Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/a6ddec23d2264782d01ad64cfbf7870b75054213.roa
File:                     a6ddec23d2264782d01ad64cfbf7870b75054213.roa (raw, json)
Hash identifier:          dpCb1Hyy8jwQQxUTO7WmoNDXNElIMHf83qx9lTTS3Fg=
Subject key identifier:   DA:AA:45:05:76:A0:F1:4F:31:AE:F2:20:54:EA:4D:89:92:5D:0D:F7
Certificate issuer:       /CN=3ead659559971c8e6c9735bc245323c57109fb64
Certificate serial:       095962
Authority key identifier: FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ead659559971c8e6c9735bc245323c57109fb64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/a6ddec23d2264782d01ad64cfbf7870b75054213.roa
Signing time:             Wed 19 Jul 2023 20:38:41 +0000
ROA not before:           Tue 18 Jul 2023 20:38:40 +0000
ROA not after:            Sat 19 Jul 2025 20:38:40 +0000
asID:                     14080
IP address blocks:        2801:1c8::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612706 (0x95962)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ead659559971c8e6c9735bc245323c57109fb64
        Validity
            Not Before: Jul 18 20:38:40 2023 GMT
            Not After : Jul 19 20:38:40 2025 GMT
        Subject: CN=a6ddec23d2264782d01ad64cfbf7870b75054213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:40:48:5c:08:f8:8b:40:30:3e:35:14:6e:
                    a5:80:79:e0:cc:0c:b4:d4:c6:49:0d:04:f0:e2:c4:
                    3f:c4:ea:5c:6a:49:f7:88:cc:f7:06:fd:09:68:81:
                    34:16:dd:fd:e1:24:d0:49:72:29:36:f0:55:90:ae:
                    1c:79:79:ec:73:f8:ea:15:ec:5a:1c:41:44:dd:95:
                    33:23:1b:bc:77:e2:fc:f6:ed:5a:2b:a4:08:a4:bd:
                    3b:b6:1d:98:c8:a7:6e:56:e4:5f:6f:f6:b1:2b:c5:
                    e4:e3:56:c6:a6:88:3a:1f:b0:05:37:6b:97:f4:eb:
                    cc:f2:79:2d:e4:64:95:48:19:91:46:fb:fd:0d:32:
                    d3:a3:7f:a9:b5:8b:0d:e7:e9:1e:bf:d2:ca:e6:fd:
                    9b:32:c4:7c:76:23:a3:71:78:c9:f9:0a:66:c8:bc:
                    f7:6c:42:d7:ed:ac:60:ae:6d:3a:93:4f:d5:fe:c4:
                    05:9d:c5:54:05:e7:a7:0c:59:d5:57:b8:e6:91:1f:
                    f0:66:b2:58:11:33:63:06:c3:1b:c1:d4:3c:70:71:
                    67:07:ec:0b:cb:4c:02:70:c3:02:4c:14:5d:bb:9e:
                    2c:d4:e7:8f:e3:ad:ad:14:4a:27:50:53:d2:69:9d:
                    43:94:f7:e7:76:9f:41:69:4d:9a:d4:9f:ec:f5:d2:
                    13:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AA:45:05:76:A0:F1:4F:31:AE:F2:20:54:EA:4D:89:92:5D:0D:F7
            X509v3 Authority Key Identifier:
                keyid:FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ead659559971c8e6c9735bc245323c57109fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/a6ddec23d2264782d01ad64cfbf7870b75054213.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/3ead659559971c8e6c9735bc245323c57109fb64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c8::/41

    Signature Algorithm: sha256WithRSAEncryption
         11:24:92:8d:d4:c4:50:c9:60:d6:a9:a6:79:db:a3:c3:75:c0:
         31:16:5e:3f:ee:9b:0e:14:e2:b7:2b:35:ac:54:bb:0c:4d:99:
         d1:6d:d2:3b:ac:cc:da:7f:f4:48:25:fc:3e:27:2a:7b:8b:90:
         b7:e4:44:bd:73:cb:b0:1a:97:b1:dd:60:c0:7c:21:cc:08:a3:
         bd:7e:b5:4d:25:2d:d3:e6:22:b5:b3:45:32:b6:23:12:2a:e8:
         3e:bf:dd:97:f4:6e:b0:98:81:2c:7c:8d:d7:62:4d:cd:23:15:
         49:9e:e9:6d:55:5f:61:43:cc:b2:e6:67:4e:52:42:35:72:03:
         2c:c5:aa:3a:8f:4e:92:84:10:f3:63:2b:6f:e6:6a:17:b7:a4:
         8b:31:10:50:c3:9d:e9:d5:d2:e8:33:e4:69:d9:48:48:e2:e1:
         22:ba:bf:cb:6b:92:92:29:64:28:1e:63:0d:e0:08:f8:7c:8e:
         a5:91:22:dc:01:3d:7e:d6:34:cc:d3:52:73:0d:60:a5:40:77:
         f7:f8:01:f4:50:c4:6a:64:44:46:ab:f9:da:f4:c6:ce:6d:9f:
         1b:9e:c7:98:76:d2:7f:c5:b1:44:46:92:e4:cf:0f:5a:9d:43:
         50:b9:0d:dc:d7:61:9e:f0:16:0a:08:d4:a9:b8:b1:26:22:63:
         ac:3e:2b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----