Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/c3d493b6816f85617642d44e06fe58bb4d7324ab.roa
File:                     c3d493b6816f85617642d44e06fe58bb4d7324ab.roa (raw, json)
Hash identifier:          ylofktT/5UJHdi5sSSdLqRQG/W88at1GbI5MnHT0jzI=
Subject key identifier:   F5:2D:40:78:D6:3A:2E:EA:F5:F6:46:0F:4B:D7:0B:3B:1F:CC:63:BF
Certificate issuer:       /CN=39c565bbc1beca70ca953d23feff753b392a17a7
Certificate serial:       286958
Authority key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/c3d493b6816f85617642d44e06fe58bb4d7324ab.roa
Signing time:             Fri 01 Mar 2024 13:58:23 +0000
ROA not before:           Fri 01 Mar 2024 13:58:23 +0000
ROA not after:            Sun 01 Mar 2026 13:58:23 +0000
asID:                     269836
IP address blocks:        2800:490:e000:f200::/56 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2648408 (0x286958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39c565bbc1beca70ca953d23feff753b392a17a7
        Validity
            Not Before: Mar  1 13:58:23 2024 GMT
            Not After : Mar  1 13:58:23 2026 GMT
        Subject: CN=c3d493b6816f85617642d44e06fe58bb4d7324ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:27:11:e4:d3:2b:81:17:66:ab:2a:17:fb:c2:
                    07:78:9a:33:c0:72:21:d9:91:cb:75:ca:31:db:ed:
                    77:ce:bc:c4:67:2f:9c:d2:3b:1f:bc:b2:46:ab:1c:
                    e7:55:12:66:12:17:ca:dd:c2:16:3b:8d:8b:57:5d:
                    75:68:bf:29:5f:69:3f:9b:8f:e1:4e:f8:57:39:e1:
                    26:6d:f2:9b:4f:fb:11:a1:df:f9:01:1e:30:f9:36:
                    09:43:f3:01:7a:10:6b:a0:94:ee:e9:88:b4:cf:db:
                    f8:64:6d:2f:b8:96:4d:28:5c:6a:80:30:c4:0b:b0:
                    61:cf:d4:12:f1:5a:aa:57:9c:b4:9a:bd:8e:82:0a:
                    6f:87:d7:22:e9:65:f8:23:4f:90:62:a6:51:ac:ae:
                    eb:1c:64:43:48:11:a5:b4:0b:3a:3a:5d:20:d5:56:
                    79:65:cb:43:43:62:9c:bf:52:9e:1b:fe:30:a4:79:
                    8c:f6:49:0c:e0:68:1d:1e:18:ef:f3:94:8a:86:49:
                    81:27:37:e9:3c:67:ab:1a:77:10:da:5f:7d:82:19:
                    58:3a:95:60:46:59:72:73:18:41:25:89:4e:69:08:
                    cc:ab:45:19:71:e9:36:75:81:c2:de:32:93:d7:68:
                    74:9c:f0:cf:d5:07:e6:db:d8:32:b8:40:45:45:df:
                    a6:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2D:40:78:D6:3A:2E:EA:F5:F6:46:0F:4B:D7:0B:3B:1F:CC:63:BF
            X509v3 Authority Key Identifier:
                keyid:87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/c3d493b6816f85617642d44e06fe58bb4d7324ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:490:e000:f200::/56

    Signature Algorithm: sha256WithRSAEncryption
         9e:ab:07:10:7a:9c:01:08:fc:83:91:fa:90:57:00:f9:54:14:
         2d:11:a0:f6:ae:24:a7:f5:4f:0f:c1:f6:b5:0e:1a:d8:81:70:
         90:ee:9a:0b:1d:e2:c5:cd:32:bf:be:5a:dc:ff:98:33:df:f9:
         f3:db:83:f2:8d:e7:ee:0a:c5:2e:db:9f:61:f9:0d:12:4b:41:
         1c:0c:f5:52:d2:08:9c:3d:f0:3d:7f:89:25:00:7d:b0:b1:5c:
         21:55:59:3b:00:e5:84:33:c7:6b:a5:7e:45:60:91:d7:ff:d2:
         b2:b3:95:79:34:75:93:c7:b7:71:45:24:8d:85:2e:50:7d:e9:
         41:aa:1a:1c:9a:ce:87:69:e6:c5:4e:f9:3f:08:6a:0d:6f:9c:
         2e:35:79:64:94:d5:4d:4e:6f:45:a3:90:b1:68:5d:3b:9e:64:
         71:49:a4:34:12:e1:b3:f0:cf:df:10:1b:d1:5c:f0:60:8d:16:
         84:f4:98:79:09:c4:77:d4:f0:50:9d:51:25:d0:ca:c6:28:7f:
         5a:4d:42:6d:cb:c5:c4:3d:34:a7:d4:42:aa:ff:78:75:eb:d2:
         24:64:20:33:e9:cd:f4:66:e6:74:c3:48:bf:d8:55:12:a1:fd:
         3f:64:1c:56:52:c7:3a:af:cc:25:51:7c:41:3d:c2:67:4d:07:
         12:4b:06:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----