:0c:6b:1e:cb:92:e7:
         7b:ca:f2:e6:e6:e8:95:7e:cd:c8:6b:9a:2b:7d:45:45:2c:5c:
         d9:45:3e:cb:55:03:7b:55:7e:2d:1e:72:96:ad:cf:8f:f2:26:
         2b:31:a8:98:60:14:49:46:21:aa:1a:4b:b1:03:60:1f:6e:fa:
         5e:b2:2e:1d:e7:22:15:ba:b1:1e:f7:91:b7:bc:46:e8:9a:43:
         86:af:1b:14:a7:be:b0:7e:f2:dd:a8:ff:f5:37:d1:2f:83:3d:
         ea:4b:8e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----