Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/3897310afbd185bfb0f27f0edea7c627c63ad3e5.roa
File:                     3897310afbd185bfb0f27f0edea7c627c63ad3e5.roa (raw, json)
Hash identifier:          8Sf9qQTvw//WjB9/mEQeJaQnGH7BInEGOtBCd/rNwD8=
Subject key identifier:   3F:64:99:1B:65:DF:93:9C:B5:BF:34:D3:DD:2E:93:57:54:EB:FF:02
Certificate issuer:       /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial:       28675D
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/3897310afbd185bfb0f27f0edea7c627c63ad3e5.roa
Signing time:             Fri 01 Mar 2024 13:57:57 +0000
ROA not before:           Fri 01 Mar 2024 13:57:57 +0000
ROA not after:            Sun 01 Mar 2026 13:57:57 +0000
asID:                     269836
IP address blocks:        2800:490:e000:b100::/56 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2647901 (0x28675d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
        Validity
            Not Before: Mar  1 13:57:57 2024 GMT
            Not After : Mar  1 13:57:57 2026 GMT
        Subject: CN=3897310afbd185bfb0f27f0edea7c627c63ad3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:37:10:a5:21:85:18:04:ef:16:50:af:0d:
                    a1:76:06:af:08:e1:8f:26:79:aa:10:34:eb:87:7f:
                    3c:d4:13:b3:28:fe:62:2d:04:3b:97:1c:f2:76:15:
                    b3:53:e2:98:cf:07:4c:8e:46:b0:7c:eb:08:69:84:
                    b5:be:b5:cd:28:df:15:15:03:b9:0e:06:13:89:f8:
                    8d:f0:16:18:ab:2e:aa:d3:68:bf:0f:e0:49:91:f0:
                    b2:4f:f6:05:4a:2f:90:56:26:68:79:dd:e2:60:31:
                    d6:76:c3:2f:eb:d7:fc:3a:42:f9:fd:88:6a:d4:73:
                    c6:a3:50:2b:3c:66:e1:ff:98:94:d1:d2:dc:1f:1c:
                    f4:fe:4d:a1:0e:c9:f8:69:ca:ec:7f:12:5b:77:f0:
                    90:a9:39:ea:93:bf:11:9f:c1:5b:a6:ac:74:64:90:
                    8e:38:39:a0:35:5a:28:c1:00:92:d2:a9:e8:25:93:
                    a7:12:c8:d8:92:94:4a:76:e3:03:a7:b1:e7:a8:ef:
                    20:7b:39:d7:0f:a6:23:eb:cd:f2:ca:0f:4f:72:8e:
                    4c:c6:c5:37:56:10:22:30:5c:51:37:18:0c:d8:62:
                    fe:52:fb:71:8a:13:18:1d:43:5c:ce:b8:ad:48:8a:
                    24:f4:00:83:bb:53:a7:90:53:9b:93:c0:52:ce:a4:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:64:99:1B:65:DF:93:9C:B5:BF:34:D3:DD:2E:93:57:54:EB:FF:02
            X509v3 Authority Key Identifier:
                keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/3897310afbd185bfb0f27f0edea7c627c63ad3e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:490:e000:b100::/56

    Signature Algorithm: sha256WithRSAEncryption
         15:5c:a4:9d:6d:15:b0:98:f3:e6:ce:bf:94:1a:07:58:9a:97:
         7b:97:32:7f:8a:cd:88:e5:65:b5:dc:39:e5:00:cb:43:de:18:
         da:36:ca:01:18:b1:e4:cd:9c:15:d8:14:b4:e9:da:f9:a7:0b:
         76:bf:67:d9:97:91:d7:d9:17:52:66:fc:cf:a2:23:25:07:f9:
         5a:9d:d9:f9:18:31:6b:63:9d:33:1f:23:82:a6:a1:81:58:f5:
         75:74:33:ba:c8:da:05:f2:6d:8f:dd:1d:a9:a0:98:69:dc:06:
         63:8a:d2:d7:3b:ae:00:db:75:de:20:12:94:76:cc:7f:54:e3:
         14:ee:3a:f4:26:38:90:05:54:63:dc:74:d8:18:39:73:40:ff:
         a3:c8:fa:a3:d8:8c:cc:99:7d:09:e6:e9:33:ee:c1:a2:e9:68:
         26:d8:08:7d:82:9a:24:a6:99:51:17:78:c1:c4:a2:7b:4b:84:
         3a:a5:22:84:de:2d:b4:fb:4b:01:d1:b7:63:03:63:79:f5:5d:
         07:4a:31:74:e0:16:e8:35:18:be:96:c5:4c:87:2c:cf:24:87:
         35:31:89:43:d1:27:78:1c:5d:b0:d0:32:b6:17:0f:ac:9a:1c:
         07:5f:22:e7:53:62:71:87:11:3d:09:cf:bf:10:2d:e9:68:7e:
         49:20:ca:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----