Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/98c9689f-3434-4062-bcd5-1cfcb4e3a59a/9723e5bdc465c912f281ca4e06cf3870beb9f66c.roa
File:                     9723e5bdc465c912f281ca4e06cf3870beb9f66c.roa (raw, json)
Hash identifier:          Zzcp3ACvKWNDoQ9BLL7vIq/qQ4O9foHjAHKCqBZ41E8=
Subject key identifier:   43:8D:A8:32:09:C2:B8:CF:34:1E:00:66:38:FA:E4:D0:5F:EB:17:99
Certificate issuer:       /CN=f1009d82f2c2c0f2e5b2e7f172266cf38cb4f6ce
Certificate serial:       0402A2
Authority key identifier: 8A:80:88:58:54:E7:C0:08:15:1E:13:F9:A2:8D:2F:C7:BB:31:72:70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1009d82f2c2c0f2e5b2e7f172266cf38cb4f6ce.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/98c9689f-3434-4062-bcd5-1cfcb4e3a59a/9723e5bdc465c912f281ca4e06cf3870beb9f66c.roa
Signing time:             Thu 09 Nov 2023 20:51:12 +0000
ROA not before:           Thu 09 Nov 2023 20:51:12 +0000
ROA not after:            Sun 09 Nov 2025 20:51:12 +0000
asID:                     272049
IP address blocks:        2801:1c:9800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262818 (0x402a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1009d82f2c2c0f2e5b2e7f172266cf38cb4f6ce
        Validity
            Not Before: Nov  9 20:51:12 2023 GMT
            Not After : Nov  9 20:51:12 2025 GMT
        Subject: CN=9723e5bdc465c912f281ca4e06cf3870beb9f66c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:a7:2d:9b:88:8d:7b:a4:6f:50:ab:fc:d2:
                    9b:f3:80:a3:ca:59:c9:6c:96:d4:54:dc:7f:c5:e0:
                    34:a0:3e:2d:13:10:d3:0e:0e:aa:bf:96:5a:d6:f1:
                    3c:5e:93:2f:e4:fd:47:bf:ce:57:45:c5:6b:21:fe:
                    e2:e1:6b:25:30:0e:90:60:e4:ca:f9:ab:ba:0f:5e:
                    30:6e:13:fd:b6:68:fe:29:ea:d5:2a:f7:a8:0a:0d:
                    dc:3a:cf:93:5f:db:c5:36:7b:b1:30:b5:24:b1:b4:
                    5f:40:0a:1d:26:8e:a8:ff:23:9f:42:b4:5f:55:ef:
                    a3:50:00:57:f8:e8:97:76:61:40:b0:6b:74:ab:6b:
                    66:25:61:ef:96:70:fc:23:1b:26:6d:8f:83:24:ef:
                    f9:95:1c:86:c9:3c:35:fa:d7:9e:e6:15:95:7b:11:
                    4b:45:88:0b:e0:82:ea:ef:3d:4a:e8:f9:bc:ae:ae:
                    7d:5f:24:f7:33:99:6a:ae:b5:35:57:5e:cd:75:f3:
                    6c:6f:e6:1a:a4:da:c0:71:69:c8:e4:ec:74:6e:0b:
                    cd:ff:3f:ef:e1:eb:cf:d4:ce:38:30:f7:02:0c:e4:
                    5b:b6:c8:c5:b9:71:d2:1d:69:86:e4:f7:ea:5a:b7:
                    47:ee:db:04:87:30:66:0c:97:9c:1b:77:0d:66:cf:
                    87:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8D:A8:32:09:C2:B8:CF:34:1E:00:66:38:FA:E4:D0:5F:EB:17:99
            X509v3 Authority Key Identifier:
                keyid:8A:80:88:58:54:E7:C0:08:15:1E:13:F9:A2:8D:2F:C7:BB:31:72:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1009d82f2c2c0f2e5b2e7f172266cf38cb4f6ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/98c9689f-3434-4062-bcd5-1cfcb4e3a59a/9723e5bdc465c912f281ca4e06cf3870beb9f66c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/98c9689f-3434-4062-bcd5-1cfcb4e3a59a/f1009d82f2c2c0f2e5b2e7f172266cf38cb4f6ce.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:43:7a:a2:06:0e:8a:93:ff:d6:ba:a2:04:02:f8:5b:1a:b7:
         88:45:18:0d:ff:70:ae:77:dd:a1:60:61:3b:7c:b7:c3:43:49:
         15:89:03:d4:cf:9f:4c:78:58:60:5c:77:bc:2c:8d:db:2f:46:
         9f:9c:b6:53:0c:e9:55:d3:3d:7a:ba:5b:86:b4:15:c5:99:86:
         10:2c:90:f3:6b:d6:0f:2f:8c:0b:a5:85:4d:90:e6:59:35:03:
         ea:9c:f9:e7:72:d1:7d:9d:3a:e1:63:f9:90:6b:65:53:77:26:
         57:bf:0d:94:ee:26:82:23:94:a7:ed:d1:2e:ca:5d:7f:79:46:
         d9:6a:23:38:c7:61:e0:c1:37:b5:25:33:7d:db:3d:89:69:97:
         6a:ee:83:fa:cc:37:49:30:f0:7d:ba:df:44:6b:aa:39:3c:a7:
         fc:46:90:0a:81:43:60:62:31:4e:87:c1:53:a1:32:45:3b:aa:
         46:8d:6d:2e:a1:f1:e1:6e:43:82:21:31:34:f0:de:bb:56:3c:
         d4:fb:fa:a5:55:e7:4d:7e:f1:a0:33:97:74:2c:50:22:23:94:
         86:20:1f:57:7b:16:4e:d0:f0:aa:10:45:3f:69:a5:6c:73:43:
         08:e1:ce:7c:f1:1b:13:fe:e0:49:fb:a1:24:41:d5:2a:4c:80:
         81:a9:a8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----