Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/39b8701af01feb53c7906ce721db013e3c064d20.roa
File:                     39b8701af01feb53c7906ce721db013e3c064d20.roa (raw, json)
Hash identifier:          pZg2avUeTwrMoFDFUYBH6G69L1hY5TaqMjA1ZJcykCU=
Subject key identifier:   E0:DB:1D:D5:BB:57:ED:9F:65:2B:50:38:CE:66:A8:1C:F6:FC:88:D8
Certificate issuer:       /CN=6af2767e78b04e90ea78a02d316208e719f9cac2
Certificate serial:       0113FE
Authority key identifier: F3:CA:2C:75:D0:AC:7E:2C:2B:14:7A:FE:D9:1F:7A:6D:3F:3B:22:D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6af2767e78b04e90ea78a02d316208e719f9cac2.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/39b8701af01feb53c7906ce721db013e3c064d20.roa
Signing time:             Wed 28 Jun 2023 01:26:28 +0000
ROA not before:           Tue 27 Jun 2023 01:26:28 +0000
ROA not after:            Sat 28 Jun 2025 01:26:28 +0000
asID:                     64150
IP address blocks:        2801:145::/40 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70654 (0x113fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6af2767e78b04e90ea78a02d316208e719f9cac2
        Validity
            Not Before: Jun 27 01:26:28 2023 GMT
            Not After : Jun 28 01:26:28 2025 GMT
        Subject: CN=39b8701af01feb53c7906ce721db013e3c064d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:60:39:5f:a4:5a:8d:19:dc:41:00:59:29:76:
                    2e:96:95:a9:c8:66:d7:5e:4a:e0:3e:82:10:48:01:
                    00:5e:20:7a:8e:97:73:68:44:7e:f7:ab:9f:00:c9:
                    b1:bf:6d:de:08:21:df:a2:f9:9e:c0:ae:e0:c9:b4:
                    fc:1b:81:0c:59:3f:bf:88:1a:43:51:ff:55:67:a3:
                    72:8c:88:f1:b0:34:5c:34:70:70:93:39:d0:a8:02:
                    db:da:60:46:f7:30:a2:88:d1:f7:bb:a8:77:e9:06:
                    df:3b:fc:6f:8f:b8:17:89:8c:51:f9:58:a4:09:a1:
                    ba:84:fa:e1:56:60:73:0f:c3:6a:8b:bd:25:db:e0:
                    61:3c:17:11:64:6e:12:db:9f:a3:b4:18:1c:af:27:
                    bf:c5:5c:7d:f4:69:41:e4:a8:7f:bc:d1:e3:d9:23:
                    57:a6:4c:7a:db:10:e2:2c:9b:ac:c7:1e:32:5f:07:
                    e7:8b:f1:ac:7f:98:42:09:06:c1:f1:1a:a4:51:89:
                    e2:c3:73:39:4d:bb:71:e0:f5:fb:00:46:09:f9:96:
                    d5:e5:c8:6e:a4:c4:17:b6:32:1b:cd:ad:7e:1c:a2:
                    2f:f0:1b:17:9c:d4:94:c8:64:e6:bc:52:62:2b:36:
                    bd:d3:07:9e:b4:2f:5b:52:ec:f7:3c:45:1a:b9:70:
                    2e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DB:1D:D5:BB:57:ED:9F:65:2B:50:38:CE:66:A8:1C:F6:FC:88:D8
            X509v3 Authority Key Identifier:
                keyid:F3:CA:2C:75:D0:AC:7E:2C:2B:14:7A:FE:D9:1F:7A:6D:3F:3B:22:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6af2767e78b04e90ea78a02d316208e719f9cac2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/39b8701af01feb53c7906ce721db013e3c064d20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/bea967e9-abe1-4265-9865-bb285b70783a/6af2767e78b04e90ea78a02d316208e719f9cac2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:145::/40

    Signature Algorithm: sha256WithRSAEncryption
         48:b6:8b:4f:f0:9d:89:99:b7:11:a3:7b:61:ce:49:6b:aa:b8:
         7f:1d:05:83:ef:25:aa:1f:bf:2d:e0:6a:9d:d0:f2:58:83:da:
         9e:f7:b3:22:68:54:fd:d3:8f:6f:42:8f:f6:e4:10:f8:25:cf:
         98:d0:09:e0:b5:71:e3:21:3b:7d:33:8d:82:15:fe:cb:6a:24:
         98:8b:95:dc:e7:2b:51:cc:bf:91:55:06:c5:e5:7c:64:d0:d1:
         dd:95:23:08:40:64:2a:a7:a0:01:6c:27:75:04:93:8e:63:21:
         f5:49:68:9f:d4:82:68:02:6c:e5:96:c0:f6:6a:8c:60:86:fa:
         ba:35:47:14:97:3c:82:c6:e8:34:04:1d:74:02:6b:b1:a7:31:
         c8:9e:92:f7:3c:48:77:14:f0:13:5d:56:f8:32:c8:9e:cd:fc:
         d9:3b:79:22:9a:5c:46:ef:b2:a6:b2:d7:1b:6a:3a:03:0d:4a:
         0f:70:90:80:1e:d3:b9:76:79:89:71:32:51:03:01:37:18:85:
         12:51:89:d9:e5:c3:a9:2e:3a:81:d6:b1:1b:12:0a:e4:d3:03:
         30:de:91:b4:13:11:3a:02:bc:17:5e:df:31:bb:d0:7b:cd:50:
         4c:0e:51:e2:00:3b:a5:22:a6:4a:e4:f7:28:0e:57:f1:b0:1a:
         c2:e2:10:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----