Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a1b580ef-eb96-44c3-ba8a-1348f85a530d/31db22ba38b21458199c4d20f13829c38e88f1ac.roa
File:                     31db22ba38b21458199c4d20f13829c38e88f1ac.roa (raw, json)
Hash identifier:          sQvux1fXziJXeJDZz9qTEjSTXf6uCPVikgmCtCbFmiI=
Subject key identifier:   1F:B6:54:25:62:68:56:2B:83:EB:3F:74:9A:9B:E7:54:4B:08:6E:FD
Certificate issuer:       /CN=e5babceb8619ac5c67e08f3cba305bc7a5427bd2
Certificate serial:       1217C4
Authority key identifier: F6:65:12:73:01:FA:F6:24:3A:35:FF:3B:B8:3D:F4:29:41:B4:DC:C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5babceb8619ac5c67e08f3cba305bc7a5427bd2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a1b580ef-eb96-44c3-ba8a-1348f85a530d/31db22ba38b21458199c4d20f13829c38e88f1ac.roa
Signing time:             Thu 28 Sep 2023 08:30:00 +0000
ROA not before:           Wed 27 Sep 2023 08:30:00 +0000
ROA not after:            Fri 26 Sep 2025 08:30:00 +0000
asID:                     271963
IP address blocks:        2801:18:1800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185732 (0x1217c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5babceb8619ac5c67e08f3cba305bc7a5427bd2
        Validity
            Not Before: Sep 27 08:30:00 2023 GMT
            Not After : Sep 26 08:30:00 2025 GMT
        Subject: CN=31db22ba38b21458199c4d20f13829c38e88f1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:97:c3:6a:81:4e:77:f4:d7:99:1c:6e:73:f5:
                    40:9e:26:b2:cd:d3:54:22:12:ca:88:26:91:76:5b:
                    46:d4:41:de:84:f7:f1:1a:78:f4:c4:3c:ae:55:26:
                    65:be:5a:7c:f5:68:34:5d:ae:f9:1f:cf:ee:70:84:
                    3f:1a:cd:78:ff:8f:b3:c5:5a:24:43:58:e9:b5:84:
                    95:2e:e9:8a:e2:bd:25:b5:80:1b:e0:6d:96:26:9d:
                    b9:f0:f7:9e:c5:7f:82:cb:24:fd:82:22:c9:85:4c:
                    92:78:f9:1c:d8:a3:cc:6c:b7:dc:55:bb:3d:2f:ca:
                    ee:de:87:46:ad:90:7e:32:60:b2:d3:9c:53:5d:7e:
                    2c:f3:94:07:19:a5:82:b4:dd:9a:f2:55:2a:da:51:
                    78:20:5e:66:05:68:02:78:2a:68:ef:e6:25:7a:87:
                    6a:e9:67:f8:f1:f8:26:18:e9:da:f0:2c:c4:c1:77:
                    c3:7d:86:b7:1a:5b:74:1d:45:44:c0:a5:92:b8:71:
                    9a:34:07:32:0d:dc:5b:be:d2:54:71:82:bb:33:bd:
                    b8:40:77:a7:01:4d:bf:4f:3f:1a:eb:cc:7f:ab:9d:
                    f3:3d:50:66:dc:b5:4b:86:6b:6e:4b:ca:d5:e9:97:
                    e4:79:6d:26:36:b2:3a:69:47:3c:27:bd:c3:26:bf:
                    f4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B6:54:25:62:68:56:2B:83:EB:3F:74:9A:9B:E7:54:4B:08:6E:FD
            X509v3 Authority Key Identifier:
                keyid:F6:65:12:73:01:FA:F6:24:3A:35:FF:3B:B8:3D:F4:29:41:B4:DC:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5babceb8619ac5c67e08f3cba305bc7a5427bd2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a1b580ef-eb96-44c3-ba8a-1348f85a530d/31db22ba38b21458199c4d20f13829c38e88f1ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a1b580ef-eb96-44c3-ba8a-1348f85a530d/e5babceb8619ac5c67e08f3cba305bc7a5427bd2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         47:d9:db:1f:35:d1:ca:e6:0a:a3:9f:44:fa:a8:78:df:c7:1f:
         e6:1b:9c:1d:1f:b5:20:8b:b0:bc:8e:5e:25:be:dc:b4:f3:e2:
         16:0f:72:14:33:4c:61:85:0f:aa:77:eb:41:30:2d:cc:c0:f8:
         3b:d5:78:45:52:a0:36:e1:04:88:1b:a1:a1:df:05:11:d7:d6:
         f9:76:ee:1f:7a:c7:be:f8:ab:7c:cc:2c:ae:f6:e8:71:79:cf:
         70:df:b1:dd:d3:58:fd:c9:40:83:cc:72:c6:51:0d:d0:51:d8:
         f2:de:7e:5a:04:bc:00:54:7e:0d:c8:9d:05:48:d0:6e:c8:ec:
         49:87:55:30:82:dd:bf:84:72:77:d4:ac:bc:f2:40:06:8c:ce:
         6f:a3:74:f3:77:a7:b3:5e:24:50:32:0f:61:a0:cd:36:a7:22:
         b7:75:40:78:ff:b5:bc:ba:28:fb:d4:d0:79:c8:90:28:fa:7b:
         f1:f6:58:20:b9:05:16:ec:23:55:c4:06:00:d9:89:87:10:81:
         28:42:59:95:0e:ad:7a:e0:c4:81:ba:f5:43:36:eb:7c:d3:b5:
         dd:24:7a:d8:da:1b:d4:28:f3:ea:af:bd:b6:03:55:d1:39:50:
         59:54:d8:47:32:d1:f2:ff:bf:00:c3:b5:4c:71:80:72:b4:12:
         a1:70:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----