Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/4364466b430eebc4e93d32b64a3f881712c56645.roa
File:                     4364466b430eebc4e93d32b64a3f881712c56645.roa (raw, json)
Hash identifier:          8cfemrWYQRd98Wvjh9G6q6fl8qBnRl5G9paBUoUhrBo=
Subject key identifier:   AE:5D:1D:8D:77:5D:44:FB:7C:FC:90:E7:C5:54:B0:04:86:23:34:01
Certificate issuer:       /CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
Certificate serial:       26CF2F
Authority key identifier: DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/4364466b430eebc4e93d32b64a3f881712c56645.roa
Signing time:             Wed 30 Aug 2023 17:50:34 +0000
ROA not before:           Tue 29 Aug 2023 17:50:30 +0000
ROA not after:            Sat 30 Aug 2025 17:50:30 +0000
asID:                     263719
IP address blocks:        2800:680:11::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2543407 (0x26cf2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3580078f4f897fcfdbaa0d90c2ec6f460e33222
        Validity
            Not Before: Aug 29 17:50:30 2023 GMT
            Not After : Aug 30 17:50:30 2025 GMT
        Subject: CN=4364466b430eebc4e93d32b64a3f881712c56645
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:de:3b:e8:6b:2e:d4:d7:e7:e7:5b:c5:5d:10:
                    28:6a:19:59:fc:40:35:65:b2:ed:a9:cf:6b:11:02:
                    26:ab:22:6f:a6:90:ce:70:1a:e0:ab:ad:df:5d:43:
                    1d:03:dc:9d:fe:56:75:2d:d6:d9:90:f3:6c:5f:38:
                    5e:aa:f6:3e:81:b1:a0:b1:c0:71:01:4d:dd:72:e9:
                    40:f0:1d:73:5b:2b:4a:1c:4c:f3:95:03:e3:f0:58:
                    fb:d5:dc:21:4e:95:1a:06:70:17:7a:8d:20:ca:90:
                    76:ad:5c:50:c1:4b:86:0e:c8:d4:a9:61:e8:17:5e:
                    10:0f:7b:d4:ff:12:cd:2c:27:cf:7b:b1:79:76:00:
                    1d:bb:dc:da:f3:a2:eb:d9:d8:88:c9:05:05:f2:06:
                    c1:6f:7f:59:98:3f:d3:8b:1d:ef:ba:80:4f:69:96:
                    59:75:8c:52:6d:46:e5:76:5c:e8:da:26:ac:3d:8b:
                    8b:8e:27:19:67:22:e9:64:b6:58:e2:81:18:c4:11:
                    5a:f9:b2:e9:73:46:ba:0a:98:6f:be:64:02:f8:f2:
                    15:d3:ac:9a:ce:35:a0:ea:07:81:af:d0:09:a8:17:
                    c6:de:83:d0:93:9b:4e:55:f2:1e:0e:64:74:7f:a7:
                    e9:55:59:fc:e7:a0:68:df:5c:f4:c4:8a:21:6f:2e:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5D:1D:8D:77:5D:44:FB:7C:FC:90:E7:C5:54:B0:04:86:23:34:01
            X509v3 Authority Key Identifier:
                keyid:DF:C6:CA:8D:51:39:32:97:96:38:74:4C:37:8C:B3:A0:43:0E:95:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/4364466b430eebc4e93d32b64a3f881712c56645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c20b558a-89e0-4c9e-b6c8-d7c694632120/b3580078f4f897fcfdbaa0d90c2ec6f460e33222.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:680:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:f3:3f:b9:6a:ae:1c:8a:e0:e3:2f:e7:75:f1:10:5d:d4:7b:
         41:ab:c4:fe:6e:99:c0:21:8e:f7:3b:04:9d:66:70:9f:69:f9:
         ed:90:01:0c:3f:a9:65:c3:1b:74:50:9d:af:56:ea:a1:c9:af:
         8b:62:0b:a9:4b:d7:c0:6d:31:58:70:b5:7e:0b:39:7b:f0:1a:
         4a:1b:11:9c:02:fa:ee:b6:c8:55:e9:44:12:5e:f9:e1:54:6f:
         91:a2:46:f5:90:c1:49:e7:ae:c5:a5:39:76:fe:ef:b6:04:7a:
         d6:6d:1e:0a:6e:d9:61:4a:10:19:31:d6:40:e7:f4:27:84:0d:
         d4:60:78:a4:13:20:30:bf:27:ab:25:ea:4c:0b:48:1a:c1:f7:
         e1:a0:6f:6e:01:f6:88:7f:0a:b3:82:30:db:52:38:7a:ac:95:
         c0:fa:c4:e7:6a:cf:8b:fb:b0:46:c1:9b:9f:69:62:ab:70:10:
         9e:95:2b:3a:31:ce:80:56:22:93:e0:d0:20:e2:fb:80:9e:49:
         67:1e:3c:36:b1:9f:76:96:53:d1:d0:39:4c:d7:12:74:77:ba:
         71:43:09:43:01:77:b4:bb:f9:64:2d:7c:4f:e5:74:d4:c4:c1:
         00:a2:e8:73:85:c1:c6:43:6f:56:ac:39:65:a0:56:5d:8b:7c:
         d1:4c:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----