Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/ad7f0bdeff0bc2696cc56643a2fc2c52175abb69.roa
File:                     ad7f0bdeff0bc2696cc56643a2fc2c52175abb69.roa (raw, json)
Hash identifier:          C13dluZfNSL2owVyJQsoND0C1YdIczJRV5UVS/rf1gg=
Subject key identifier:   0E:A8:6F:02:0E:D6:BC:60:D0:5D:60:E5:18:12:6C:29:0A:C8:9D:78
Certificate issuer:       /CN=3ead659559971c8e6c9735bc245323c57109fb64
Certificate serial:       0F7F4A
Authority key identifier: FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ead659559971c8e6c9735bc245323c57109fb64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/ad7f0bdeff0bc2696cc56643a2fc2c52175abb69.roa
Signing time:             Mon 01 Apr 2024 20:50:43 +0000
ROA not before:           Mon 01 Apr 2024 20:50:43 +0000
ROA not after:            Wed 01 Apr 2026 20:50:43 +0000
asID:                     14080
IP address blocks:        2801:1c8::/41 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015626 (0xf7f4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ead659559971c8e6c9735bc245323c57109fb64
        Validity
            Not Before: Apr  1 20:50:43 2024 GMT
            Not After : Apr  1 20:50:43 2026 GMT
        Subject: CN=ad7f0bdeff0bc2696cc56643a2fc2c52175abb69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:86:20:c1:93:71:65:42:79:04:79:82:d4:0c:
                    a3:17:c4:5d:48:82:82:3c:dc:4a:0e:a3:8b:c0:28:
                    45:1c:3e:f2:ac:45:4f:49:00:79:dc:f4:1b:6b:0c:
                    6e:12:2b:f8:16:2f:04:ea:33:0e:75:bb:bf:ba:18:
                    52:8c:19:0c:ef:e8:b6:70:e9:f6:f8:f7:9b:18:d2:
                    be:a5:13:c4:c8:f8:98:2c:3b:15:63:59:d2:45:6f:
                    8f:6f:60:dc:35:5d:59:b8:ea:ef:20:e0:79:72:55:
                    b7:97:3f:1f:3a:85:4e:d0:76:46:c3:16:79:fb:41:
                    eb:e9:ed:67:71:2c:eb:b1:46:80:7d:be:77:a3:9d:
                    26:44:0d:e0:99:94:a1:02:a6:1a:43:07:d8:ad:21:
                    d0:21:92:0a:96:cc:53:0e:6e:a8:1e:f8:07:d1:e9:
                    68:36:42:64:4c:a1:84:16:b5:b4:dc:01:22:20:34:
                    e2:81:71:c6:a9:51:b8:a7:39:0f:1a:f1:b1:11:4c:
                    36:77:9b:7f:c7:2d:4f:72:10:09:9c:8d:53:0d:b5:
                    d8:e3:57:08:19:8f:c4:2a:4d:ab:ff:21:72:45:2b:
                    f1:bd:0a:b0:e8:0e:51:25:40:f3:81:3d:da:39:d6:
                    c1:3f:9a:39:12:62:f8:77:df:9c:95:12:41:6d:c2:
                    c6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A8:6F:02:0E:D6:BC:60:D0:5D:60:E5:18:12:6C:29:0A:C8:9D:78
            X509v3 Authority Key Identifier:
                keyid:FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ead659559971c8e6c9735bc245323c57109fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/ad7f0bdeff0bc2696cc56643a2fc2c52175abb69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/3ead659559971c8e6c9735bc245323c57109fb64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c8::/41

    Signature Algorithm: sha256WithRSAEncryption
         31:fa:bf:c5:0a:58:32:08:fe:cd:c1:99:0e:11:0d:d1:44:34:
         e1:73:9b:b0:42:98:9a:94:b0:20:11:ed:b9:a0:4a:86:25:44:
         d9:13:1f:22:63:ba:44:23:fe:1f:59:4c:21:f3:e5:b4:f8:54:
         c9:cf:32:95:c2:ec:67:d2:5d:c3:ad:e7:73:9b:df:3e:c8:64:
         3d:52:5f:e8:97:57:bb:ff:86:b9:cb:16:64:d8:0e:ca:53:37:
         16:67:2e:4c:45:0f:5d:fd:9b:5c:43:3a:b9:4a:8d:f7:fb:91:
         8d:95:3b:eb:44:79:7f:3e:2d:ef:f0:9d:f4:56:91:82:80:0d:
         36:1a:57:46:b0:48:e1:d9:e4:6b:6e:4a:4d:0d:74:04:12:a2:
         35:6f:20:d2:67:d9:61:64:ea:42:a1:df:1a:2e:b5:88:c3:0c:
         f4:7a:f9:7e:5f:16:c2:08:7e:52:35:5a:30:58:14:20:69:a9:
         36:82:a1:f9:55:22:f6:9e:e0:6e:24:51:cc:5c:7b:e2:6c:90:
         1b:a6:e4:11:10:24:ac:4d:e2:51:5b:bb:09:74:1f:ff:6f:7d:
         5c:19:31:ba:2e:ba:c3:ad:de:97:9a:61:05:af:48:49:c1:26:
         61:96:7a:3d:f5:f8:e2:87:21:a5:2a:ba:37:76:dc:88:6e:63:
         6b:30:41:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----