Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a6633726-35df-4b6e-b11f-eb20fb2ebf30/adef8a719c7444c80ae186fa415c0706f60e419f.roa
File:                     adef8a719c7444c80ae186fa415c0706f60e419f.roa (raw, json)
Hash identifier:          JHiSltE0jKwRs83U0zXbzUu5AHWeVI/cZSxzrjwFoE0=
Subject key identifier:   96:FA:96:C9:4D:D2:EF:24:9D:D2:17:D8:2E:DF:0F:3D:B5:DA:41:E1
Certificate issuer:       /CN=3ebe12192c5a777cd4ac7f461d9df9d8027ae845
Certificate serial:       035F
Authority key identifier: A0:03:8A:CA:39:BB:A5:36:62:CC:0C:10:5F:2C:01:7F:A7:6A:DF:B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ebe12192c5a777cd4ac7f461d9df9d8027ae845.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a6633726-35df-4b6e-b11f-eb20fb2ebf30/adef8a719c7444c80ae186fa415c0706f60e419f.roa
Signing time:             Wed 18 Jan 2023 22:01:10 +0000
ROA not before:           Tue 17 Jan 2023 21:59:40 +0000
ROA not after:            Sat 18 Jan 2025 21:59:40 +0000
asID:                     27817
IP address blocks:        2801:159::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 863 (0x35f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ebe12192c5a777cd4ac7f461d9df9d8027ae845
        Validity
            Not Before: Jan 17 21:59:40 2023 GMT
            Not After : Jan 18 21:59:40 2025 GMT
        Subject: CN=adef8a719c7444c80ae186fa415c0706f60e419f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:bb:db:46:3e:1a:67:ef:6d:e6:af:0e:94:a2:
                    2d:29:59:d6:dc:b2:b7:c7:38:ae:74:a3:74:97:c9:
                    6e:7a:33:60:53:30:79:a5:9c:83:6e:8a:8e:d5:33:
                    b7:9a:45:8b:04:c9:98:c0:80:5b:08:d5:1f:68:31:
                    da:ce:4d:ac:93:96:af:96:70:a1:33:b7:30:25:24:
                    75:05:33:a2:3f:2b:f9:eb:a3:61:83:0b:8e:d1:39:
                    e9:d0:ea:4f:6d:ed:53:cd:e7:68:1e:1a:40:bf:43:
                    a3:51:2c:b5:d7:36:37:1c:14:a7:4c:dd:0c:11:37:
                    52:bf:1a:50:b3:e8:5c:88:9c:fa:d5:7b:d6:4e:93:
                    42:8a:5a:06:85:dc:ba:48:75:e6:d0:a8:f4:ac:9c:
                    32:79:8e:e3:a4:ea:9f:10:bd:e0:2b:78:07:a9:73:
                    f4:c3:96:dd:61:be:e0:43:15:4d:a7:1e:91:7d:ed:
                    c2:e3:1a:5f:d7:3a:9a:01:5f:61:65:70:9d:6c:ed:
                    ee:dc:38:5a:f9:a9:a8:23:6f:08:0c:b6:06:cb:9f:
                    78:b7:9b:1d:fb:78:bb:3d:72:5e:c3:b1:72:0a:7a:
                    97:e2:a2:15:7b:a2:18:64:8e:68:e3:c6:d8:1c:7a:
                    b4:ee:e4:22:62:9a:e3:8d:fb:7b:00:46:88:31:a0:
                    5c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FA:96:C9:4D:D2:EF:24:9D:D2:17:D8:2E:DF:0F:3D:B5:DA:41:E1
            X509v3 Authority Key Identifier:
                keyid:A0:03:8A:CA:39:BB:A5:36:62:CC:0C:10:5F:2C:01:7F:A7:6A:DF:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ebe12192c5a777cd4ac7f461d9df9d8027ae845.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a6633726-35df-4b6e-b11f-eb20fb2ebf30/adef8a719c7444c80ae186fa415c0706f60e419f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a6633726-35df-4b6e-b11f-eb20fb2ebf30/3ebe12192c5a777cd4ac7f461d9df9d8027ae845.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:159::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:0e:3f:b9:88:ca:d1:58:07:49:7d:dc:ee:b1:e0:37:3c:73:
         b3:f4:4a:2d:a6:65:48:0b:d8:f8:2b:01:ea:95:96:1f:dd:fa:
         b7:e5:8d:99:5f:18:60:da:03:76:ef:af:2a:42:38:41:10:c1:
         fd:76:5a:01:50:84:44:97:c9:fe:1b:ad:6c:53:75:ac:3f:2d:
         2e:e1:88:ff:fc:4e:d7:67:ad:63:7f:14:ba:1b:57:63:30:2b:
         b7:93:ec:2a:86:77:08:67:41:e9:89:34:27:f9:2b:c5:46:9d:
         18:97:06:fa:5a:78:a2:6d:bf:4f:c5:ff:bd:57:eb:21:00:fd:
         f1:1c:76:ba:8d:49:98:e9:cf:08:55:d1:85:25:fa:f3:c6:39:
         8a:08:9b:17:4c:11:05:d4:9e:0c:56:26:55:29:2c:93:f2:72:
         c0:2b:8c:84:02:da:f9:ec:7a:81:53:5b:b9:86:5f:cd:94:21:
         51:49:6a:24:d6:39:75:09:ac:b8:72:ac:4e:9c:e2:9b:24:bf:
         5f:4b:28:51:93:63:23:d4:50:42:84:01:a1:46:77:59:02:17:
         ae:d8:96:05:7f:b9:89:d5:93:90:26:96:34:1d:be:3f:8d:d3:
         ed:71:84:6c:06:48:22:22:b7:ae:91:51:08:e2:54:cb:20:37:
         5c:bf:c2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----