Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b368127c-c4b2-4d6f-81af-438c498ed09b/fecd6d293a1a7b763965039cfb84b01ece66b7f8.roa
File:                     fecd6d293a1a7b763965039cfb84b01ece66b7f8.roa (raw, json)
Hash identifier:          xb3Qzm+9GU9xj/EX8KC+2TvCDoA8nyRDePhu/G/grsc=
Subject key identifier:   B0:2E:01:B9:1B:89:46:E3:A6:A8:87:A9:D2:CE:4C:B6:46:1F:63:37
Certificate issuer:       /CN=dbffe46f4ecd19060cdcba8eca5e475610f92f76
Certificate serial:       055ABA
Authority key identifier: FD:90:9A:87:78:9A:78:39:08:F3:01:7F:6F:B5:30:76:DD:EE:67:C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbffe46f4ecd19060cdcba8eca5e475610f92f76.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b368127c-c4b2-4d6f-81af-438c498ed09b/fecd6d293a1a7b763965039cfb84b01ece66b7f8.roa
Signing time:             Mon 04 Dec 2023 18:02:15 +0000
ROA not before:           Mon 04 Dec 2023 18:02:15 +0000
ROA not after:            Thu 04 Dec 2025 18:02:15 +0000
asID:                     28392
IP address blocks:        2801:c4:b4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 350906 (0x55aba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbffe46f4ecd19060cdcba8eca5e475610f92f76
        Validity
            Not Before: Dec  4 18:02:15 2023 GMT
            Not After : Dec  4 18:02:15 2025 GMT
        Subject: CN=fecd6d293a1a7b763965039cfb84b01ece66b7f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:46:2e:aa:95:76:f4:6c:8c:61:3f:40:cb:be:
                    22:6b:cc:27:8c:2b:c7:d9:f1:99:2e:5d:64:26:cc:
                    bd:fd:82:41:7b:07:38:62:88:da:3b:a6:76:2d:d1:
                    28:5d:92:d1:92:38:79:7f:38:16:c1:45:9d:f8:ff:
                    e9:ff:c8:c6:23:4a:91:08:de:cd:9f:51:39:e5:43:
                    f2:8a:79:73:47:df:86:75:19:3d:26:1d:4c:32:8c:
                    3c:1c:c4:ab:75:2c:c3:8d:a6:99:31:5a:5e:9d:2e:
                    c9:16:24:f0:e2:12:99:48:b9:2c:02:8e:40:74:84:
                    a4:8f:b6:18:40:5c:dc:22:22:6c:b6:b0:c3:25:43:
                    2e:c2:fe:6a:f3:1e:a7:41:ae:3f:6b:1d:c0:ae:29:
                    b3:1e:df:be:06:f6:b4:8b:34:6c:be:04:46:2f:ce:
                    cf:29:dc:8a:f2:d0:28:3a:15:49:48:8e:96:e9:be:
                    2a:a9:ed:3f:ec:81:00:a4:83:e3:62:79:66:c4:01:
                    a8:e4:13:13:d9:1b:26:d0:ca:80:6b:43:dc:3e:68:
                    ba:eb:1e:1f:cc:13:0f:aa:a9:dc:6d:4a:78:da:8b:
                    0b:a9:50:07:f0:95:ce:a3:ff:38:56:5d:dd:8f:93:
                    94:c5:ac:38:d1:55:29:f6:9d:31:b3:e0:2a:26:3f:
                    56:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2E:01:B9:1B:89:46:E3:A6:A8:87:A9:D2:CE:4C:B6:46:1F:63:37
            X509v3 Authority Key Identifier:
                keyid:FD:90:9A:87:78:9A:78:39:08:F3:01:7F:6F:B5:30:76:DD:EE:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbffe46f4ecd19060cdcba8eca5e475610f92f76.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b368127c-c4b2-4d6f-81af-438c498ed09b/fecd6d293a1a7b763965039cfb84b01ece66b7f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b368127c-c4b2-4d6f-81af-438c498ed09b/dbffe46f4ecd19060cdcba8eca5e475610f92f76.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:b4::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:74:e6:c7:d4:2b:cd:e6:a9:21:73:d2:9f:dc:0f:9f:ea:58:
         54:4f:b8:5d:44:c2:85:c3:cf:18:ba:06:27:ca:88:dd:38:32:
         d3:1b:19:fa:bd:81:c1:49:5f:72:62:15:85:26:b1:7e:74:11:
         31:cb:00:c0:b4:bd:6d:c3:12:ca:74:d0:99:fa:4b:50:44:a7:
         bd:3e:b7:3e:ac:55:52:60:a5:84:10:02:b5:ad:20:ee:9e:a1:
         8a:b7:cb:b2:7a:a3:b4:bc:cf:de:e0:7c:f2:65:38:1c:ca:cd:
         37:6d:00:40:89:75:e3:17:e4:25:34:d1:42:95:9e:c3:62:b0:
         50:3f:59:97:11:0a:cb:1f:73:63:df:18:1c:8a:91:2a:a6:0c:
         7c:ea:b6:f2:fd:be:8c:0c:61:3f:e4:b9:f1:e1:d1:c7:76:1e:
         2a:38:1d:aa:42:17:16:bb:aa:7d:cb:e4:fd:ae:e6:ef:3e:cd:
         57:d9:2f:0c:59:9b:6f:b4:9a:26:b0:e4:ca:93:43:57:c1:64:
         43:3e:c2:24:19:33:ee:75:0a:01:63:c4:37:c7:1f:93:c6:a7:
         ce:dc:9a:e9:f7:3c:a3:f0:a4:e4:3f:48:6a:5c:5b:28:3f:82:
         4f:cf:b9:31:e6:58:50:df:0e:28:eb:36:ad:b5:e9:0e:80:11:
         e0:d7:7b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----