Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/da7cf1febdc4f15854c3b75959b0361b2c9de3a3.roa
File:                     da7cf1febdc4f15854c3b75959b0361b2c9de3a3.roa (raw, json)
Hash identifier:          xvHPFy+NtiOUfW4H1m/rA5sBsoFhJPF3dPuo8psboJw=
Subject key identifier:   D5:97:AE:1A:99:0C:24:44:65:FA:FB:05:1A:55:4B:B9:C5:5B:F1:F9
Certificate issuer:       /CN=41ecccbe7e4a661da433906d48e7f564fc8690e5
Certificate serial:       445B
Authority key identifier: E8:6F:F0:F9:5C:24:45:E3:73:DE:CD:4D:34:47:1D:4F:63:1D:90:03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41ecccbe7e4a661da433906d48e7f564fc8690e5.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/da7cf1febdc4f15854c3b75959b0361b2c9de3a3.roa
Signing time:             Wed 05 Apr 2023 22:46:37 +0000
ROA not before:           Mon 03 Apr 2023 22:42:26 +0000
ROA not after:            Sat 05 Apr 2025 22:42:26 +0000
asID:                     272952
IP address blocks:        2801:1b9::/48 maxlen: 48
                          2801:1b9:1::/48 maxlen: 48
                          2801:1b9:2::/48 maxlen: 48
                          2801:1b9:3::/48 maxlen: 48
                          2801:1b9:4::/48 maxlen: 48
                          2801:1b9:5::/48 maxlen: 48
                          2801:1b9:6::/48 maxlen: 48
                          2801:1b9:7::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17499 (0x445b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41ecccbe7e4a661da433906d48e7f564fc8690e5
        Validity
            Not Before: Apr  3 22:42:26 2023 GMT
            Not After : Apr  5 22:42:26 2025 GMT
        Subject: CN=da7cf1febdc4f15854c3b75959b0361b2c9de3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2d:a5:90:36:12:85:cc:9a:48:55:b6:7f:2a:
                    42:3a:12:fc:5c:f0:7e:1d:18:c6:30:55:af:36:cc:
                    9e:86:65:bd:a4:31:0a:2c:d7:2d:64:eb:14:af:a7:
                    ae:d8:1c:35:d7:d5:4a:5e:75:67:09:ed:21:89:c9:
                    1a:9f:ae:a4:d8:ef:a2:05:9e:86:89:e1:f9:79:1b:
                    75:8f:22:1d:b0:a7:de:4d:56:7c:50:f4:81:4b:4c:
                    f8:23:dc:a0:4f:c5:60:79:82:00:d1:4d:55:08:78:
                    9e:f9:18:f9:ce:53:3a:83:c6:78:d7:51:d4:7a:b0:
                    a9:84:77:7c:15:12:41:9f:27:de:90:92:98:9b:51:
                    c5:f8:b6:21:e9:d5:44:94:74:6a:78:13:d9:7f:08:
                    0c:ea:4e:e0:6e:77:1b:ef:ee:58:5e:79:b8:1a:7c:
                    45:f4:d0:ae:d3:30:4d:7c:7d:61:e5:08:df:36:58:
                    4e:cc:d5:bc:22:e2:05:df:7b:ad:9e:97:cb:f8:98:
                    2c:56:16:aa:c0:fc:f4:f2:7b:8d:4b:be:7d:e8:b3:
                    a1:00:ce:bb:8b:d9:b1:fb:a3:38:48:b2:9f:eb:6d:
                    0d:5a:47:ff:83:f6:63:04:93:db:20:1f:2a:b6:5a:
                    70:00:db:23:0d:33:85:3e:f3:ff:14:e3:aa:fe:e9:
                    2e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:97:AE:1A:99:0C:24:44:65:FA:FB:05:1A:55:4B:B9:C5:5B:F1:F9
            X509v3 Authority Key Identifier:
                keyid:E8:6F:F0:F9:5C:24:45:E3:73:DE:CD:4D:34:47:1D:4F:63:1D:90:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41ecccbe7e4a661da433906d48e7f564fc8690e5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/da7cf1febdc4f15854c3b75959b0361b2c9de3a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/41ecccbe7e4a661da433906d48e7f564fc8690e5.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b9::/45

    Signature Algorithm: sha256WithRSAEncryption
         04:d1:d0:53:0a:5c:09:5a:65:bb:2b:33:74:58:84:15:53:0a:
         1b:66:4c:8f:3f:b5:a3:51:16:84:68:4b:6e:58:34:f9:62:7b:
         e2:1b:76:a0:2f:fe:b1:2b:44:c8:1c:d3:e3:bc:70:c6:98:6f:
         04:36:76:fd:3b:44:99:67:b7:36:d6:dd:73:b2:93:f1:50:76:
         55:63:3c:cb:06:51:ad:38:85:84:9a:3a:ea:d5:e2:c2:bb:ae:
         b1:ff:d4:ef:de:a1:b0:97:41:aa:a0:5f:79:33:f3:e7:42:d4:
         93:50:e9:5f:19:00:81:83:63:6e:59:72:7d:57:c0:ce:49:41:
         74:6b:6f:7b:86:f8:b7:01:14:33:8a:16:d3:e7:33:71:77:86:
         49:f3:ba:b8:63:b1:f6:72:5c:24:4e:69:12:ca:64:50:c3:61:
         90:90:c1:28:6c:cc:33:89:f4:f7:64:af:a7:40:7b:d9:5a:d4:
         8d:36:97:6f:67:6c:1e:c1:8d:fb:7b:3b:5b:7b:c2:e4:55:be:
         68:1f:b9:48:e5:80:eb:7f:39:5c:1c:37:e7:c6:e9:d3:c3:81:
         8d:da:73:1d:29:16:d3:72:01:1d:be:dd:48:5a:7f:88:93:ae:
         d5:6f:48:94:5d:fe:27:ed:c2:ed:c3:e9:84:02:96:71:ff:b1:
         06:69:87:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----