Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/a7e2b6b2-4c2e-4934-8d31-74e09994d07b/0ee50aa057a0d2021ded68a048f2539ba765f308.roa
File:                     0ee50aa057a0d2021ded68a048f2539ba765f308.roa (raw, json)
Hash identifier:          Cxd++CrSUmYlyvQKnqfpJit3N6bzWm8nnW8BTRmJ0Es=
Subject key identifier:   67:9A:BA:C9:60:05:64:C2:80:36:30:DA:D8:A2:84:79:54:E2:AA:F1
Certificate issuer:       /CN=f3a05bdb86c0d94abfb2a46e721512e0fce81378
Certificate serial:       016351
Authority key identifier: 48:CE:AC:AD:6D:23:FB:50:BF:02:35:58:AB:18:84:F7:F2:C4:CC:95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3a05bdb86c0d94abfb2a46e721512e0fce81378.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/a7e2b6b2-4c2e-4934-8d31-74e09994d07b/0ee50aa057a0d2021ded68a048f2539ba765f308.roa
Signing time:             Thu 22 Jun 2023 21:43:32 +0000
ROA not before:           Wed 21 Jun 2023 21:43:32 +0000
ROA not after:            Sun 22 Jun 2025 21:43:32 +0000
asID:                     262589
IP address blocks:        2801:1c4::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90961 (0x16351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a05bdb86c0d94abfb2a46e721512e0fce81378
        Validity
            Not Before: Jun 21 21:43:32 2023 GMT
            Not After : Jun 22 21:43:32 2025 GMT
        Subject: CN=0ee50aa057a0d2021ded68a048f2539ba765f308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:08:5a:9b:52:1e:10:6c:8f:db:7c:b4:de:ec:
                    d7:61:9b:7c:e5:60:b9:c6:4c:3b:c1:93:69:57:da:
                    a8:8b:45:c9:79:30:7e:5e:18:5d:a6:42:b0:e6:06:
                    79:a3:23:a8:06:59:16:da:ee:46:3d:32:4b:fe:71:
                    9d:eb:04:95:1b:68:d6:c7:1e:6f:ef:f9:a5:d6:1e:
                    64:ba:60:8c:9d:5b:d5:84:fb:44:c4:74:1a:41:f6:
                    15:ab:6c:e9:ad:f7:fa:be:5a:44:0c:33:e2:b8:cf:
                    2b:4a:1e:1d:4d:80:f1:5a:b6:b2:9e:4e:22:c7:c6:
                    d3:0c:9c:7d:d3:c0:6d:28:7d:87:6a:ae:e7:2e:a8:
                    cc:7e:1c:3e:79:a3:5c:f1:6c:d1:69:7b:03:87:c1:
                    4a:b4:6f:0a:80:1e:f5:ee:d2:2e:5f:f6:40:e8:e3:
                    75:4c:bf:c1:0d:b1:5f:74:c1:b5:62:8c:e5:1c:6c:
                    ae:4e:f2:a2:48:ce:bf:c9:28:df:96:38:ef:a7:ae:
                    51:36:9f:04:07:c3:49:ba:a8:58:20:79:e0:be:7c:
                    4f:60:96:ec:4f:99:ee:dc:4f:4c:5c:98:c5:b9:60:
                    c4:ab:a7:a7:6e:d4:e3:51:76:c5:a4:98:68:34:29:
                    63:07:8b:e7:04:97:f5:05:0f:88:73:a1:7b:d3:d1:
                    1b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:9A:BA:C9:60:05:64:C2:80:36:30:DA:D8:A2:84:79:54:E2:AA:F1
            X509v3 Authority Key Identifier:
                keyid:48:CE:AC:AD:6D:23:FB:50:BF:02:35:58:AB:18:84:F7:F2:C4:CC:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3a05bdb86c0d94abfb2a46e721512e0fce81378.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/a7e2b6b2-4c2e-4934-8d31-74e09994d07b/0ee50aa057a0d2021ded68a048f2539ba765f308.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/a7e2b6b2-4c2e-4934-8d31-74e09994d07b/f3a05bdb86c0d94abfb2a46e721512e0fce81378.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c4::/44

    Signature Algorithm: sha256WithRSAEncryption
         af:4c:1b:c3:aa:d3:f1:57:5c:32:2d:34:8c:3e:1a:64:28:8b:
         d4:52:bb:80:0a:72:6d:5b:7a:ef:10:b4:e6:b9:bc:57:a8:c7:
         2e:66:f7:a1:84:f3:97:b8:74:34:34:df:24:22:3a:98:ed:16:
         ec:d9:04:79:70:2b:56:9d:16:dd:0e:a4:39:80:12:bb:28:cf:
         43:93:46:38:a0:f4:8f:e6:27:4b:d1:eb:17:45:a7:f1:69:b1:
         8a:aa:5e:50:eb:7c:f9:bc:a8:8f:cb:e7:41:db:1d:c9:b9:1b:
         c2:89:bc:12:81:23:86:06:1f:ca:e8:29:d4:4a:fd:e1:47:5e:
         1b:06:25:c2:a4:0e:11:f7:b4:7a:ee:49:19:6c:5a:55:6e:04:
         e1:ba:44:0f:74:cc:49:10:4d:ce:bf:52:b0:c4:eb:3e:76:e1:
         6b:c0:35:42:31:28:4e:f3:5e:85:4e:2f:3d:0d:ea:00:54:7e:
         a1:a1:6e:9d:68:6a:02:7c:9c:64:59:bd:8c:24:30:76:4d:db:
         fa:b8:c3:a1:49:2d:8b:1b:a3:ce:d4:57:67:b7:fb:78:57:c8:
         e6:53:0b:2a:d8:cd:66:96:ce:ff:ba:11:52:b3:dc:95:96:ca:
         e6:21:6f:79:cb:d3:51:b6:0a:ac:1f:3e:7f:20:13:1d:23:60:
         af:29:ad:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----