Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/27f01f2e6d32b796a62170094ced7e874500466a.roa
File:                     27f01f2e6d32b796a62170094ced7e874500466a.roa (raw, json)
Hash identifier:          vcVtUyNiGuxTBmUe/FeLPKJcZzigazvHAyK6KmcH15I=
Subject key identifier:   92:CB:65:00:FD:B9:61:1D:C8:1C:4E:20:F1:30:F4:A4:93:F4:7B:32
Certificate issuer:       /CN=3ead659559971c8e6c9735bc245323c57109fb64
Certificate serial:       094C72
Authority key identifier: FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ead659559971c8e6c9735bc245323c57109fb64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/27f01f2e6d32b796a62170094ced7e874500466a.roa
Signing time:             Tue 18 Jul 2023 20:41:06 +0000
ROA not before:           Mon 17 Jul 2023 20:41:06 +0000
ROA not after:            Fri 18 Jul 2025 20:41:06 +0000
asID:                     26611
IP address blocks:        2801:1c8::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609394 (0x94c72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ead659559971c8e6c9735bc245323c57109fb64
        Validity
            Not Before: Jul 17 20:41:06 2023 GMT
            Not After : Jul 18 20:41:06 2025 GMT
        Subject: CN=27f01f2e6d32b796a62170094ced7e874500466a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c9:73:99:a2:3a:75:25:05:5a:ce:15:31:f3:
                    ca:54:91:2e:e4:46:59:ce:ea:15:f7:91:ff:79:72:
                    eb:46:56:f3:c3:0c:76:70:fd:a6:2f:30:39:60:d3:
                    9f:1d:ab:71:22:ff:c5:23:a5:02:1a:34:5b:b5:dd:
                    cc:6b:db:94:74:54:16:62:da:8f:aa:3f:2e:6b:be:
                    6e:c1:43:5f:d2:c7:74:6e:2f:dc:e0:6e:ad:a6:13:
                    97:bc:d2:5d:c6:67:aa:a0:a7:be:42:41:90:c6:1d:
                    12:bc:75:fd:90:6f:93:0e:b9:5c:99:13:37:9d:24:
                    a2:91:29:56:5e:d8:98:eb:2f:82:16:42:89:0c:e9:
                    bf:8e:de:ac:2a:cb:0f:b8:0d:d2:1e:73:a9:08:ba:
                    4c:c8:79:fe:f2:b9:37:0f:e1:99:f4:93:fe:b1:b5:
                    f1:85:d5:6c:e1:e8:75:12:04:39:83:47:8b:57:b2:
                    e1:61:10:90:a9:d7:8f:32:d9:e0:0d:c9:ad:7d:b2:
                    fb:c4:47:e3:0c:53:97:50:62:c3:99:77:d2:94:57:
                    e1:5e:fa:60:54:14:30:7a:ac:d0:8b:36:25:d0:55:
                    16:aa:dc:50:c8:62:d9:46:48:cb:66:42:bd:6b:9e:
                    7c:d0:66:63:09:22:37:3c:e1:30:b1:63:6d:ec:1a:
                    d9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CB:65:00:FD:B9:61:1D:C8:1C:4E:20:F1:30:F4:A4:93:F4:7B:32
            X509v3 Authority Key Identifier:
                keyid:FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ead659559971c8e6c9735bc245323c57109fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/27f01f2e6d32b796a62170094ced7e874500466a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/3ead659559971c8e6c9735bc245323c57109fb64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c8::/41

    Signature Algorithm: sha256WithRSAEncryption
         8b:3f:b2:d3:27:2a:6f:97:e0:b7:c0:29:0b:d3:d7:45:83:47:
         3e:84:18:c7:9e:af:aa:71:3d:de:7d:c2:d9:c9:4b:5b:41:72:
         50:fc:57:a5:a9:9b:e6:76:8e:6b:0f:b3:35:48:46:ee:6c:35:
         6e:23:b8:17:85:03:ef:8f:61:62:2f:51:4e:da:d9:6e:b6:99:
         f3:0b:99:8d:8f:02:c9:85:99:b2:8d:ef:c8:41:24:20:90:eb:
         f9:88:04:c0:4d:ea:ad:56:fb:20:d3:85:5d:57:59:70:86:f8:
         51:46:d5:42:ab:78:4e:68:5f:1f:43:c9:4f:3a:e4:e0:f1:d7:
         5f:82:3e:fe:4c:ee:b2:b4:06:09:15:70:88:cd:eb:0b:9d:3c:
         13:6d:45:56:d1:5b:bc:1b:21:96:e5:f6:db:0c:8a:b3:4a:8f:
         05:93:28:6d:e7:26:04:ad:e9:f2:9b:b8:e4:8f:e3:ed:c6:2e:
         c4:1d:f6:a2:15:98:11:25:8d:c0:8b:3a:84:f7:23:0f:bf:80:
         fa:7a:8c:45:6a:41:c1:5b:d5:16:a8:8f:e9:4a:0b:81:34:59:
         85:12:6b:5d:b4:0c:ec:58:22:f4:aa:62:20:5f:99:08:e7:5c:
         76:90:da:0f:4c:f3:81:27:1b:4a:2f:9c:0b:a2:ac:ee:14:3f:
         30:5d:0e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----