Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/f3dd9f754182d0a0203d1691ae2caf3e7bea8def.roa
File:                     f3dd9f754182d0a0203d1691ae2caf3e7bea8def.roa (raw, json)
Hash identifier:          e+L/g8HJkD1WEQyXOE0kS319FyRjxs+kCISzh9tqg6M=
Subject key identifier:   90:75:0E:E1:66:20:45:60:9F:65:FF:17:96:CD:77:68:75:53:07:61
Certificate issuer:       /CN=75efa7e220921478f459230041e65a4f7dc20ea6
Certificate serial:       273561
Authority key identifier: 6A:F0:47:DF:D7:F3:CF:31:79:98:C6:27:10:79:7E:21:32:E4:0B:11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75efa7e220921478f459230041e65a4f7dc20ea6.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/f3dd9f754182d0a0203d1691ae2caf3e7bea8def.roa
Signing time:             Mon 26 Feb 2024 16:53:59 +0000
ROA not before:           Mon 26 Feb 2024 16:53:59 +0000
ROA not after:            Thu 26 Feb 2026 16:53:59 +0000
asID:                     10269
IP address blocks:        2800:410::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2569569 (0x273561)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75efa7e220921478f459230041e65a4f7dc20ea6
        Validity
            Not Before: Feb 26 16:53:59 2024 GMT
            Not After : Feb 26 16:53:59 2026 GMT
        Subject: CN=f3dd9f754182d0a0203d1691ae2caf3e7bea8def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:70:f9:10:8c:fc:0b:6b:25:d4:73:33:43:42:
                    7e:dd:f2:2d:cd:13:b6:bf:73:20:ea:4d:de:56:af:
                    ce:a5:0d:39:e8:47:88:92:82:a1:cb:21:71:f4:a1:
                    1f:89:3d:f4:78:fa:5e:b8:e6:6f:64:0a:d9:b2:66:
                    89:1d:ea:c4:c1:79:75:36:9b:f6:e7:05:08:1a:d5:
                    a7:68:6f:b6:8a:91:6f:c1:82:8b:be:83:9d:48:1f:
                    7f:3b:ff:2d:f5:23:27:cd:5e:ae:fb:e8:5d:a4:42:
                    ff:38:ca:e3:4c:0e:3e:88:7e:c6:00:9a:3c:23:87:
                    7e:5c:ef:9c:68:cb:e4:9d:c2:29:ab:83:a3:bf:ca:
                    10:91:f0:bf:4f:e7:84:24:c5:bd:9c:b5:97:78:8f:
                    43:39:bf:4f:65:56:f5:b9:c4:3e:a6:75:c0:5e:55:
                    97:ae:77:0f:aa:5c:b1:9c:e0:b1:49:5a:6d:90:df:
                    4b:7a:4a:2a:94:fc:1e:50:d9:9e:19:0c:db:b2:79:
                    f8:27:14:b7:0d:fe:42:75:4d:4d:28:f3:7a:2d:46:
                    81:13:5f:42:45:86:56:8b:e7:bc:f5:10:96:0c:2d:
                    e7:b6:77:d0:e3:17:6f:e0:f8:ef:1f:cf:1c:4e:69:
                    29:d2:ad:4b:d1:06:55:82:34:ed:af:2d:cb:28:d1:
                    fd:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:75:0E:E1:66:20:45:60:9F:65:FF:17:96:CD:77:68:75:53:07:61
            X509v3 Authority Key Identifier:
                keyid:6A:F0:47:DF:D7:F3:CF:31:79:98:C6:27:10:79:7E:21:32:E4:0B:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75efa7e220921478f459230041e65a4f7dc20ea6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/f3dd9f754182d0a0203d1691ae2caf3e7bea8def.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c944eff2-c01a-43ac-b23c-71ab3115d219/75efa7e220921478f459230041e65a4f7dc20ea6.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:410::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:16:62:03:f2:44:87:7a:fe:6d:6d:db:be:2e:3d:2e:dd:c8:
         6e:f8:b4:8f:f5:86:a0:36:ba:8a:07:41:3e:3f:d8:c0:b0:d2:
         13:3f:00:35:fd:1e:aa:76:19:99:b2:57:79:cc:23:4f:17:2d:
         86:40:73:18:e0:9d:ff:eb:cd:28:4e:a4:73:e4:55:72:65:d9:
         e0:26:d2:c6:b9:a7:88:88:b4:ed:a1:5d:83:1e:75:07:54:27:
         b0:83:00:12:d7:c5:32:3c:91:5e:a0:90:92:86:f5:3b:69:a1:
         b2:f2:17:80:a4:5b:11:b0:38:5d:3b:c7:49:68:25:cb:3e:dd:
         9a:5e:3b:c4:c3:a5:2b:e9:ca:b1:99:3a:31:34:87:bd:ce:f0:
         d6:69:e2:a7:70:11:8a:3d:46:d6:d7:9b:69:64:61:88:3f:d0:
         4f:e6:b6:59:76:d2:8a:8d:78:ea:dd:c9:05:bf:a3:4f:52:89:
         53:9b:2f:00:50:c7:1d:5d:b5:fa:a2:91:12:df:ea:5d:01:8a:
         3b:ad:8d:7b:37:a6:10:1a:64:22:13:1d:e4:ab:c3:5e:b4:23:
         f1:bc:22:7f:1c:97:8a:24:02:27:b2:40:21:b7:2d:87:57:46:
         cd:68:f8:7f:df:7d:ba:c5:3f:8e:ec:5c:c7:20:15:37:47:94:
         7c:c8:f6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----