Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c7350721-6bb9-41d2-a1c8-1ae094aa670a/6e79abea7c9e5ec76599c917f5a98776138e09ce.roa
File:                     6e79abea7c9e5ec76599c917f5a98776138e09ce.roa (raw, json)
Hash identifier:          YARi5SIjyrIyHjlSGXkIOTIkniLLTgf/z5bYZncfYpE=
Subject key identifier:   1F:F6:18:97:1C:DA:66:DC:16:B5:3D:19:6F:EC:D3:97:47:C2:89:2D
Certificate issuer:       /CN=5a99a0ffe0ed766481d9257efbe6bc1cc9368dff
Certificate serial:       3DFF
Authority key identifier: 05:AE:05:83:BC:DC:2B:7D:BE:3A:2F:B2:F1:D2:49:55:02:1A:E5:23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a99a0ffe0ed766481d9257efbe6bc1cc9368dff.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c7350721-6bb9-41d2-a1c8-1ae094aa670a/6e79abea7c9e5ec76599c917f5a98776138e09ce.roa
Signing time:             Fri 22 Mar 2024 13:36:59 +0000
ROA not before:           Fri 22 Mar 2024 13:36:59 +0000
ROA not after:            Sun 22 Mar 2026 13:36:59 +0000
asID:                     270133
IP address blocks:        2806:3d5::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15871 (0x3dff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a99a0ffe0ed766481d9257efbe6bc1cc9368dff
        Validity
            Not Before: Mar 22 13:36:59 2024 GMT
            Not After : Mar 22 13:36:59 2026 GMT
        Subject: CN=6e79abea7c9e5ec76599c917f5a98776138e09ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ab:d9:e7:74:ac:1a:1d:f6:47:c7:f5:d0:f9:
                    ab:7c:46:55:be:ee:f7:cf:0a:bf:1b:6b:8d:92:92:
                    9f:b8:7c:aa:a0:d5:bf:59:39:ff:6c:71:a0:9e:da:
                    ea:d9:42:a1:08:df:d5:56:8d:4e:e3:0c:4f:ba:e9:
                    d4:ad:e2:5e:d0:70:0e:ad:f2:55:6e:bb:7a:d1:f3:
                    88:33:77:28:96:ba:5a:fa:54:90:a0:6e:87:1b:b9:
                    1d:6f:0b:ab:e2:62:e9:26:98:39:72:49:43:e2:a9:
                    b9:20:42:17:40:d9:8f:7a:55:ca:b8:c9:14:f9:90:
                    6c:c5:fb:47:7e:77:0a:5e:11:8e:91:97:44:ae:8c:
                    4f:6b:66:91:d1:98:af:ac:a9:de:f8:e7:5a:5f:f3:
                    60:8f:34:fb:24:71:63:85:d7:be:5b:bf:da:47:01:
                    36:66:e7:16:05:c1:17:5b:b1:3a:e5:a7:40:92:37:
                    dc:6a:91:39:0e:fb:2f:c5:81:91:3e:9a:f7:7e:f7:
                    8a:aa:f5:19:a4:20:f6:bf:5f:92:f1:e0:2c:f1:ab:
                    52:5d:b3:c7:9d:83:6a:e6:45:50:a6:8a:57:2e:47:
                    8e:54:de:00:c7:23:61:6c:26:52:f0:02:0d:de:6c:
                    87:a9:1a:ce:f6:c5:93:bf:ba:ae:a9:c2:65:12:68:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F6:18:97:1C:DA:66:DC:16:B5:3D:19:6F:EC:D3:97:47:C2:89:2D
            X509v3 Authority Key Identifier:
                keyid:05:AE:05:83:BC:DC:2B:7D:BE:3A:2F:B2:F1:D2:49:55:02:1A:E5:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a99a0ffe0ed766481d9257efbe6bc1cc9368dff.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c7350721-6bb9-41d2-a1c8-1ae094aa670a/6e79abea7c9e5ec76599c917f5a98776138e09ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c7350721-6bb9-41d2-a1c8-1ae094aa670a/5a99a0ffe0ed766481d9257efbe6bc1cc9368dff.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3d5::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:d0:a0:79:4f:4c:2c:40:f4:bc:cf:59:4c:a2:ec:b3:e9:78:
         c4:f0:18:7d:7b:ca:d1:18:37:2e:5b:1c:fa:99:0b:96:fd:42:
         bb:17:47:3e:27:3b:4f:9f:5a:83:0c:1c:82:08:7c:6c:37:d3:
         75:83:a9:8f:f6:30:c6:e7:86:04:25:75:bd:73:89:2f:d9:4f:
         16:2f:83:70:27:3c:25:ae:09:59:6a:75:9e:31:8a:cf:6e:29:
         7d:cd:fd:61:2e:82:d5:fc:e6:91:bf:bf:bd:01:70:ef:a4:69:
         bf:a6:2a:c4:b2:a9:f4:6e:ab:a5:33:02:6f:54:53:39:0d:0a:
         50:83:ac:ab:85:ee:7b:44:8f:e9:ff:01:1d:cf:81:39:66:df:
         a5:97:07:ee:95:64:89:2c:a7:d1:ad:4d:82:f2:63:aa:d4:9f:
         3a:10:06:c8:40:59:09:9f:e6:eb:62:1c:22:bb:8d:32:a3:83:
         e6:ba:98:67:06:3e:36:ae:af:4a:42:e8:e7:52:d6:89:98:7f:
         a4:03:38:a4:1f:c2:3e:9e:e7:43:5a:0d:15:af:32:b9:19:c0:
         13:34:b7:d5:d4:ff:7f:be:52:b5:a0:49:03:84:95:8c:b4:73:
         db:3c:b4:9c:b7:f9:32:f8:2b:a5:61:df:27:69:21:09:b3:04:
         aa:5d:27:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----