Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98c9689f-3434-4062-bcd5-1cfcb4e3a59a/5310a44cb8881a0ef8daf21239bf6b61e51c6c92.roa
File:                     5310a44cb8881a0ef8daf21239bf6b61e51c6c92.roa (raw, json)
Hash identifier:          lUn1Ytq7FMq/wHqEY3njuhvHTOjrAhQyTwBLX/FM0Sc=
Subject key identifier:   21:58:D8:A7:40:E2:72:D1:F0:BE:1D:F0:8F:3F:85:47:E6:40:0A:1D
Certificate issuer:       /CN=f1009d82f2c2c0f2e5b2e7f172266cf38cb4f6ce
Certificate serial:       040757
Authority key identifier: 8A:80:88:58:54:E7:C0:08:15:1E:13:F9:A2:8D:2F:C7:BB:31:72:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1009d82f2c2c0f2e5b2e7f172266cf38cb4f6ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98c9689f-3434-4062-bcd5-1cfcb4e3a59a/5310a44cb8881a0ef8daf21239bf6b61e51c6c92.roa
Signing time:             Thu 09 Nov 2023 20:53:30 +0000
ROA not before:           Thu 09 Nov 2023 20:53:30 +0000
ROA not after:            Sun 09 Nov 2025 20:53:30 +0000
asID:                     19429
IP address blocks:        2801:1c:9800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264023 (0x40757)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1009d82f2c2c0f2e5b2e7f172266cf38cb4f6ce
        Validity
            Not Before: Nov  9 20:53:30 2023 GMT
            Not After : Nov  9 20:53:30 2025 GMT
        Subject: CN=5310a44cb8881a0ef8daf21239bf6b61e51c6c92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:de:87:04:02:e5:69:20:8d:ec:ff:33:9f:e1:
                    c9:5e:17:12:b6:31:b4:d3:17:a5:55:ce:b4:21:56:
                    99:59:02:33:5b:42:da:09:35:9b:aa:90:ce:e6:de:
                    ee:e9:3f:9d:c8:d0:5a:7b:10:a7:bd:b9:35:3a:b2:
                    84:f8:75:a1:ac:f5:0d:62:ed:18:2f:d5:c8:9e:c7:
                    28:bb:ee:99:cf:69:dc:a8:0f:6f:65:e8:ae:5f:cf:
                    95:ab:c2:b1:4b:02:20:c3:0b:03:97:91:59:60:d9:
                    41:38:82:77:a2:3a:ff:2a:cf:93:9e:b6:5f:33:47:
                    d6:f9:58:a0:15:68:9e:6c:e0:6f:ee:93:a9:2d:00:
                    7f:11:81:e9:73:ce:55:64:64:18:5e:11:ae:8a:ef:
                    09:67:27:62:ba:0f:75:9b:82:29:bc:d9:0f:69:c6:
                    06:2a:9e:83:26:9d:03:08:2f:77:15:9d:2a:4a:c4:
                    4c:b2:ba:d0:df:71:fe:a0:40:10:60:cf:d1:84:dc:
                    81:a2:3f:13:4f:3e:ba:51:d6:77:09:4a:0b:18:81:
                    e5:56:dd:2f:aa:29:6f:60:42:46:a7:b2:57:d0:3f:
                    63:9a:34:14:99:07:97:d8:c3:12:3a:81:90:16:11:
                    d2:c6:34:76:4c:ff:39:c0:92:fa:a6:cc:d3:6f:a6:
                    f3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:58:D8:A7:40:E2:72:D1:F0:BE:1D:F0:8F:3F:85:47:E6:40:0A:1D
            X509v3 Authority Key Identifier:
                keyid:8A:80:88:58:54:E7:C0:08:15:1E:13:F9:A2:8D:2F:C7:BB:31:72:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1009d82f2c2c0f2e5b2e7f172266cf38cb4f6ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98c9689f-3434-4062-bcd5-1cfcb4e3a59a/5310a44cb8881a0ef8daf21239bf6b61e51c6c92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98c9689f-3434-4062-bcd5-1cfcb4e3a59a/f1009d82f2c2c0f2e5b2e7f172266cf38cb4f6ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:16:ad:60:56:41:ad:44:63:a7:0d:99:ad:88:19:71:a4:d3:
         cb:75:d8:33:fe:ad:04:68:c4:7e:27:41:33:42:a7:b2:01:1b:
         87:2d:e5:a7:70:b4:19:56:4e:1f:d4:ac:68:fb:00:cd:b0:d5:
         a9:96:85:ce:f9:af:a4:98:0f:f1:e1:d3:a5:c9:85:66:db:5c:
         7f:81:95:bf:8b:f9:d9:6e:e5:7c:79:af:68:c6:41:9d:62:8f:
         33:82:1f:7f:26:cd:ff:a1:01:fb:3c:49:14:90:83:c4:da:fd:
         6a:cc:cf:f6:4c:3f:80:d5:c8:7b:cd:3c:52:8c:ed:04:90:82:
         8f:ae:e1:32:34:9a:05:00:7a:a7:ef:b1:91:7f:67:f6:82:7f:
         7d:22:b8:b4:03:27:52:31:88:d6:c8:93:e7:5b:a2:b6:1f:e0:
         cf:36:2a:49:c8:9f:9a:14:8c:de:25:15:cc:4f:80:2f:94:fb:
         5e:b9:e8:6c:ce:90:8b:58:e1:8e:01:c3:c2:ac:54:e7:78:e1:
         10:2f:71:02:60:b7:1f:85:38:48:7e:8e:4b:7a:f0:26:86:ed:
         86:59:a2:ee:d5:ba:85:47:5e:98:01:d3:60:e7:8d:a5:3d:3a:
         9f:eb:c0:98:1d:3f:70:38:47:ba:44:19:5a:44:08:36:f1:71:
         3e:18:f5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----