Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/4f2e387aa61fa1dbf1b58db6f3abac0bfbb27d82.roa
File:                     4f2e387aa61fa1dbf1b58db6f3abac0bfbb27d82.roa (raw, json)
Hash identifier:          QVPITX/M1BjPLDZTSG8W4M3AVU3xUVXW3D1YmRc9yac=
Subject key identifier:   17:15:D2:E9:F1:19:E2:FE:EE:40:03:41:01:33:4B:AF:60:CD:13:E5
Certificate issuer:       /CN=41ecccbe7e4a661da433906d48e7f564fc8690e5
Certificate serial:       03BF
Authority key identifier: E8:6F:F0:F9:5C:24:45:E3:73:DE:CD:4D:34:47:1D:4F:63:1D:90:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41ecccbe7e4a661da433906d48e7f564fc8690e5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/4f2e387aa61fa1dbf1b58db6f3abac0bfbb27d82.roa
Signing time:             Wed 29 Mar 2023 20:20:35 +0000
ROA not before:           Tue 28 Mar 2023 20:19:57 +0000
ROA not after:            Sat 29 Mar 2025 20:19:57 +0000
asID:                     272952
IP address blocks:        2801:1b9::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41ecccbe7e4a661da433906d48e7f564fc8690e5
        Validity
            Not Before: Mar 28 20:19:57 2023 GMT
            Not After : Mar 29 20:19:57 2025 GMT
        Subject: CN=4f2e387aa61fa1dbf1b58db6f3abac0bfbb27d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a7:af:3c:06:0d:1e:3e:70:4f:e6:cc:84:77:
                    77:7a:7f:70:33:94:c0:7a:05:ea:b0:f2:9d:33:1d:
                    65:7c:5a:a2:0f:72:03:cc:59:ee:4f:68:f1:aa:5f:
                    ef:ac:46:fe:f6:d1:ef:f0:05:e8:c4:37:aa:73:8d:
                    85:08:51:b7:40:00:61:31:3a:e1:25:8f:7a:b2:ca:
                    65:8c:fe:b9:e8:73:34:0a:fa:0b:99:37:14:ae:a0:
                    b3:77:86:df:e4:2c:6d:e7:d1:81:ed:4f:42:92:d0:
                    54:7c:65:a5:6b:f8:97:64:67:45:f2:86:f0:5c:56:
                    cb:ed:86:9b:9d:16:d0:eb:ac:13:f1:7d:21:42:e3:
                    fe:7d:92:1f:ff:25:6e:f9:e5:2a:46:05:8a:03:62:
                    66:98:02:91:6c:74:cf:1a:9e:91:91:9a:78:77:98:
                    68:dc:e8:0e:71:f7:73:8e:bd:20:b6:d9:59:7a:3a:
                    a1:b6:19:ad:cc:2d:5b:ce:ac:fb:5e:6d:02:93:0d:
                    9d:70:1e:4b:2a:40:97:e6:e8:7e:84:ca:b9:b2:cf:
                    d7:4a:68:0e:d0:d7:ec:31:db:77:ca:15:a9:a3:3e:
                    ec:8b:02:7e:4d:8a:dc:9d:89:a2:3f:4f:28:59:10:
                    65:74:31:85:e6:6b:ef:b9:bb:71:6a:db:a9:7c:91:
                    5e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:15:D2:E9:F1:19:E2:FE:EE:40:03:41:01:33:4B:AF:60:CD:13:E5
            X509v3 Authority Key Identifier:
                keyid:E8:6F:F0:F9:5C:24:45:E3:73:DE:CD:4D:34:47:1D:4F:63:1D:90:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41ecccbe7e4a661da433906d48e7f564fc8690e5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/4f2e387aa61fa1dbf1b58db6f3abac0bfbb27d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/41ecccbe7e4a661da433906d48e7f564fc8690e5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b9::/44

    Signature Algorithm: sha256WithRSAEncryption
         2c:a7:3f:6e:e3:49:97:b8:a2:35:51:c7:d7:b9:ef:2e:c0:22:
         db:5b:68:33:21:df:05:c9:07:9e:5e:9b:07:c2:8d:0c:31:87:
         e6:b0:1b:db:5a:8f:c6:b4:36:f9:96:fc:e7:ab:5f:63:e7:6d:
         1b:90:4e:c2:5f:92:8f:70:1d:29:54:c4:19:7b:80:26:2d:3f:
         88:4f:de:e9:6d:d0:5b:22:dc:dc:49:f4:32:07:ef:81:20:f6:
         a0:d8:e7:32:9c:29:72:2c:08:12:77:60:27:eb:52:09:5b:76:
         45:6d:da:08:4e:81:44:3d:e8:69:a5:b4:e6:0a:e4:4f:29:3d:
         1c:a5:c4:65:7d:d9:99:36:35:8a:bb:b8:f5:71:4d:65:e8:ff:
         a7:39:97:dd:4c:8b:54:98:b9:3a:3b:1a:54:99:3e:83:94:b1:
         e6:f3:79:ac:4d:c6:c5:d6:cb:4a:c3:68:97:7c:ef:2d:3b:15:
         7e:30:59:58:d8:3d:03:7e:e9:4d:bf:fa:15:6d:28:40:6e:30:
         00:92:45:94:0e:06:fe:b3:6a:0f:b1:8c:71:1f:bd:60:79:63:
         02:2d:7f:c5:50:fc:90:10:1a:3c:ba:5d:ae:a1:0f:cd:47:35:
         d2:12:73:4c:24:bd:39:78:60:9c:70:92:65:54:d2:52:b3:56:
         9c:72:2d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----