Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c2a57bc2-e1fa-48a7-8a04-573edbc9c6a7/53b1207affdb067469d5ee6a665d182cc65536bc.roa
File:                     53b1207affdb067469d5ee6a665d182cc65536bc.roa (raw, json)
Hash identifier:          7l6VxkYxgg2K9spd8tHRfPr8cBoyc6dbYI4CX7VIzIQ=
Subject key identifier:   1F:00:9E:14:3C:88:14:01:8F:BF:D4:F5:EA:CD:C7:CD:9D:B9:F1:EC
Certificate issuer:       /CN=5ba8a9b59c8945a662e21cd46811ed814369fe6f
Certificate serial:       11BCDB
Authority key identifier: 24:94:19:9B:9C:04:78:26:7C:0C:2A:E9:B8:25:56:93:AD:AD:EA:92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ba8a9b59c8945a662e21cd46811ed814369fe6f.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c2a57bc2-e1fa-48a7-8a04-573edbc9c6a7/53b1207affdb067469d5ee6a665d182cc65536bc.roa
Signing time:             Tue 26 Sep 2023 08:30:00 +0000
ROA not before:           Mon 25 Sep 2023 08:30:00 +0000
ROA not after:            Wed 24 Sep 2025 08:30:00 +0000
asID:                     267788
IP address blocks:        2801:15a::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1162459 (0x11bcdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ba8a9b59c8945a662e21cd46811ed814369fe6f
        Validity
            Not Before: Sep 25 08:30:00 2023 GMT
            Not After : Sep 24 08:30:00 2025 GMT
        Subject: CN=53b1207affdb067469d5ee6a665d182cc65536bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:07:2c:5f:eb:f5:05:14:b2:18:2d:fd:f5:14:
                    27:73:d4:25:e2:6c:aa:06:6d:83:1a:18:ca:68:5f:
                    57:93:2b:13:8d:e1:d3:d0:aa:2f:04:8c:a8:4e:43:
                    67:2d:2c:07:bb:e8:5d:eb:24:87:55:d1:87:7b:fd:
                    83:52:13:e8:46:70:f3:a0:94:e0:da:1c:79:60:29:
                    78:90:4f:9f:9e:c9:a4:dd:79:22:b4:c1:9f:d3:04:
                    f1:ca:0f:de:87:c8:67:48:c0:9f:b8:ef:d6:4f:53:
                    75:3b:0a:c2:c5:02:11:41:29:69:55:dc:04:87:cf:
                    ce:3a:eb:72:6a:6d:71:81:5c:09:8b:de:11:39:50:
                    ef:c7:8d:7c:06:9e:d9:57:eb:34:70:77:d6:43:94:
                    6c:f5:aa:f7:a7:19:77:ba:36:cf:da:df:9b:31:ea:
                    7a:20:b3:5b:b5:de:26:af:20:0c:45:0a:2b:e5:26:
                    b9:38:dc:28:54:0c:14:61:b8:2e:f4:24:42:d3:8b:
                    de:66:84:d3:4c:09:91:ff:eb:f8:f2:49:db:7b:87:
                    a8:2c:58:69:33:bc:2d:87:58:52:90:6b:e4:09:14:
                    a8:a7:f0:45:2e:f7:0f:ea:a8:61:4a:e3:7b:f2:55:
                    f6:81:04:b2:e2:c7:14:1b:91:8a:21:e2:4c:09:1b:
                    fa:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:00:9E:14:3C:88:14:01:8F:BF:D4:F5:EA:CD:C7:CD:9D:B9:F1:EC
            X509v3 Authority Key Identifier:
                keyid:24:94:19:9B:9C:04:78:26:7C:0C:2A:E9:B8:25:56:93:AD:AD:EA:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ba8a9b59c8945a662e21cd46811ed814369fe6f.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c2a57bc2-e1fa-48a7-8a04-573edbc9c6a7/53b1207affdb067469d5ee6a665d182cc65536bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c2a57bc2-e1fa-48a7-8a04-573edbc9c6a7/5ba8a9b59c8945a662e21cd46811ed814369fe6f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15a::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:2d:b7:ca:18:f2:65:6a:c1:b4:e7:87:52:3c:de:03:38:e0:
         f1:f1:a3:a9:6d:b0:53:2b:c1:5a:36:d5:8c:d8:a0:29:1a:3d:
         a9:4f:83:fb:ca:da:69:bb:88:84:21:a2:ff:01:7a:6f:63:f7:
         4a:83:e8:d2:02:dd:1b:32:2d:89:b7:1d:e4:11:d9:ae:5c:3d:
         49:28:e9:63:8b:61:25:8c:55:24:3d:24:eb:e7:13:d8:ba:4d:
         0c:c3:4b:68:78:60:bf:23:cd:66:eb:c7:bd:c0:6e:16:96:3b:
         46:29:74:8e:e7:c5:e4:c9:38:9d:de:41:c3:de:d4:1e:53:d4:
         6d:b2:01:c7:05:32:55:c9:2d:e0:3a:a1:e4:a2:7a:a1:fe:5f:
         68:88:98:17:83:e1:1d:6b:09:c4:09:8e:a5:21:b1:f5:1f:1a:
         f6:e6:c1:f9:3b:5c:1f:0f:9d:de:6a:d9:c0:00:59:7c:ef:7b:
         31:95:cf:cd:16:bd:0c:ae:05:4c:16:7a:1a:fd:17:08:cf:49:
         5f:0a:9a:33:6f:e0:7e:56:07:e4:e3:49:0a:77:15:02:63:3a:
         71:13:6f:74:80:45:59:72:f7:61:aa:16:e3:03:86:7d:7a:2f:
         5a:ce:3b:75:24:c2:99:66:c4:e1:0c:2a:a4:4f:dd:6c:17:8b:
         d6:be:7d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----