Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/9f737152-27d8-48df-b2de-038c747dd786/70c6459b90bc8f4a2a3ec06456d4329d32b74462.roa
File:                     70c6459b90bc8f4a2a3ec06456d4329d32b74462.roa (raw, json)
Hash identifier:          uGQA6K/CjkjtmHmwmOXFPMsAbmrW148J9zsXP7iFAKc=
Subject key identifier:   17:BC:0C:62:92:56:09:E5:38:79:1C:13:6F:DD:85:D4:1D:57:48:5A
Certificate issuer:       /CN=ddc87dab64fa190dbee15f240971902c2972f198
Certificate serial:       213666
Authority key identifier: AA:8E:D4:43:9E:18:23:59:0C:8A:9E:73:4F:29:4A:4B:82:9D:7B:4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ddc87dab64fa190dbee15f240971902c2972f198.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/9f737152-27d8-48df-b2de-038c747dd786/70c6459b90bc8f4a2a3ec06456d4329d32b74462.roa
Signing time:             Thu 28 Sep 2023 15:20:09 +0000
ROA not before:           Wed 27 Sep 2023 15:20:09 +0000
ROA not after:            Sun 28 Sep 2025 15:20:09 +0000
asID:                     64113
IP address blocks:        2801:11:b800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2176614 (0x213666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddc87dab64fa190dbee15f240971902c2972f198
        Validity
            Not Before: Sep 27 15:20:09 2023 GMT
            Not After : Sep 28 15:20:09 2025 GMT
        Subject: CN=70c6459b90bc8f4a2a3ec06456d4329d32b74462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:66:12:99:d9:4b:3b:bc:18:8a:95:71:d1:
                    32:67:e6:c8:42:72:65:cc:80:e2:1d:f5:64:52:dd:
                    a6:fc:da:c8:1e:84:23:39:fc:83:e5:4d:b2:97:21:
                    f4:a2:54:7e:72:7c:f6:6b:22:0e:99:04:82:71:0b:
                    03:80:2a:74:3d:eb:52:a7:63:94:a7:09:3b:b1:e4:
                    e3:fd:b1:cd:94:2c:1b:8d:4b:73:65:03:8c:84:46:
                    55:0e:2f:dc:0e:b7:79:75:c3:a0:38:73:58:c1:9a:
                    a2:7c:f0:22:35:57:99:49:0c:be:61:81:a3:93:5f:
                    14:d6:bb:36:bd:8b:ad:b3:58:50:04:73:3e:ec:f8:
                    95:e7:92:0c:b7:ea:9a:d4:41:06:d5:c4:e2:de:0f:
                    fa:81:b9:b9:9e:ef:d3:26:9b:21:b1:bc:e1:a5:36:
                    fc:35:37:a1:45:56:2f:cc:2b:08:98:e5:ac:fc:34:
                    90:05:f3:76:8f:8b:36:08:b3:6b:6a:8e:3d:10:88:
                    cd:d7:29:8f:7e:9e:07:b6:99:26:af:34:3b:a3:a0:
                    e3:e7:1a:49:26:79:36:88:fc:9f:a7:09:cd:3a:9c:
                    1b:9b:86:0f:f2:a2:ca:23:0a:62:9b:cd:3e:a7:88:
                    cc:4b:38:fb:6a:45:32:aa:00:19:6c:21:49:77:87:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BC:0C:62:92:56:09:E5:38:79:1C:13:6F:DD:85:D4:1D:57:48:5A
            X509v3 Authority Key Identifier:
                keyid:AA:8E:D4:43:9E:18:23:59:0C:8A:9E:73:4F:29:4A:4B:82:9D:7B:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ddc87dab64fa190dbee15f240971902c2972f198.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/9f737152-27d8-48df-b2de-038c747dd786/70c6459b90bc8f4a2a3ec06456d4329d32b74462.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/9f737152-27d8-48df-b2de-038c747dd786/ddc87dab64fa190dbee15f240971902c2972f198.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0b:a7:77:f5:3b:f3:4d:cf:4d:f9:e1:0b:fc:5e:60:4f:98:83:
         07:27:ea:b8:d9:93:b8:27:ad:1b:cb:58:11:4f:f3:08:15:cf:
         2b:f4:5c:34:91:88:6d:a8:86:66:6c:86:f0:c1:dc:fd:41:c2:
         ab:cb:a9:3f:be:72:9a:d9:28:39:2c:c1:5f:24:e8:7a:a4:75:
         53:4b:44:bc:35:91:b3:61:f0:db:28:3f:0b:4e:f4:66:81:63:
         ec:78:39:3c:3e:a0:4b:9f:2b:d8:7c:78:a7:56:d0:ce:e0:aa:
         69:f9:cd:7a:24:87:7e:d7:4f:b1:88:b7:74:72:22:ef:ee:dd:
         72:41:b0:2c:8b:2b:c7:9c:a3:9d:83:ce:0a:a0:8c:48:f1:b0:
         e4:fc:1b:15:80:b9:47:ce:7a:65:da:51:7e:05:ca:c5:46:80:
         f6:00:58:3c:d0:b1:cc:f5:38:e4:17:e6:c1:2c:ce:a4:ef:1a:
         fa:54:30:fe:dd:1f:6f:43:b5:ca:da:f3:df:be:61:c3:5f:69:
         e0:ec:03:3c:a8:d5:05:aa:41:48:07:ed:97:79:27:43:06:0d:
         74:82:55:7f:58:fd:d6:29:97:08:54:89:19:07:ca:19:bc:4c:
         ad:dc:17:96:ac:c1:8e:e8:be:45:f7:f3:59:f5:dd:2c:29:70:
         92:4a:ce:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----