Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/abdedcb5-d574-4dae-9d7f-e85d0e19fb48/bc53d85928bbcc4135d0eab4921a8ea748a369c5.roa
File:                     bc53d85928bbcc4135d0eab4921a8ea748a369c5.roa (raw, json)
Hash identifier:          bW9qxwmjCcKnjWf6GFmHoFxyjEEFvX7hTN2qXDuC018=
Subject key identifier:   30:31:A3:E9:CF:79:53:6A:D5:B2:8D:6D:4A:87:9D:DF:76:A4:F4:3F
Certificate issuer:       /CN=d6057134d4c0674a838d1e99e38c1deeb586ab03
Certificate serial:       06A7
Authority key identifier: 87:8A:65:28:F6:20:A7:14:C7:6F:D9:D7:E8:0A:BA:73:DD:76:13:A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6057134d4c0674a838d1e99e38c1deeb586ab03.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/abdedcb5-d574-4dae-9d7f-e85d0e19fb48/bc53d85928bbcc4135d0eab4921a8ea748a369c5.roa
Signing time:             Mon 06 Mar 2023 20:39:24 +0000
ROA not before:           Sun 05 Mar 2023 20:38:35 +0000
ROA not after:            Thu 06 Mar 2025 20:38:35 +0000
asID:                     27951
IP address blocks:        2801:10:3800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703 (0x6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6057134d4c0674a838d1e99e38c1deeb586ab03
        Validity
            Not Before: Mar  5 20:38:35 2023 GMT
            Not After : Mar  6 20:38:35 2025 GMT
        Subject: CN=bc53d85928bbcc4135d0eab4921a8ea748a369c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:5d:aa:9e:cc:6b:5e:ea:f1:8b:91:cc:78:dc:
                    50:27:88:d9:3b:1f:81:e6:ae:19:f6:a2:b1:46:12:
                    72:12:c7:ab:ea:d3:a9:ce:a6:7c:44:30:3b:f8:0d:
                    4b:dd:16:2e:98:25:2f:5e:4b:14:2d:51:2b:4d:a9:
                    3d:26:4d:d5:53:ee:3a:f6:d1:8b:99:b7:f6:cb:fe:
                    88:90:3b:d3:d4:19:6b:f5:3e:f3:5c:88:3e:81:74:
                    b9:a7:dd:53:ad:de:f2:2a:08:60:15:38:69:f4:50:
                    a2:8c:39:b9:7e:1a:3d:d1:da:8d:0b:80:00:4e:67:
                    83:28:13:01:5e:44:6b:67:c3:c2:eb:36:a4:80:3f:
                    c3:e7:cc:b8:47:18:14:2e:87:2a:94:63:b9:41:83:
                    43:94:8c:b4:22:f2:d8:be:12:81:32:b9:25:91:bc:
                    50:0d:39:7c:a7:c6:23:3c:83:a4:f5:e2:11:a7:35:
                    b3:d0:60:af:19:6d:7c:88:e8:98:f6:c3:40:90:a7:
                    40:3e:8b:50:d0:dd:0f:5e:56:6a:bd:bd:4d:fd:45:
                    52:15:49:cf:68:f2:a1:d1:72:75:22:76:90:39:b1:
                    19:81:53:c3:30:86:75:c2:b6:f4:54:3a:5d:c1:1b:
                    c5:4c:87:ac:5a:f1:59:2a:bb:ac:30:70:14:06:8a:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:31:A3:E9:CF:79:53:6A:D5:B2:8D:6D:4A:87:9D:DF:76:A4:F4:3F
            X509v3 Authority Key Identifier:
                keyid:87:8A:65:28:F6:20:A7:14:C7:6F:D9:D7:E8:0A:BA:73:DD:76:13:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6057134d4c0674a838d1e99e38c1deeb586ab03.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/abdedcb5-d574-4dae-9d7f-e85d0e19fb48/bc53d85928bbcc4135d0eab4921a8ea748a369c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/abdedcb5-d574-4dae-9d7f-e85d0e19fb48/d6057134d4c0674a838d1e99e38c1deeb586ab03.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:ab:74:b3:9c:5f:2b:5d:4b:35:84:53:03:78:f8:14:6f:78:
         cb:57:22:28:83:18:b5:f8:3b:73:41:f4:aa:2b:6c:5c:5e:d5:
         8c:8c:fc:ba:df:34:5b:ad:d6:54:e3:09:28:df:a0:61:d5:61:
         42:01:51:ce:87:b6:2e:2e:eb:cb:b3:1f:b3:d1:93:60:a1:43:
         f9:bd:db:43:04:86:9b:d8:46:74:e0:4d:6a:6c:29:56:44:34:
         b8:dc:e0:28:a6:01:dd:45:c3:b7:b5:3e:0e:50:b4:f6:92:c5:
         9c:bf:b0:fd:74:49:a5:80:28:45:cb:e9:77:ae:31:60:77:0c:
         2c:20:7e:60:d6:bb:af:96:d0:0d:ca:70:d5:90:0f:06:6c:6a:
         fc:c0:7a:df:d7:59:27:f9:f6:7b:cd:94:a6:0b:d9:57:2d:86:
         25:89:50:96:c0:a1:c8:0a:99:75:ba:25:07:9a:a6:bd:2c:99:
         87:3e:9a:a9:09:43:4a:cb:d8:a1:a6:91:4e:f3:4b:ea:3e:e3:
         8d:5d:d5:93:b3:45:2d:e5:55:9a:50:d4:02:d2:34:bd:d3:ff:
         5e:00:e9:36:c5:f3:0d:0b:3f:6d:3a:f7:60:72:39:f0:58:28:
         da:21:ec:bd:8e:ba:7c:d3:f4:c7:c1:93:d1:94:48:c9:b3:87:
         b3:4a:df:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----