Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/1da57a1f24e3a562955ef4e5c3e70bec16ff36ff.roa
File:                     1da57a1f24e3a562955ef4e5c3e70bec16ff36ff.roa (raw, json)
Hash identifier:          g5QtM2Vgo0cpNlmXVV0W9JAFIR//U43xX8oMfg4+ZPY=
Subject key identifier:   D3:2C:54:96:00:E5:D2:84:0C:C5:F1:80:71:1A:27:15:62:3A:A8:20
Certificate issuer:       /CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
Certificate serial:       D1DF
Authority key identifier: 21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/1da57a1f24e3a562955ef4e5c3e70bec16ff36ff.roa
Signing time:             Thu 15 Dec 2022 01:45:37 +0000
ROA not before:           Thu 17 Nov 2022 02:57:02 +0000
ROA not after:            Fri 22 Nov 2024 02:57:02 +0000
asID:                     13489
IP address blocks:        2801:1a9:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53727 (0xd1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
        Validity
            Not Before: Nov 17 02:57:02 2022 GMT
            Not After : Nov 22 02:57:02 2024 GMT
        Subject: CN=1da57a1f24e3a562955ef4e5c3e70bec16ff36ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b0:29:ab:b6:52:03:22:83:eb:ed:d0:30:04:
                    58:7f:ff:8a:6c:d9:95:e9:a0:1e:82:4d:85:e5:1a:
                    c2:f6:ce:28:ca:ec:f5:0c:fc:66:1d:3a:1b:0a:f0:
                    46:1f:b2:e7:7b:16:9b:27:16:d2:12:b0:74:76:3e:
                    c7:49:44:eb:d4:6e:62:f9:09:a9:c2:53:1c:b2:48:
                    82:97:8e:12:ca:b5:58:06:d5:44:76:1c:f7:7f:01:
                    8f:e4:89:ba:25:a1:65:f7:fe:16:be:40:1a:4c:e4:
                    58:32:9b:46:2f:26:e6:3a:a7:52:aa:fc:2b:61:0a:
                    19:08:b4:e4:53:e2:25:e6:ab:cb:94:4d:0d:de:a4:
                    af:75:85:2c:68:8a:31:b1:1b:56:17:5a:d9:42:38:
                    b6:e8:c5:76:05:ab:6e:12:e7:9c:ab:c0:79:56:17:
                    c8:c6:b0:2a:45:b7:52:6d:3d:a2:70:9f:17:b4:6e:
                    f1:68:d1:c3:ad:fd:1c:e5:d9:41:cb:cf:a0:8d:51:
                    45:f6:e4:55:22:a1:37:c2:19:50:7a:e7:e8:2a:06:
                    85:a4:28:54:a1:8a:37:d6:3d:d4:fa:4e:5d:57:30:
                    64:09:94:80:98:66:59:3e:b4:03:9e:2c:40:d1:c9:
                    f2:77:90:66:dc:cc:8a:3b:79:89:6c:23:a3:a6:b5:
                    8d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2C:54:96:00:E5:D2:84:0C:C5:F1:80:71:1A:27:15:62:3A:A8:20
            X509v3 Authority Key Identifier:
                keyid:21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/1da57a1f24e3a562955ef4e5c3e70bec16ff36ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a9:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:bc:42:27:a0:90:d2:09:74:9e:d2:03:85:9d:d5:d7:f5:fa:
         38:64:29:ed:f1:4a:02:69:2e:ab:46:36:c8:ba:57:f9:73:f6:
         77:44:14:a8:51:76:97:c8:55:6c:7c:1c:5c:61:ee:e6:9b:e5:
         72:07:cc:d8:24:f3:f6:1f:93:68:2a:3d:f0:bd:e4:2a:36:ed:
         9f:b5:69:c0:ed:dd:ed:4a:15:bb:af:3b:34:9b:64:62:8b:ec:
         8e:7a:6c:ed:ab:05:d5:7d:07:88:8e:e0:20:2d:38:ea:1a:f0:
         ab:5b:94:38:b6:b7:d1:07:66:70:c5:1f:3c:30:f1:c8:e2:72:
         6d:03:7a:fb:59:00:65:2b:82:01:d4:0c:55:68:9a:b2:b0:6f:
         0a:9e:1d:6f:0e:be:3a:b8:62:35:72:44:f1:1a:5b:d5:26:8a:
         2b:bc:a9:42:f1:40:65:9b:c7:fd:74:2d:e0:e4:49:a4:b5:48:
         46:0d:df:15:c1:ad:58:94:f5:a1:c6:a6:e1:76:0f:66:69:9f:
         25:1f:c1:ab:52:1d:21:4c:25:f3:9a:a8:91:c1:2c:d4:c8:28:
         c6:73:29:6a:97:4a:b6:e5:55:0f:cb:b1:a6:4b:10:09:60:8e:
         0b:68:fc:d4:49:1a:19:55:f1:7e:5e:2d:30:fb:d9:19:9d:64:
         46:2b:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----