Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/f5582a9f06563b162d9bc18a5ae8995c5c7e702d.roa
File:                     f5582a9f06563b162d9bc18a5ae8995c5c7e702d.roa (raw, json)
Hash identifier:          ucexf8L+SzogXuRHAfev2x4sapOZJlkmqI1+DNpfBjc=
Subject key identifier:   9B:14:0B:05:0D:17:97:49:1F:6A:CC:C5:D6:CD:C2:A2:14:FA:C4:09
Certificate issuer:       /CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
Certificate serial:       015E0B
Authority key identifier: 21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/f5582a9f06563b162d9bc18a5ae8995c5c7e702d.roa
Signing time:             Thu 29 Dec 2022 17:41:14 +0000
ROA not before:           Sun 13 Nov 2022 02:57:02 +0000
ROA not after:            Fri 22 Nov 2024 02:57:02 +0000
asID:                     13489
IP address blocks:        2801:1a9:2::/48 maxlen: 48
                          2801:1a9:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89611 (0x15e0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c01a1d9e34ff483e0b923a24bb992c0f849c5b
        Validity
            Not Before: Nov 13 02:57:02 2022 GMT
            Not After : Nov 22 02:57:02 2024 GMT
        Subject: CN=f5582a9f06563b162d9bc18a5ae8995c5c7e702d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:68:8e:13:ca:ad:e7:4b:66:63:25:97:f3:2e:
                    2b:dd:1d:bd:d4:cf:54:0f:73:0c:5f:50:06:2d:cb:
                    db:17:5e:63:54:c8:2c:9d:14:7d:c2:6f:8b:f4:8c:
                    ad:20:9f:87:a7:9f:08:04:5e:9a:c2:09:5d:c2:76:
                    05:59:64:cf:dc:47:f9:0c:26:1e:9e:24:33:2c:77:
                    e2:1f:40:ed:ed:20:51:f6:72:11:92:dc:31:c3:24:
                    ba:af:ef:da:c7:90:3b:5e:ca:7e:db:07:ac:12:1c:
                    07:43:2a:3b:ea:e8:2c:2b:fe:4e:79:e4:25:a0:d3:
                    a4:89:88:7e:7a:de:d6:8a:28:63:a1:ee:9e:e3:4a:
                    f6:71:f6:94:f3:f0:3b:ed:3b:59:ac:62:3a:ba:c1:
                    b9:e7:f0:7a:5a:ef:bc:d3:29:2c:08:7b:24:47:ef:
                    a8:e2:cc:15:2e:73:6e:c2:0a:5f:6c:83:01:4f:e2:
                    8a:f7:4a:23:8e:cb:a2:f4:0e:1a:e7:e6:4a:67:f3:
                    83:51:5b:78:6d:1f:0b:13:e5:30:96:52:37:d9:2c:
                    e4:b2:b2:b6:6a:a5:a1:b9:9e:b5:ab:c5:b6:b9:3b:
                    4e:b8:99:78:f2:5c:d3:cc:0e:5f:1b:70:f1:f9:3b:
                    e5:01:5f:b5:4a:d9:c6:cc:10:19:56:6d:cc:40:8d:
                    88:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:14:0B:05:0D:17:97:49:1F:6A:CC:C5:D6:CD:C2:A2:14:FA:C4:09
            X509v3 Authority Key Identifier:
                keyid:21:1D:99:A9:7A:3D:56:D2:CC:3E:53:4A:C6:9A:E2:2C:FE:68:70:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/f5582a9f06563b162d9bc18a5ae8995c5c7e702d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/b7c74653-47c5-4c13-8e0e-5ba4dcbbfa5a/01c01a1d9e34ff483e0b923a24bb992c0f849c5b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a9:1::-2801:1a9:2:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         24:40:f7:8d:04:76:63:8b:46:94:68:01:13:7c:c7:e6:ef:98:
         69:92:27:73:01:0b:ba:4b:9c:b7:26:8c:31:30:cc:2b:a3:90:
         9d:46:e5:d3:46:a3:ed:71:8c:ae:65:46:32:f5:6a:28:25:36:
         47:8b:c6:3f:ad:53:54:6b:be:11:1d:7d:d9:f5:6d:fc:8c:5b:
         a6:93:eb:b4:27:05:5d:11:37:d1:5f:0d:19:56:db:ef:e1:f0:
         83:54:70:5d:87:41:30:11:e6:f3:c0:80:92:d6:f2:61:58:d1:
         57:cc:f6:0f:16:47:c6:db:f1:f8:99:6d:d0:e0:39:0d:02:79:
         45:66:1a:44:d0:e2:1c:6e:8a:b5:09:63:f3:a7:68:4d:0c:59:
         fa:49:3e:71:2d:92:e3:ea:f4:bb:fc:e5:be:78:fb:a4:90:c0:
         d4:35:40:57:37:f8:33:6b:32:26:7f:5e:a2:fc:5c:41:b6:64:
         3d:b4:44:73:82:0f:92:55:86:0a:73:64:59:04:15:5a:f4:35:
         03:78:54:ab:fe:b9:93:f6:a8:8e:5f:83:bb:7e:9f:06:0b:1b:
         5e:50:f3:49:b1:80:ee:cf:13:2c:9e:e4:db:be:ed:79:bc:bf:
         e0:51:33:dc:67:df:59:88:a3:97:f2:15:39:86:8b:03:b5:dd:
         81:e0:d8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----