Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98bdc24e-77c2-4228-a5cb-8642c8ddbca8/556ca506391183eab46fd350bd1986945933c4f4.roa
File:                     556ca506391183eab46fd350bd1986945933c4f4.roa (raw, json)
Hash identifier:          lQc4CSc2XjqSjOHPdQ+1fcpGIhSkKBBJP6p78ylWXBQ=
Subject key identifier:   E9:08:98:EF:30:1B:3E:7B:FF:3F:8B:19:C1:CE:E5:85:95:B4:A6:43
Certificate issuer:       /CN=61f535c94e6aaf26b88c639f520dbe67e558d169
Certificate serial:       0B28AA
Authority key identifier: F5:F3:3D:6C:93:78:98:C2:70:F7:EF:3B:A8:9E:5D:C9:57:6B:3D:CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f535c94e6aaf26b88c639f520dbe67e558d169.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98bdc24e-77c2-4228-a5cb-8642c8ddbca8/556ca506391183eab46fd350bd1986945933c4f4.roa
Signing time:             Mon 31 Jul 2023 16:57:34 +0000
ROA not before:           Sun 30 Jul 2023 16:57:34 +0000
ROA not after:            Thu 31 Jul 2025 16:57:34 +0000
asID:                     13489
IP address blocks:        2801:1f:9800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731306 (0xb28aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61f535c94e6aaf26b88c639f520dbe67e558d169
        Validity
            Not Before: Jul 30 16:57:34 2023 GMT
            Not After : Jul 31 16:57:34 2025 GMT
        Subject: CN=556ca506391183eab46fd350bd1986945933c4f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:86:aa:7b:2c:53:8c:e1:3e:e4:9f:db:2b:16:
                    61:dc:ae:7f:36:cb:48:ff:81:fe:fb:3a:89:fb:23:
                    bf:48:22:e9:c3:4f:b2:64:c2:4c:a5:d5:73:48:d6:
                    90:5f:a7:60:99:d8:e4:29:ff:fd:d1:86:d2:f0:8e:
                    62:31:bc:db:04:09:0c:e8:d7:9e:b3:d9:1d:57:00:
                    ed:bc:c7:40:59:40:9d:b0:22:ef:33:b9:e7:2c:8a:
                    a6:93:69:5b:83:9d:60:59:18:0f:d3:96:4c:05:2f:
                    6c:c5:0d:5a:61:74:6c:08:83:bb:d3:67:e4:6b:68:
                    b5:ea:5a:b5:df:cf:5a:b2:cf:a3:07:e7:d6:f8:b9:
                    7d:f2:da:3e:b9:b8:de:5b:89:92:6f:37:bb:4a:23:
                    50:d9:6f:5e:0d:81:f8:ec:d3:b1:c4:bd:88:0a:12:
                    a8:55:36:1d:52:b4:fe:ab:a1:ba:8d:b7:df:a5:ba:
                    db:ab:7c:d6:a3:29:59:30:c0:e0:71:22:c3:9a:c8:
                    0c:a1:6d:21:e2:25:78:cd:6d:ee:aa:c4:dc:bd:ed:
                    8d:2d:6d:59:0a:81:27:fd:bb:fc:d2:2d:9d:b6:29:
                    43:e8:e5:b4:bd:f0:ff:37:7a:62:57:8b:51:e0:4f:
                    77:87:0b:47:c5:66:64:f9:7a:3d:58:b7:50:24:bf:
                    bb:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:08:98:EF:30:1B:3E:7B:FF:3F:8B:19:C1:CE:E5:85:95:B4:A6:43
            X509v3 Authority Key Identifier:
                keyid:F5:F3:3D:6C:93:78:98:C2:70:F7:EF:3B:A8:9E:5D:C9:57:6B:3D:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61f535c94e6aaf26b88c639f520dbe67e558d169.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98bdc24e-77c2-4228-a5cb-8642c8ddbca8/556ca506391183eab46fd350bd1986945933c4f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98bdc24e-77c2-4228-a5cb-8642c8ddbca8/61f535c94e6aaf26b88c639f520dbe67e558d169.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:df:29:06:96:d8:84:36:4c:82:81:60:f4:21:91:7c:76:c9:
         a8:08:5d:57:44:95:16:63:80:a6:a3:4a:99:fe:92:16:04:59:
         17:41:de:27:19:ed:6b:f5:fd:e0:85:65:28:fd:f7:14:76:31:
         48:48:c1:ec:68:90:b1:32:ac:73:ea:e0:48:fd:60:ee:f6:10:
         ad:f8:46:ab:2e:e5:19:d6:1b:28:30:89:bd:82:c0:a3:be:a8:
         40:08:3a:c3:ff:26:61:31:f5:2b:85:01:6d:2c:73:1e:af:fb:
         a2:fb:72:ef:77:64:98:aa:50:dc:59:02:dd:02:b2:9e:81:11:
         26:74:7a:ea:1e:06:ab:2c:9a:77:34:2c:61:54:15:87:4b:7f:
         cf:7b:ce:1f:e3:f3:86:2e:23:ee:4d:75:af:de:33:f2:e5:08:
         b6:94:8f:9a:02:73:77:6a:ba:dc:d8:2c:07:fc:ef:83:02:34:
         66:f0:2f:45:89:15:80:88:30:28:39:5e:95:88:dc:63:ae:b9:
         55:67:39:54:a1:2b:5f:70:93:07:22:9b:80:fb:97:7d:e0:26:
         c5:d5:61:db:8d:fc:98:91:2c:02:32:d5:fd:75:89:ff:ef:35:
         69:c5:a5:ef:56:7b:b8:14:8b:9d:ec:25:25:95:0c:38:cd:99:
         e1:67:f4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----