Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/1f84f6e0fb88d1f584e1738ac7536fe1148f52f4.roa
File:                     1f84f6e0fb88d1f584e1738ac7536fe1148f52f4.roa (raw, json)
Hash identifier:          +vBAHOQRBBGwO1EzL+prjtqCvUHNxmsSvc9e4aO5B6o=
Subject key identifier:   F5:B6:E9:3D:57:A6:C2:4D:04:45:B3:DF:4F:A5:F5:52:AA:34:F8:4A
Certificate issuer:       /CN=75efa7e220921478f459230041e65a4f7dc20ea6
Certificate serial:       20D0CE
Authority key identifier: 6A:F0:47:DF:D7:F3:CF:31:79:98:C6:27:10:79:7E:21:32:E4:0B:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75efa7e220921478f459230041e65a4f7dc20ea6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/1f84f6e0fb88d1f584e1738ac7536fe1148f52f4.roa
Signing time:             Tue 06 Jun 2023 05:50:22 +0000
ROA not before:           Mon 05 Jun 2023 05:50:22 +0000
ROA not after:            Fri 06 Jun 2025 05:50:22 +0000
asID:                     10269
IP address blocks:        2800:410::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2150606 (0x20d0ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75efa7e220921478f459230041e65a4f7dc20ea6
        Validity
            Not Before: Jun  5 05:50:22 2023 GMT
            Not After : Jun  6 05:50:22 2025 GMT
        Subject: CN=1f84f6e0fb88d1f584e1738ac7536fe1148f52f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:9f:73:46:0f:f3:89:b3:df:1c:b2:43:04:
                    13:89:2c:1d:16:76:3d:bb:b2:25:85:5f:43:72:6e:
                    c1:75:a9:72:19:54:e9:f5:41:8f:a8:dc:8a:96:da:
                    0c:a7:2d:ac:99:8a:63:0a:30:0e:d8:5d:17:32:9d:
                    1f:32:97:12:a5:30:8f:ec:44:d2:d6:e0:a2:50:2d:
                    2f:8f:cb:af:f7:e8:b5:ab:fc:70:0e:2f:29:fc:2b:
                    da:51:c7:39:ea:ae:f3:95:e0:ca:61:24:b3:e4:13:
                    26:cb:4d:d1:50:a9:a6:3f:eb:f7:87:bf:c5:c1:1c:
                    54:dc:67:22:04:10:27:c2:99:1b:e9:86:ca:1d:49:
                    99:06:fe:c5:03:f4:14:e1:7f:83:82:f4:b1:2e:f6:
                    f2:ee:31:82:95:a7:ef:c1:35:b9:43:d0:4b:b4:88:
                    d8:af:71:d3:e8:60:14:c5:dc:57:87:26:e1:df:ae:
                    24:f6:f5:1e:8f:69:12:af:2c:e9:79:a8:42:e3:89:
                    33:b5:de:8e:e5:0a:a7:98:93:7a:ac:6c:8b:9c:bc:
                    df:1d:fc:2d:3b:b4:bc:9b:78:21:96:8b:b4:d9:78:
                    79:a9:ae:32:eb:7d:31:42:51:2d:d0:28:b9:2a:66:
                    c5:7c:e2:54:45:3b:98:eb:59:d4:ab:96:0d:0f:9f:
                    e4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B6:E9:3D:57:A6:C2:4D:04:45:B3:DF:4F:A5:F5:52:AA:34:F8:4A
            X509v3 Authority Key Identifier:
                keyid:6A:F0:47:DF:D7:F3:CF:31:79:98:C6:27:10:79:7E:21:32:E4:0B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75efa7e220921478f459230041e65a4f7dc20ea6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/1f84f6e0fb88d1f584e1738ac7536fe1148f52f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/75efa7e220921478f459230041e65a4f7dc20ea6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:410::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:df:55:3c:66:a1:bc:c7:dd:ba:72:10:46:2e:28:f1:b7:0f:
         b6:df:22:1d:88:02:fd:4e:c2:5f:4f:0d:32:78:40:0f:9d:5e:
         02:75:49:ed:5b:91:d2:b6:d9:a5:33:0e:9f:82:7b:9f:14:0c:
         d0:2f:81:bf:de:fd:62:4d:aa:0a:ef:5c:ef:25:9e:1b:8f:11:
         30:6e:da:ac:63:5f:e7:e9:81:dc:7b:f8:e1:9a:97:9a:ea:01:
         69:77:76:08:59:00:60:49:4f:1b:c6:10:4f:23:79:d7:e1:8b:
         0e:1b:af:ea:3e:b5:84:b7:e5:05:ca:b3:e7:bc:a4:83:96:e4:
         31:1f:75:04:08:ee:63:3f:62:87:ea:c0:85:f3:3f:8f:71:d0:
         e8:99:fa:3b:27:c2:0f:bb:1a:5b:fe:9c:53:59:af:14:66:e8:
         6c:ca:35:2e:d4:27:25:22:38:29:5f:b7:ac:6a:6b:5a:04:06:
         da:f6:e7:a8:90:34:64:c1:c5:22:09:94:bc:11:6a:0c:07:c9:
         2c:7f:8b:04:08:97:ff:36:78:61:30:1c:7a:b5:ac:c8:6c:b9:
         0c:ea:13:e1:53:ad:4e:25:1d:c1:b9:20:52:40:e4:0b:95:54:
         45:bd:72:9a:51:4a:b5:ac:cb:48:35:4b:e9:5e:d4:e7:69:de:
         ce:55:9e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----