Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/c35696516d958b95574157d03b9f27c1084972ee.roa
File:                     c35696516d958b95574157d03b9f27c1084972ee.roa (raw, json)
Hash identifier:          mQfsq6E1perwUaYvMcOAQdmZoLHSzfKwtHshb8sWYCU=
Subject key identifier:   B2:DC:CD:38:D3:99:21:E2:26:AF:04:F4:5D:C2:9A:23:0D:86:F1:5B
Certificate issuer:       /CN=75ea5c79a4b285a7ff9304a161ca92b6cd0c8479
Certificate serial:       1840A7
Authority key identifier: 5B:8E:39:32:2C:6D:5E:0D:CE:FA:18:7C:F0:90:BB:DC:03:DE:F3:C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/c35696516d958b95574157d03b9f27c1084972ee.roa
Signing time:             Thu 11 May 2023 15:12:36 +0000
ROA not before:           Wed 10 May 2023 15:12:36 +0000
ROA not after:            Sun 11 May 2025 15:12:36 +0000
asID:                     19889
IP address blocks:        2800:6d0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1589415 (0x1840a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ea5c79a4b285a7ff9304a161ca92b6cd0c8479
        Validity
            Not Before: May 10 15:12:36 2023 GMT
            Not After : May 11 15:12:36 2025 GMT
        Subject: CN=c35696516d958b95574157d03b9f27c1084972ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ed:49:8a:7f:aa:df:32:81:75:60:e5:6b:28:
                    e1:90:10:c1:a2:b4:60:50:be:b3:14:dc:cd:be:c2:
                    e9:fa:db:bc:d9:7b:63:41:eb:4f:89:8f:be:63:4e:
                    73:85:4e:9d:ed:7c:6d:32:66:82:fe:61:02:58:31:
                    cd:48:b4:19:6a:89:a0:50:da:dd:b4:d6:6c:66:76:
                    bb:38:b5:7e:d9:17:8a:d2:9a:85:64:ca:48:93:5c:
                    85:68:f8:cd:a1:54:d3:45:c0:d5:e6:72:c5:2a:c3:
                    a9:1d:af:56:27:83:ce:30:f9:e0:71:7a:d5:6c:77:
                    1f:1a:41:21:79:f7:5d:fd:a0:2a:1b:16:3f:b1:71:
                    e3:dd:96:70:6e:8b:74:ae:a3:ff:13:c4:7e:13:77:
                    1c:e7:d3:09:8d:24:de:91:b2:d1:01:04:bd:4d:83:
                    61:cb:7e:d4:e7:35:1b:81:65:2d:79:40:8e:d9:f7:
                    51:a6:8e:2d:bc:bf:c4:37:93:da:f9:c6:04:76:38:
                    dc:6f:54:41:50:03:19:ed:31:77:4e:67:bc:bb:60:
                    24:6d:f6:53:d7:35:d8:5e:9a:fc:b2:42:91:6a:2d:
                    22:60:a2:3b:31:40:02:69:4e:87:be:d0:6f:aa:e3:
                    08:c5:e9:fe:7c:77:fe:3f:34:2f:40:6d:1b:0b:f2:
                    62:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:DC:CD:38:D3:99:21:E2:26:AF:04:F4:5D:C2:9A:23:0D:86:F1:5B
            X509v3 Authority Key Identifier:
                keyid:5B:8E:39:32:2C:6D:5E:0D:CE:FA:18:7C:F0:90:BB:DC:03:DE:F3:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/c35696516d958b95574157d03b9f27c1084972ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c1724a6f-1a4b-433c-8582-7de7e0a913e0/75ea5c79a4b285a7ff9304a161ca92b6cd0c8479.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:6d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:76:92:23:0c:67:25:51:f6:d6:64:e3:0b:87:9a:a7:15:a1:
         ed:8c:34:34:2e:d9:de:d3:af:ac:b9:28:29:eb:d1:47:f7:27:
         ce:7c:2d:98:7d:8c:b3:c2:36:eb:8d:21:8f:5e:e4:a5:24:d5:
         a8:d1:4b:51:63:51:2c:8a:e5:24:32:08:93:f1:38:57:f7:6b:
         98:39:61:9e:17:f3:f6:b7:72:d4:27:6f:d9:3d:e0:7e:a6:f6:
         4b:6a:1a:e6:48:cc:db:88:14:0b:7d:d6:0b:65:1d:d6:f3:99:
         5a:b7:7f:70:58:5e:44:42:9d:82:ce:3b:5c:fe:a2:93:4c:f0:
         5a:55:f1:04:9a:6c:6a:6b:7a:7a:27:3e:00:89:b4:dd:78:28:
         36:bc:0e:b2:47:ac:e4:3e:d3:a4:bc:0f:a2:83:79:f6:1c:02:
         e7:12:6a:68:fe:4b:01:3b:dc:9b:bd:c4:d0:6a:23:c8:bb:ab:
         00:54:3f:68:88:29:ea:c9:a7:c8:7f:35:f2:45:f3:40:a6:4b:
         41:e0:6e:99:7c:d4:94:63:a8:d6:c9:a6:dd:c0:33:a2:7f:fe:
         95:b9:69:75:68:20:e0:fe:f5:bc:35:92:5f:ad:d9:d6:7e:26:
         e6:0f:28:95:b8:2f:74:eb:30:bd:b1:89:74:cc:cc:88:da:1c:
         98:1d:e9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----