Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/dd12975cf3216474a531ac8bf093002675f7fd67.roa
File:                     dd12975cf3216474a531ac8bf093002675f7fd67.roa (raw, json)
Hash identifier:          B8AT4TfOCfzDWObUyrqOVeNyAzXKsgYyNlAN7MqZf6w=
Subject key identifier:   B3:8C:08:0A:B9:66:FE:95:B3:50:E2:6D:0A:59:D3:A2:7A:64:9D:45
Certificate issuer:       /CN=3ead659559971c8e6c9735bc245323c57109fb64
Certificate serial:       0ACE46
Authority key identifier: FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ead659559971c8e6c9735bc245323c57109fb64.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/dd12975cf3216474a531ac8bf093002675f7fd67.roa
Signing time:             Wed 20 Sep 2023 16:05:25 +0000
ROA not before:           Tue 19 Sep 2023 16:05:25 +0000
ROA not after:            Sat 20 Sep 2025 16:05:25 +0000
asID:                     13489
IP address blocks:        2801:1c8:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708166 (0xace46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ead659559971c8e6c9735bc245323c57109fb64
        Validity
            Not Before: Sep 19 16:05:25 2023 GMT
            Not After : Sep 20 16:05:25 2025 GMT
        Subject: CN=dd12975cf3216474a531ac8bf093002675f7fd67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:fd:5f:80:dd:4b:83:8d:1c:d6:cb:8e:46:
                    4f:46:35:fb:3e:5d:9b:6d:42:2b:9c:f9:dd:f0:36:
                    53:e0:a9:ba:34:50:ad:90:9f:4b:ad:85:2d:e6:35:
                    00:6a:6c:4b:e9:27:d4:e2:f3:ae:7c:ee:32:18:02:
                    17:31:de:7c:9a:98:9d:b8:1a:8c:38:9c:46:2f:80:
                    27:f6:62:fa:66:dd:69:0f:aa:8b:d2:ac:3c:8b:30:
                    2e:96:56:db:d1:4c:71:09:cf:5d:a7:bd:d5:76:cd:
                    46:50:06:58:cf:8a:1a:8a:e9:29:d8:c0:f0:27:a0:
                    b5:b9:9e:59:7a:2b:ce:3f:3c:d2:e6:01:b8:a2:d8:
                    14:ee:44:57:a6:b1:c0:92:fa:e0:0c:29:7d:cd:bb:
                    37:49:1d:f2:5d:d6:e5:64:9f:57:48:8f:02:a6:df:
                    6f:be:70:a1:e8:b6:e4:73:f0:94:d8:97:d3:b5:a6:
                    ea:43:ef:20:bf:61:7d:0f:40:d6:05:22:44:40:c9:
                    bb:ec:73:b8:5a:b0:a7:c9:1d:a3:25:3b:f5:35:33:
                    43:83:3c:60:5c:08:42:e7:c0:c0:41:41:b8:a6:10:
                    ae:f7:54:f0:da:26:7e:1b:e2:5c:ca:c8:c9:de:6c:
                    b6:30:06:92:ac:1f:e7:cb:f4:76:83:6d:c8:be:33:
                    e9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:8C:08:0A:B9:66:FE:95:B3:50:E2:6D:0A:59:D3:A2:7A:64:9D:45
            X509v3 Authority Key Identifier:
                keyid:FF:55:E0:A2:13:1B:59:A8:FA:6F:4C:26:E2:4C:50:78:90:F8:D6:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ead659559971c8e6c9735bc245323c57109fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/dd12975cf3216474a531ac8bf093002675f7fd67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3c299e7-a66e-4d3f-b5d6-a6c1bcc8c22f/3ead659559971c8e6c9735bc245323c57109fb64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c8:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         45:02:bf:7a:e0:ee:be:00:fd:f8:b3:cb:21:f8:76:c9:be:78:
         b7:7f:40:db:4e:48:34:cc:2f:ef:9c:0e:28:a8:73:46:35:48:
         c4:dd:63:b7:96:6a:50:c6:2e:96:e1:b8:cd:5b:88:70:c2:1e:
         8d:9c:76:05:86:79:3c:dc:b6:dd:50:df:44:02:72:3f:56:40:
         42:fc:3e:3f:f9:15:c9:92:4b:20:d8:8a:c0:05:82:28:63:19:
         06:6e:2c:6f:ad:d3:f4:6f:51:b2:dd:72:2e:0b:35:52:4f:5b:
         48:d6:28:10:45:31:2b:a6:92:2a:a5:25:95:ff:a7:91:32:1c:
         83:d6:d6:69:6c:f9:20:78:4a:3b:ac:aa:b4:81:2a:58:94:f0:
         b5:b4:b8:00:ce:18:25:2f:93:22:37:40:ed:9b:ce:08:1f:82:
         30:d1:85:52:72:2a:4a:2f:9f:c3:e4:6e:ed:4e:02:0c:65:ce:
         aa:2d:1c:a6:5a:f3:b6:69:af:de:d0:b3:05:28:11:41:6e:77:
         f2:38:73:26:d6:7a:51:58:5f:29:91:87:ef:d4:c1:f9:74:f0:
         5a:48:6b:67:27:84:ae:0d:f4:ac:b9:50:1c:18:8c:0b:ca:2d:
         b1:d8:fd:92:be:6f:52:ab:0f:cd:bd:ba:e6:3f:85:54:66:74:
         08:b3:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----