Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/afed68752aeadd699b262e178d6a46199301c46c.roa
File:                     afed68752aeadd699b262e178d6a46199301c46c.roa (raw, json)
Hash identifier:          AkY56WGssbJg54TrJ+E11o1A3roiPbmlVYU+qP8XDfU=
Subject key identifier:   01:EA:45:52:2B:D7:04:C2:CE:C8:7B:7A:D8:B4:7D:33:C6:21:7C:D5
Certificate issuer:       /CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
Certificate serial:       C8A0
Authority key identifier: 21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/afed68752aeadd699b262e178d6a46199301c46c.roa
Signing time:             Wed 14 Dec 2022 21:34:56 +0000
ROA not before:           Sun 20 Nov 2022 02:58:07 +0000
ROA not after:            Fri 22 Nov 2024 02:58:07 +0000
asID:                     27951
IP address blocks:        2801:1a9:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51360 (0xc8a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
        Validity
            Not Before: Nov 20 02:58:07 2022 GMT
            Not After : Nov 22 02:58:07 2024 GMT
        Subject: CN=afed68752aeadd699b262e178d6a46199301c46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5c:8b:c2:c1:e1:f5:95:2c:7f:06:4a:74:b2:
                    bd:04:78:fa:01:6a:bd:77:fb:00:cb:16:6a:cd:e4:
                    2c:40:5e:1d:a9:b0:b1:d1:42:29:aa:fe:45:99:13:
                    0b:85:81:cd:cc:ba:32:64:0e:b8:72:e5:c1:9b:92:
                    f4:a1:fe:ae:da:99:30:5d:3b:8c:49:84:45:00:f6:
                    c1:de:56:35:66:a2:5c:7b:68:07:c5:88:48:f0:66:
                    90:e7:5a:f7:4f:4e:a4:c2:fa:81:3d:e2:72:76:a4:
                    75:84:79:32:8b:d2:76:11:2f:33:d6:bb:ef:22:49:
                    aa:37:da:3f:8e:f4:a2:28:da:67:81:c5:af:97:fd:
                    d3:11:a0:2c:d8:c2:81:aa:8b:91:05:c1:96:5e:7b:
                    3a:51:ea:de:26:9b:84:9d:f0:9e:19:d5:a4:0a:f0:
                    d2:ce:fd:e8:fb:47:b9:93:d8:51:3d:48:7c:f4:8e:
                    b0:9d:17:f0:a4:ed:0c:6a:96:6e:c2:8e:3c:cd:b7:
                    00:a3:4b:59:67:c5:dc:b0:75:1c:99:a9:4c:30:e7:
                    4e:60:53:8d:2f:9b:d7:55:24:61:ee:f0:cc:a6:a2:
                    a6:e3:57:3c:14:10:92:bc:c5:16:06:0a:2c:15:9f:
                    91:5f:a1:a6:60:63:72:64:e4:81:1a:ac:94:74:0b:
                    3d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EA:45:52:2B:D7:04:C2:CE:C8:7B:7A:D8:B4:7D:33:C6:21:7C:D5
            X509v3 Authority Key Identifier:
                keyid:21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/afed68752aeadd699b262e178d6a46199301c46c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a9:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:de:2f:18:d9:fe:2a:e6:61:db:f5:02:c3:48:fc:38:62:34:
         31:99:7f:16:1c:70:9d:24:95:05:04:be:53:f5:5a:dd:e7:6a:
         3f:6c:9e:d1:00:c8:58:9e:81:94:6e:c6:a7:92:87:bc:79:a9:
         ad:d8:a5:a2:e9:9c:c7:a2:88:cd:42:a3:ee:d5:76:0a:a7:2a:
         b2:f7:d4:82:88:43:84:7e:38:f6:98:46:5c:bf:58:71:bc:a0:
         25:c3:5e:d6:de:14:60:9b:ea:54:99:36:16:16:15:09:4f:12:
         1b:09:ed:0e:58:30:90:7f:8a:62:59:5a:de:de:5d:c8:44:54:
         76:15:89:54:6b:2b:bd:94:02:d9:df:7d:7c:01:ac:55:4f:5a:
         ad:e1:42:b7:79:87:51:3c:5f:59:46:f5:ce:48:8a:c1:cc:02:
         00:83:41:79:71:6f:17:98:45:fb:92:27:14:e1:86:87:50:a7:
         71:41:48:fd:e3:b9:fb:a5:41:14:5a:5e:2d:1e:e2:cf:99:3b:
         ed:71:c0:94:c2:71:2f:eb:9c:6e:75:04:e8:e4:03:4c:9b:4a:
         2e:f3:8c:de:47:91:7b:dc:0c:e7:fc:ad:3e:73:d5:b2:d9:2d:
         06:53:1f:32:6a:99:70:b2:35:50:1d:ae:bd:66:dc:b9:5e:c2:
         12:a5:78:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----